O projeto Sharingan é resultado da necessidade de detectar de forma rápida e automática, possíveis phishings, permitindo a detecção antes mesmo da publicação do site malicioso.

I wrote a simple script to extract usernames from Cisco ASA devices if they are vulnerable to CVE-2018-0296. You can check out this blog post for more technical details. This script would be useful…

A list of Free Software network services and web applications which can be hosted on your own servers - awesome-selfhosted/awesome-selfhosted

While doing background research on OpenVPN I stumbled upon an interesting question on Stack Exchange.

Everything you need to build and deploy your app on any platform including tools, services, training, and more. Join our free developer program.

What are the best recommendations to a completely vulnerable, easily pwnable network? Where do you start? what tools? what logging? #DFIR #BlueTeamTips

Although I have written multiple [/subdomain-takeover-starbucks/] posts
[/takeover-proofs/] about subdomain takeover, I realized that there aren't many
posts covering basics of subdomain takeover and the whole "problem statement."
This post aims to explain…

Ever took a personality test on Facebook? For years, anyone could have accessed your private information, friends, posts and photos.

Golang for Security Professionals. Contribute to parsiya/Hacking-with-Go development by creating an account on GitHub.

Intro

Claudio explores the Reddit API - from searching to authenticating with Oauth and downloading user data. Come tame this powerful beast!

Async PHP client API for the telegram MTProto protocol

Pure Python 3 MTProto API Telegram client library, for bots too! - LonamiWebs/Telethon