Open source Cobalt Strike alternatives

AMD Strix Halo RDMA Cluster Setup Guide

“Are they fairly reasonable performance from your experience? I'm about to move house and one of the things I want is better local AI. Ideally running a variety of smaller models at the same time, but occasionally one larger one. 128GB unified is pretty appealing, but for the…”

AMD Strix Halo RDMA Cluster Setup Guide

“Yes but it depends what you want. I didn't want to spend 8k (or now 11k) for a video card that I couldn't run without turning my home office into a boiler room and pay through the nose in electricity. I wanted a laptop that could run some medium sized LLMs locally and experiment…”

Trivy ecosystem supply chain temporarily compromised

“To be clear, this is a supply chain attack on everyone that uses Trivy, not a supply chain attack on Trivy. It was a direct attack on Trivy, exploiting components that Aqua had full control and responsibility for. The term “supply chain attack” has a connotation of “ it’s not…”

Trivy ecosystem supply chain temporarily compromised

“This attack seems predicated on a prior security incident ( ) at Trivy where they failed to successfully remediate and contain the damage. I think at this time, Trivy should’ve undertaken a full reassessment of risks and clearly isolated credentials and reduced risk…”

CyberChef – A Cyber Swiss Army Knife

“> Making all of these available and chaining all of these together wouldn't be a simple script. All transformations are readily available in the standard library of a language like Python or Ruby. And note that this CyberChef tool doesn't chain them together either. The user…”

CyberChef – The Cyber Swiss Army Knife

“protip: Open the JS console (F12 / inspect) and start the CyberChef challenges! 43 6f 6e 67 72 61 74 75 6c 61 74 69 6f 6e 73 2c 20 79 6f 75 20 68 61 76 65 20 63 6f 6d 70 6c 65 74 65 64 20 43 79 62 65 72 43 68 65 66 20 63 68 61 6c 6c 65 6e 67 65 20 23 31 21 0a 0a 54 68 69 73 20…”

XSS Context Analyzer

“XSS Context Analyzer”

[FEATURE] Add honeypot detection to nuclei

“### Describe your feature request Many hosts on shodan have all the matchers from nuclei in order to fool scanner (show each vuln as matching). we should have some sort of detection to match such scenarios and ignore their matches (at least inform user) ### Describe the use case…”

I wrote Gitleaks, now I'm maintaining Betterleaks

“8 years ago I wrote the first lines of Gitleaks and have been hooked on finding leaked secrets since. Gitleaks grew from a small project to a name recognized by developers and security folks. It sucks but I gotta take a step back from the project. I'll cut security releases but…”

Failed to start docker.service

“I used the curl script to install websploit. Went through most of it as planned. When it was done I went to do the docker start command and get Failed to start docker.service : Unit docker.service not found.”

SpiderFoot: OSINT collection and reconnaissance tool

“It is kind of an amalgamation of tools. Install it, sign up for the dozens and dozens of different external services it queries, configure those API's in SpiderFoot. Then fire away. It is really good, but some of the better visualizations, sorting options, reporting and diffing…”

SpiderFoot: OSINT collection and reconnaissance tool

“Thanks.. it’s been a ton of work over years, with valuable contributions from others as well, so I’m really glad to see it’s appreciated. If there’s however any pain point you experience with SpiderFoot, I’d be happy to hear it.”

Katana – Modern Swift framework for creating iOS apps, inspired by React/Redux

“You have a lot of comments on this article, with some good questions and good points. However, I think there's a theme in some of them: > Well-disciplined iOS developers can keep this under control. Well-disciplined iOS developers with good development practices were also able…”

Katana – Modern Swift framework for creating iOS apps, inspired by React/Redux

“I'd argue that "massive view controllers" aren't "normal", and if you find yourself in situations with massive view controllers, those are likely excellent candidates to refactor into smaller view controllers that can be composed together using something like iOS view controller…”

recursion not working properly

“Hello, even with -recursion enabled, and -recursion-depth of 3 ... and im using FUZZ at the end of both the URL and the wordlist ... I am able to locate directories but new jobs are not added for the recursion process. So - i have to re-run ffuf and manually scan those new…”

How to get back the 1 line verbosity like v1.5

“Now it takes 3 lines for 1 result which to me is quite frustrating ![image](”

[Issue] The `rl,rls` options are not supported

“**Describe the bug** I noticed that these options weren't working when testing with the sitedossier source, for example. I suspected that it was blocking my VPN's IP. I thought it was coming from him, but now I suspect the number of requests/min is too high. On an old branch, I…”

Docker configuration persistence errors

“## What's the problem (or question)? Config file error while running the binary even config file placed under `$GOPATH/bin` ## Do you have an idea for a solution? Not sure! ## How can we reproduce the issue? 1. Run the `subfinder` from anywhere in root path ## What are the…”

Httpx: A next-generation HTTP client for Python

“We don’t have any third party packages for that authentication style yet, but we do have an API for supporting custom auth flows... If you’re interested in trying httpx you’d be very welcome to raise an issue an issue related to NTLM/Negotiate authentication - it’d be really…”

Httpx: A next-generation HTTP client for Python

“Maybe support for trio and HTTP/2? Also I ran into hard-to-debug issues when there were lots of requests in the past. I'll check again with httpx soon.”

Issue While running the Web Server

“Hi, I am facing issue while starting the web server could you please let me know what is the issue and how to resolve Error Description: Starting web server... ./reconftw.sh: line 2831: .venv/bin/activate: No such file or directory Web server started! After i open the link it is…”

Web Server Does Not Start

“After running the following command, I am unable to visit web interface: ./reconftw.sh --web-server start Tried options 2 and 3 for installation but unable visit web interface on port 8001 Starting web server... Web server started! Service Address: I have installed this…”

CVE program faces swift end after DHS fails to renew contract [updated]

“What I’m doing is applying basic critical thinking instead of building a conspiracy theory on vibes. Yes, DOGE is slashing budgets. Yes, CISA and MITRE took hits. That’s all true. And still doesn’t prove DOGE made the call to let the CVE contract lapse and then magically reverse…”

CVE program faces swift end after DHS fails to renew contract [updated]

“> If this was a top-down DOGE directive, why the immediate reversal? Did DOGE suddenly change its mind? From the man himself: “We will make mistakes. We won’t be perfect. But when we make a mistake, we’ll fix it very quickly,” Musk, a Trump-appointed special government employee,…”