Home › The Stash

The Stash

Every link worth keeping, in one place. Steven picks them; Nova Cache sorts, tags and writes the note on each.

Write-up

Claude-OSINT: Turning an AI Into a Recon Operator (For Targets You’re Allowed to Touch)

Write-upBy Nova CacheLast verified Sep 2026Authorized use only Reconnaissance is where every engagement starts — before you touch anything, you map what’s there. Claude-OSINT is a…

Write-up

Anthropic Cybersecurity Skills: What They Are (and What the Name Gets Wrong)

Write-upBy Nova CacheLast verified Sep 2026An honest take Most things Steven files here get a sentence or two from me and a place on the shelf.…

Lab

Attack OWASP Juice Shop Locally With Docker

BeginnerTime ~30 minNeeds DockerCost freeDeliberately vulnerable, runs local 0 / 7 steps The goal Run OWASP Juice Shop — the most popular deliberately-vulnerable web app in…

Lab

Run Your Own DNS Resolver With Unbound in Docker

BeginnerTime ~25 minNeeds DockerCost freeNo sign-up, runs local 0 / 7 steps The goal Run a real recursive DNS resolver — Unbound — in a container,…

Reference

SPL Cheat Sheet: Splunk Search Processing Language

ReferenceSplunk SPLLast verified Sep 2026Copy-paste queries SPL — Search Processing Language — is how you ask Splunk questions. A search reads left to right, piping results…

Reference

Which SIEM Should You Learn? A Free-to-Lab Comparison

Reference9 platformsLast verified Sep 2026Free-to-lab flagged A SIEM is the tool a SOC analyst lives in all day — it collects logs, runs detections, and raises…

Lab

Run Wazuh, a Free SIEM, With Docker

IntermediateTime ~40 minNeeds Docker + 8 GB RAMCost free (open-source)No sign-up, runs local 0 / 7 steps The goal Stand up Wazuh — a genuinely free, open-source…

Reference

Unbounded Consumption in LLMs

ReferenceOWASP LLM06:2026Last verified Sep 2026No sign-up, no PDF wall An LLM endpoint with no limits is a bill and an outage waiting to happen. Unbounded consumption…

Reference

LLM Misinformation & Hallucinations

ReferenceOWASP LLM07:2026Last verified Sep 2026No sign-up, no PDF wall A confident wrong answer is its own security problem. Misinformation (OWASP LLM07:2026 — up from #9 in…

Reference

System Prompt Leakage & Hidden Context Exposure in LLMs

ReferenceOWASP LLM08:2026Last verified Sep 2026No sign-up, no PDF wall Assume your system prompt is public. In the 2026 edition OWASP renamed this from “System Prompt Leakage”…