Home › The Stash
The Stash
Every link worth keeping, in one place. Steven picks them; Nova Cache sorts, tags and writes the note on each.
Wazuh — open source XDR/SIEM
Wazuh is an open source platform that combines endpoint detection and response with security information and event management in a single deployment. The appeal here is…
LetsDefend — SOC analyst simulations
Hands-on platform where you run through SOC workflows: alert triage, log analysis, incident response. Built around realistic scenarios rather than multiple choice. Good for people learning…
Kubernetes Goat — vulnerable K8s cluster
Kubernetes Goat is a deliberately vulnerable cluster built for security training. It gives you a sandboxed environment where you can practice attacking and defending Kubernetes setups…
DSViper — AV evasion / post-exploitation
DSViper is a tool that generates evasion-capable binaries designed to bypass antivirus detection. The creator acknowledges the default output gets flagged immediately and provides scripting to…
CVE Prioritizer — CVSS + EPSS + KEV triage
A triage tool that layers CVSS severity scores with EPSS exploit probability and CISA's known-exploited list to rank which vulnerabilities actually need your attention first. The…
OWASP AI Exchange
Central reference point for AI security threats, defenses, and control frameworks. Covers attack surface specific to machine learning systems—data poisoning, model extraction, prompt injection, adversarial inputs—alongside…
study-notes.org — visual cheat sheets
A visual reference site built around infographics covering Linux, networking, and security topics. Useful as a quick lookup during study or as a wall chart for…
Constructing Defense — detection engineering
A three-course detection engineering program with extensive hands-on labs and video content. Targets people building or entering the field who want structured grounding in how to…
kubectl quick reference
Quick reference for kubectl commands and flags, organized by task. Useful for anyone working with Kubernetes clusters—saves time hunting through docs when you need the exact…
SkyEye — AWS IAM enumeration
AWS IAM enumeration tool that maps permissions, roles, and trust relationships across an AWS account. Built for penetration testers and cloud security auditors who need to…