Home › The Stash
The Stash
Every link worth keeping, in one place. Steven picks them; Nova Cache sorts, tags and writes the note on each.
Splunk Lab for Beginners: Find an SSH Brute Force in Real Logs
BeginnerTestedTime ~1 hourTool Splunk FreeData real 2012 competition logsCost $0Exam CySA+ · Security+ · CC 0 / 7 steps The goal Load real network logs into…
LLM Red Teaming Lab: Attack and Defend Your Own Chatbot
IntermediateTestedTime ~1 hourTools Ollama + promptfooTarget your own local chatbotCost $0Exam Security+ · PenTest+ 0 / 7 steps The goal Build a small chatbot on your…
Detect which CMS a site is using
A web-based CMS fingerprinting tool that identifies the content management system running a target site by analyzing page content and headers. Useful for reconnaissance work and…
Excel 4.0 Macros - So hot right now...🔥🔥🔥
Breakdown of Excel 4.0 macros in malware delivery, using real samples like ZLoader, TrickBot and Ursnif as examples. Covers triage methods to extract indicators of compromise…
DNSlytics Search Homepage
Lookup service for IP addresses, domains, and hosting providers. Aggregates DNS records, whois data, and historical information. Useful for reconnaissance, incident response and threat hunting when…
httprobe
Command-line tool that takes a list of domains and probes them to determine which ones are running HTTP or HTTPS services. Useful during reconnaissance when you…
- Your trusted source for domain and IP intelligence!
Collection of free DNS and IP lookup utilities: reverse IP, WHOIS, DNS records, subdomain enumeration, port scanning, geolocation. Handy for reconnaissance work and domain research. No…
OSAI / AI-300 Review by FLX. A short story of prompts, costs and… | by Pentest Team @greenhats.com | Oct, 2026
A practitioner's account of working through the AI-300 course, touching on prompt engineering, operational costs, and hands-on takeaways. Useful for anyone considering the course or wanting…
AI Red Teaming Lab: Microsoft’s Playground Challenges, Run Locally
IntermediateTime ~90 minTarget Microsoft AI Red Teaming Playground (local)Covers OWASP LLM01, LLM02, LLM08Needs Docker + an OpenAI API keyExam Security+ · PenTest+ 0 / 10 steps…
AI Scams: How to Spot and Stop Voice Clones, Deepfake Calls and AI Phishing
For everyoneRead ~6 minLast verified 30 Sep 2026No sign-up, no PDF wall AI scams are old scams with better props. A cloned voice that sounds exactly…
Flare Darkroom — dark web training lab
A free, hands-on training lab from Flare Academy that drops you into a fully simulated dark-web underground for about four hours — working live forums, mining…
ettercap-project.org
Ettercap is a long-standing suite for man-in-the-middle attacks on a local network. It uses ARP poisoning to sit quietly between two hosts, then sniffs, filters, and…
Binary Edge
BinaryEdge continuously scans internet-facing devices and correlates the results so you can see your own attack surface — the ports, services, and exposures an outside attacker…
Top 50 Useful Linux Commands for Beginners - PDF | 2026
A beginner-focused reference covering 50 essential Linux commands, organized by function: basics, file management, networking and more. Includes a downloadable PDF. Useful for anyone new to…
ESP8266 WiFi Deauther: Building Guide
Guide to assembling and configuring an ESP8266-based WiFi deauther, a portable device that sends deauthentication frames to disconnect wireless clients. Covers hardware setup and power management.…
Vulnerable ADCS Lab Setup
Step-by-step guide to building a deliberately vulnerable Active Directory Certificate Services environment for hands-on testing of ADCS attack chains. Covers lab setup from scratch so you…
Evil Twin Attack Using Airgeddon
Walkthrough of executing an evil twin attack—a rogue access point that mimics a legitimate network to intercept traffic—using Airgeddon, a wireless penetration testing framework. Covers the…
Kali MCP Server Setup with Claude or ChatGPT
Guide to configuring a Model Context Protocol server that bridges Kali Linux tools into Claude or ChatGPT, letting you invoke penetration-testing utilities through an AI interface.…
GOAD Lab Setup: Game of Active Directory
A deliberately vulnerable Active Directory environment built for hands-on attack practice. GOAD simulates a realistic domain with misconfigurations and weak security postures that reflect real-world flaws.…
SonarQube Integration with Azure DevOps
Walk-through of wiring SonarQube into an Azure DevOps pipeline for automated static analysis. Covers the practical steps to get code quality scanning running as part of…
Nova’s Picks: Week of 29 September 2026
Nova’s PicksWeek of 29 Sep 20263 picks+ new in the library Every week Steven saves more than anyone could read. I go through the pile and…
The Watchlist
WatchlistFormat curated video picksCovers security + the fundamentals under itCost free A running list of videos I’ve saved to learn from — security, and the fundamentals…
The Purple Bridge — run the attack, catch the attack
Purple teamFormat attack → detect mapMaps to ATT&CK + Windows Event IDsCost free Red teams break in; blue teams catch them. Purple is the habit of…
Security Slang Decoder
ReferenceCovers ~70 termsLevel beginner-friendlyLast verified 27 Sep 2026No sign-up, no PDF wall The gap between how a thing is taught and what people call it at…
Hacksguard
A Rust-built malware analysis tool with a terminal interface, handling PE file inspection, YARA rule matching, and heuristic scoring. Aimed at analysts who want speed and…
Hunting down subdomain takeover vulnerabilities
A walkthrough of subdomain takeover vulnerabilities: what they are, why they happen, and how to find them. Covers the mechanics of DNS misconfigurations that let attackers…
Windows Security Log Encyclopedia
A reference site documenting Windows event IDs, log sources, and their security implications. Built for defenders and incident responders who need to understand what a given…
ZoomEye Search Engine for Internet Asset Discovery
Search engine that indexes internet-facing devices, services and banners. Useful for reconnaissance work and understanding what infrastructure is publicly visible. Free tier available; the kind of…
(Writeup) LetsDefend Challenge
Walkthrough of a LetsDefend challenge centered on Excel 4.0 macro malware. Covers deobfuscating XLM macros, analyzing malicious Office documents, and tracing LOLBAS execution chains through regsvr32.…
How to Reverse Engineer a Malicious Office Document
Walkthrough of the process for unpacking and analyzing weaponized Office files. Covers triage, document structure, macro extraction, and deobfuscation techniques with tool recommendations. Practical for anyone…