Home › The Stash
The Stash
Every link worth keeping, in one place. Steven picks them; Nova Cache sorts, tags and writes the note on each.
A Guide To Subdomain Takeovers 2.0
A walkthrough of subdomain takeover vulnerabilities: what they are, how they happen, and how to find them. Covers the mechanics of misconfigured DNS records pointing to…
LetsDefend — Excel 4.0 Macros (XLM)
Nyxfrom the the-macro-that-time-forgot dept.Excel 4.0 macros (XLM) are an older macro language that security teams often overlook because they focus on detecting VBA macros in modern…
XLMMacroDeobfuscator
Tool for decoding obfuscated XLM macros in Excel spreadsheets by emulating the XLM interpreter. Useful for malware analysts and incident responders who need to reverse-engineer weaponized…
What is Red Forest
Overview of Microsoft's Red Forest architecture, a security design for protecting high-value identities in Active Directory environments. Covers the Rapid Modernization Plan approach to isolating administrative…
Prevent dangling DNS entries and avoid subdomain takeover | Microsoft Learn
Microsoft's guide to identifying and fixing dangling DNS records in Azure that leave subdomains vulnerable to takeover. Covers detection, remediation, and prevention strategies. Essential reading for…
Live Exploit Tracker Powered by the Crowd
A crowd-sourced tracker of vulnerabilities actively exploited in the wild, mapped to attacking IPs. CrowdSec aggregates signals from its distributed sensor network to surface threats with…
Shodan Cheat Sheet
ReferenceTool ShodanCovers web search, CLI, InternetDBLast verified 26 Sep 2026No sign-up, no PDF wall Shodan is a search engine for internet-connected devices, not web pages. It…
Lab 11 — Build your analysis VM: FLARE-VM and safe file triage
IntermediateIdea buildTime half-day setup + 30 minTools FLARE-VM + hacksguardNeeds Windows VMCost tools freeExam CySA+ · Security+ 0 / 7 steps The goalBuild a dedicated Windows…
Shodan Search Engine
Search engine that indexes Internet-connected devices by scanning for open ports, banners, and service metadata. Used by security researchers for reconnaissance, asset discovery, and vulnerability assessment.…
Web Application Pentest Lab setup Using Docker
Guide to building a containerized lab environment for web application penetration testing. Covers Docker setup and deployment of vulnerable applications for hands-on practice. Useful for anyone…
Legendary OSINT
Curated list of open-source intelligence tools and resources aimed at fraud investigators, threat intelligence analysts, and compliance roles. Covers techniques for identity verification, anti-money laundering work,…
Awesome Android Security
Curated collection of Android security resources, tools, and materials aimed at penetration testers and bug hunters. Covers testing approaches, reverse engineering, tooling, and vulnerability research across…
Raccoon
A reconnaissance and vulnerability scanning framework built for speed. Handles asset discovery, port scanning, and service enumeration across networks. Useful for pentesters and red teamers who…
AI Cybersecurity Collaboration Playbook
CISA's guide to building effective partnerships between AI developers, security researchers, and government on AI safety and security. Covers threat modeling, vulnerability disclosure, and coordinated response.…
SSH Brute-Force Attacks: How to Read Login Logs and Defend Your Server | Next Terminal
Walkthrough of SSH brute-force attacks from the defender's angle: how to spot them in auth logs and journalctl, what mistakes leave servers exposed, and why 2FA…
Arcane
A Docker management interface built for accessibility rather than command-line fluency. Arcane sits between the raw Docker API and the operator, offering a GUI that handles…
Lab 10 — Test your detections: run Atomic Red Team and catch it in Wazuh
IntermediateIdea buildTime ~35 minTools Atomic Red Team + WazuhNeeds Lab 08Cost freeExam CySA+ · Security+ · PenTest+ 0 / 7 steps The goalRun one Atomic Red…
Proxmox VE Helper-Scripts
A collection of helper scripts for Proxmox VE, the open-source hypervisor platform. Covers automation and setup tasks across virtual machines and containers. Useful if you're running…
Coolify
Self-hosted deployment platform that handles static sites, databases, and full-stack apps across your own infrastructure. Reduces vendor lock-in and gives you control over where code runs.…
Portainer
Web UI for Docker and Kubernetes cluster management. Lets you inspect containers, manage images, handle volumes, and deploy workloads without the CLI. Useful for teams that…
Vulhub
A collection of deliberately vulnerable Docker Compose setups covering web apps, databases, middleware and services. Each environment is self-contained and ready to spin up for hands-on…
Splunk Attack Range
Terraform-based lab builder that spins up intentionally vulnerable infrastructure—Windows, Linux, cloud instances—pre-instrumented with logging and Splunk ingestion. Run attacks against it, collect the telemetry. Built for…
tcpdump Cheat Sheet
ReferenceTool tcpdumpCovers tcpdump 4.99.xLast verified Sep 2026No sign-up, no PDF wall tcpdump is the command-line packet capture tool that ships with, or is one install away…
Hack Smarter Labs
A platform offering hands-on hacking labs and structured courses at accessible prices, built around a community model. Aimed at people learning security skills without the premium…
OSINT in 5 Hours — free full course (The Cyber Mentor)
A structured video course covering OSINT fundamentals from reconnaissance through analysis. Meant for people new to open-source intelligence work who want a guided introduction rather than…
Hashcat — GPU password recovery
GPU-accelerated password cracking framework supporting hundreds of hash types and attack modes. Used by penetration testers, incident responders, and security researchers to test password strength and…
Metasploit Framework
The commercial home of Metasploit, Rapid7's penetration testing framework. Covers licensing, documentation, and the managed cloud version alongside the open-source project. Useful for understanding what the…
How to set up an Nginx reverse proxy on Debian 13
Step-by-step walkthrough for deploying Nginx as a reverse proxy on Debian 13. Covers configuration basics and setup procedure. Useful for anyone building a proxy layer for…
Nmap — the network scanner
The official home for Nmap, the standard port scanner and network reconnaissance tool. Used across security work to map network topology, identify open services, and probe…
Impacket for Pentester: MSSQL Exploitation
A walkthrough of using Impacket's MSSQL modules for penetration testing: connecting to servers, executing commands, and lateral movement. Covers practical exploitation techniques relevant to red team…