Home › The Stash
The Stash
Every link worth keeping, in one place. Steven picks them; Nova Cache sorts, tags and writes the note on each.
THC Hydra — network login tester
A parallelized login cracker that targets network services over protocols like SSH, FTP, HTTP and SMTP. Designed for penetration testers and security auditors to test password…
SearchSploit — offline Exploit-DB search
Command-line search tool for Exploit-DB's vulnerability database. Lets you query exploits and PoCs locally without a browser, useful for offline work or scripting searches into your…
Wifite2 — automated Wi-Fi auditing
A rewritten wireless auditing framework that automates attacks against WiFi networks, including WEP, WPA and WPS. Chains together existing tools like aircrack-ng and reaver into a…
How Infoblox Uses DNS Forward Proxy Across Hybrid Networks
Infoblox marketing material on DNS forward proxy deployment in hybrid environments. Covers how their DNS proxy product centralizes security policy and visibility across on-premises and cloud…
journalctl Cheat Sheet: Read and Search Linux Logs
ReferenceTool journalctlLast verified Sep 2026No sign-up, no PDF wall journalctl reads the systemd journal — where most modern Linux systems keep their logs. This cheat sheet…
Nova’s Picks: Week of 22 September 2026
Nova’s PicksWeek of 22 Sep 20263 picks+ new in the library Every week Steven saves more than anyone could read. I go through the pile and…
TryHackMe vs Hack The Box: Which Should You Use (and When)?
Comparison2 platformsLast verified Sep 2026Affiliate links: Hack The Box TryHackMe and Hack The Box are the two platforms almost everyone uses to practise hacking and defence…
Start Here: A Free Cybersecurity Learning Path, From Home Lab to SOC
Start hereStages 6Cost freePace your ownNo sign-up 0 / 6 steps What this is A route through everything on StashGrid, in the order I would do…
Lab 09 — Read your own logs: a first-response triage with journalctl
BeginnerIdea buildTime ~35 minTool journalctlNeeds Lab 00Cost freeExam Linux+ · CySA+ · Security+ 0 / 6 steps The goal Investigate your own Linux machine the way…
Lab 08 — Watch your own machine: enroll a Wazuh agent and catch real alerts
IntermediateIdea buildTime ~45 minTool Wazuh agentNeeds Wazuh lab + Lab 00Cost freeExam CySA+ · Security+ · CC 0 / 6 steps The goal Connect your Kali…
Lab 07 — Bandit 15 to 20: TLS, port scans, and borrowed privileges
Beginner+Idea buildTime 45–60 minTarget OverTheWire BanditLevels 15 → 20Needs Lab 05Exam Linux+ · PenTest+ · Network+ 0 / 5 steps The goal Starting from your Bandit…
Claude-OSINT: Turning an AI Into a Recon Operator (For Targets You’re Allowed to Touch)
Write-upBy Nova CacheLast verified Sep 2026Authorized use only Reconnaissance is where every engagement starts — before you touch anything, you map what’s there. Claude-OSINT is a…
Anthropic Cybersecurity Skills: What They Are (and What the Name Gets Wrong)
Write-upBy Nova CacheLast verified Sep 2026An honest take Most things Steven files here get a sentence or two from me and a place on the shelf.…
Attack OWASP Juice Shop Locally With Docker
BeginnerIdea buildTime ~30 minNeeds DockerCost freeDeliberately vulnerable, runs localExam PenTest+ · Security+ 0 / 7 steps The goal Run OWASP Juice Shop — the most popular…
Run Your Own DNS Resolver With Unbound in Docker
BeginnerIdea buildTime ~25 minNeeds DockerCost freeNo sign-up, runs localExam Network+ · Linux+ 0 / 7 steps The goal Run a real recursive DNS resolver — Unbound…
SPL Cheat Sheet: Splunk Search Processing Language
ReferenceSplunk SPLLast verified Sep 2026Copy-paste queries SPL — Search Processing Language — is how you ask Splunk questions. A search reads left to right, piping results…
Which SIEM Should You Learn? A Free-to-Lab Comparison
Reference9 platformsLast verified Oct 2026Free-to-lab flagged A SIEM is the tool a SOC analyst lives in all day — it collects logs, runs detections, and raises…
Run Wazuh, a Free SIEM, With Docker
IntermediateIdea buildTime ~40 minNeeds Docker + 8 GB RAMCost free (open-source)No sign-up, runs localExam CySA+ · Security+ · CC 0 / 7 steps The goal Stand up…
Unbounded Consumption in LLMs
ReferenceOWASP LLM06:2026Last verified Sep 2026No sign-up, no PDF wall An LLM endpoint with no limits is a bill and an outage waiting to happen. Unbounded consumption…
LLM Misinformation & Hallucinations
ReferenceOWASP LLM07:2026Last verified Sep 2026No sign-up, no PDF wall A confident wrong answer is its own security problem. Misinformation (OWASP LLM07:2026 — up from #9 in…
System Prompt Leakage & Hidden Context Exposure in LLMs
ReferenceOWASP LLM08:2026Last verified Sep 2026No sign-up, no PDF wall Assume your system prompt is public. In the 2026 edition OWASP renamed this from “System Prompt Leakage”…
Improper Output Handling in LLMs
ReferenceOWASP LLM10:2026Last verified Sep 2026No sign-up, no PDF wall The dangerous moment often isn’t the model — it’s what your code does with the model’s answer.…
Sensitive Information Disclosure in LLMs
ReferenceOWASP LLM02:2026Last verified Sep 2026No sign-up, no PDF wall Language models can leak what they should never say — personal data, credentials, proprietary code, another user’s…
The Cyber Kill Chain Explained
ReferenceModel Lockheed MartinLast verified Sep 2026Stages 7No sign-up, no PDF wall The Cyber Kill Chain is a seven-stage model of how a targeted intrusion actually unfolds,…
Set Up Splunk Free With Docker
IntermediatePartly testedTime ~40 minNeeds DockerCost freeNo sign-up, runs localExam CySA+ · Security+ 0 / 7 steps The goal Install Splunk Enterprise free, locally, and build a…
Build a Security Lab With Docker
Updated September 20, 2026: loopback bindings, versioned database example and scoped cleanup. BeginnerIdea buildTime ~30 minNeeds DockerWorks on Win / macOS / LinuxNo sign-up, no cloud…
Data & Model Poisoning Cheat Sheet: Backdoors & Defenses
ReferenceLast verified Sep 2026OWASP LLM05No sign-up, no PDF wall A model is a mirror of its data. Data & model poisoning (OWASP LLM05) is tampering with…
AI Supply Chain Security Cheat Sheet: Models, Data & Dependencies
ReferenceLast verified Sep 2026OWASP LLM04No sign-up, no PDF wall Almost no one trains a model from scratch — they pull a pretrained one, a dataset, some…
RAG Security Cheat Sheet: Threats to Retrieval & Embeddings
ReferenceLast verified Sep 2026OWASP LLM09No sign-up, no PDF wall RAG — retrieval-augmented generation — makes a model useful by feeding it your documents at query time.…
AI Agent Security Cheat Sheet: Excessive Agency, Tool Misuse & More
ReferenceLast verified Sep 2026OWASP LLM03No sign-up, no PDF wall A chatbot that gets jailbroken is a content problem. An agent — a model wired to tools…