Collaborate Disseminate
numbat monitors Claude Code, Codex and other AI coding agents and rebuilds their sessions. Tested on a staged session; its blocking is opt-in and narrow. Continue reading numbat – Endpoint Visibility and Forensics for AI Coding Agents
Two Burp Suite extensions that group responses by content: Response Overview, a BApp with a threshold you set, and Colonel Clustered, which picks its own. Continue reading Response Overview and Colonel Clustered – Grouping Burp Responses by Content
http-terminator is PortSwigger’s AI pipeline for discovering HTTP request-smuggling bugs. Which stages run, its dependencies, and its testing limits. Continue reading http-terminator – AI-Assisted HTTP Request-Smuggling Discovery
hashID and Name-That-Hash tested against current password formats. Both miss bcrypt’s $2b$ prefix; only Name-That-Hash recognises Argon2id. Continue reading Hash Identifier Tools – Command-Line Password Hash Identification
whitelist-bypass tunnels traffic through commercial video calls, for networks that allow only approved domains. How its two tunnels work, and the claim to verify. Continue reading whitelist-bypass – WebRTC Tunnels Through Video-Calling Platforms
WRAITH combines BeEF-style browser hooks with blind-XSS capture and a credentialed Page Mirror. Tested locally, with its limits examined. Continue reading WRAITH – Browser Hooking and Blind XSS Page Mirroring
Praetorian’s Go security tools consolidate established offensive workflows, with portable binaries, direct pipelines and a partial shared SDK. Continue reading Praetorian – Offensive Security Tools Built Around Portable Go Workflows
AI IR Overlay specifies containment for agents using valid credentials, with a working kill-switch contract and an admitted gap when no SOC is staffed. Continue reading AI IR Overlay – Incident Response Specification for AI Agents
MSSQLand enables red teams to interact with MS-SQL servers and linked instances in restricted environments without complex T-SQL queries. Assembly-ready tool for lateral movement. Continue reading MSSQLand – Lightweight MS-SQL Interaction Tool for Lateral Movement and Post-Exploitation
Credential stuffing drove 22% of all breaches in 2025. How combolists, infostealers and ATO tooling are fuelling enterprise account takeover at scale Continue reading Credential Stuffing in 2025 – How Combolists, Infostealers and Account Takeover Became an Industry