Open Policy Agent (OPA) openpolicyagent.org

OpenNMS opennms.org

OpenSCAP Base open-scap.org

OnionBalance onionbalance.readthedocs.io

Unfetter nsacyber.github.io

Nagios nagios.org

LaBrea labrea.sourceforge.net

Kyverno kyverno.io

Kushtaka kushtaka.org

KubeSec kubesec.io

kube-hunter kube-hunter.aquasec.com

JA3 ja3er.com

IPFire ipfire.org

in-toto in-toto.io

Icinga icinga.com

Infection Monkey guardicore.com

Grafeas grafeas.io

FuzzBench google.github.io

Gauntlt gauntlt.org

Firejail firejail.wordpress.com

ZoomEye zoomeye.org

Neat tricks to bypass CSRF-protection zhuanlan.zhihu.com

Uber XSS via Cookie zhchbin.github.io

PUSHING WEBKIT'S BUTTONS WITH A MOBILE PWN2OWN EXPLOIT zerodayinitiative.com

ZAP by Checkmarx zaproxy.org

Phishing with Unicode Domains xudongz.com

xsschop xsschop.chaitin.cn

XSS Challenges xss-quiz.int21h.jp

WCTF2019: Gyotaku The Flag westerns.tokyo

SQL Injection Pocket Reference websec.ca

TL:DR: VPN leaks users’ IPs via WebRTC. I’ve tested seventy VPN providers and 16 of them leaks users’ IPs via WebRTC… voidsec.com

VirusTotal domain information virustotal.com

AWS PENETRATION TESTING PART 2. S3, IAM, EC2 virtuesecurity.com

AWS PENETRATION TESTING PART 1. S3 BUCKETS virtuesecurity.com

Unicode Domains are bad and you should feel bad for supporting them vgrsec.com

@shhnjk twitter.com

@kinugawamasato twitter.com

@hasegawayosuke twitter.com

@h3xstream twitter.com

@garethheyes twitter.com

@filedescriptor twitter.com

@cure53berlin twitter.com

@XssPayloads twitter.com

Bypass Fix of OOB XXE Using Different encoding twitter.com

@HackwithGitHub twitter.com

CVE-2019-1306: ARE YOU MY INDEX? thezdi.com

The Register theregister.co.uk

The Hacker News thehackernews.com

Hunting for Web Shells tenable.com

WEB APPLICATION PENETRATION TESTING NOTES techvomit.net