Writing

A colophon-style note on why this site renders every page twice — once as HTML for people, once as plain markdown for agents — and what that has to do with the observability work I actually do all day.

Neo scores 51/60 (85%) on Argus under a hardened black-box methodology — the first public marker of the shift to AI-security research.

A hosted view over httpx scan output, built on the PDCP dashboard.

A walkthrough of v3.2's fuzzing engine, built to surface unknown vulnerability classes rather than known signatures.

Using v3.2's authenticated-scanning support to run templates against targets that sit behind a login.

Authenticated scanning, advanced fuzzing, and ECDSA template signing land in v3.2.

A rewrite of Nuclei's execution core: the new Go SDK, the JavaScript scripting engine, and multi-protocol templates.

A leaked Management API token that exposed roughly 300 users' data.

Why pattern-based subdomain permutation beats a static wordlist, and how Alterx's DSL generates candidates for active enumeration.

Three misconfigured S3 buckets on one target, one holding roughly 41k files (23.6 GB) including a database backup.

A three-part series on Talosplus, the Go recon-automation framework built to replace ad-hoc bash scripts (3-part series; part 1 linked).