Tools – validin-phish-feed

The validin-phish-feed is a GitHub repository that provides a feed of phishing domains, curated by the Validin Threat Intelligence Platform.  Validin is a company that specializes in internet intelligence, offering services for threat hunting, brand protection, and incident response.  Their platform aggregates and analyzes vast amounts of DNS data, host responses, certificates, registration data, and Read More …

Tool Overview :: altdns

While tools like subfinder or amass are excellent for finding known subdomains through public records, they often miss “hidden” environments like development servers or internal staging areas.  This is where altdns becomes an essential part of the security toolkit. What is Altdns? Altdns is an open-source DNS reconnaissance tool designed to discover subdomains that follow Read More …

RDP – Remote Desktop Protocol

Remote Desktop Protocol is a proprietary protocol developed by Microsoft that allows users to connect to and control or manage a computer remotely over a network connection.  RDP is commonly used in Windows environments, enabling users to access their desktops, applications, and files from anywhere, as long as they have an network connection.  This technology Read More …

SSH – Secure Shell

SSH, or Secure Shell, is a network protocol that allows users to securely access and manage devices over a network.  It is widely used for remote administration of servers and network devices.  SSH provides a secure channel over an unsecured network by using encryption, which protects the data being transmitted from eavesdropping and tampering. Key Read More …

Tool Overview :: subfinder

In our journey through DNS discovery, we’ve used active tools like dnsrecon and dnsenum that directly “touch” a target’s infrastructure. While effective, active probing can be noisy. To stay under the radar while gathering a massive footprint, we turn to subfinder. As of 2026, subfinder remains the gold standard for passive subdomain discovery. Developed by the Read More …

Tool Overview: Photon

Photon is an open-source Python-based crawler designed for high-speed information gathering. It is categorized as an Open-Source Intelligence (OSINT) tool used to extract data from websites. Unlike traditional web crawlers that focus primarily on indexing content for search, Photon is optimized to identify and extract specific data points relevant to security researchers and penetration testers, Read More …

Tool Overview – IronNetTR

The GitHub repository IronNetTR, maintained by Mikhail Kasimov (forked from nathanawmk), serves as a centralized public archive for research conducted by IronNet’s Threat Research Teams.  IronNetTR is a collection of technical reports and data sets focused on active cyber threats. Unlike general news sites, this repository provides the raw data and technical specifics, such as Read More …

Hunting for Missing AES in Active Directory

In the world of Active Directory security, 2026 is the year the “Compatibility Tax” finally comes due.  For decades, Kerberos has quietly allowed a fallback to RC4 encryption. It was convenient, it was compatible, and, by modern standards, it is a massive security hole.  With CVE-2026-20833, Microsoft has officially pulled the plug. We are currently in Read More …

Quantum Computing

Think of traditional computers as a massive library where every book is written in a simple code of 1s and 0s. To find a specific word, a librarian has to walk down every aisle, one by one, checking every page. It’s reliable, but slow.  Quantum Computing isn’t just a faster librarian; it’s a librarian who can Read More …