A self-development blog by SkullKanary documenting offensive cybersecurity learning, with step-by-step technical tutorials on building Mythic C2 agents and analyses of Cobalt Strike traffic. Readers get hands-on implementation detail on C2 profiles, TLS and traffic shaping, plus reverse-engineering observations.
Website: https://www.skullkanary.com/
watchTowr Labs publishes technical deep dives into newly disclosed and actively exploited vulnerabilities in enterprise software such as PaperCut, Atlassian products and Citrix NetScaler. Posts cover how the products work, the affected versions, and the exploitation chains, written with a sarcastic voice.
A security blog covering threat intelligence, offensive security, and the attack surface created by AI agents. Issues combine original measurement, experiments, and threat-modeling work, including a harness for testing autonomous offensive agents and credential pivots in agent estates.
Payload Forge publishes first-person offensive security research, including CVE disclosures found while working through the Red Team Ops (CRTO) course stack. Posts walk through discovery, exploitation details, vendor and CNA disclosure timelines, and remediation.
Offensive security research write-ups detailing HTTP request smuggling and cache poisoning chains against major CDN and edge platforms such as Azure Front Door, Akamai and F5. Readers get step-by-step technical narratives of how the bugs were discovered, exploited and reported, including bounty outcomes.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
