How do you extract secrets and URLs effortlessly from JavaScript?

Meet `jsluice` by BishopFox—a Go-powered tool that combines AST parsing with custom matchers. Unlike regex, it intelligently identifies URLs in patterns like `window.open()` or `document.location`. Plus, it can spot secrets like API keys using syntax-aware matchers.

#JavaScript #CyberSecurity #GoLang

Project link on #GitHub https://github.com/BishopFox/jsluice

#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity

—
P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking

Today's #CTF progress: unstoppable

Here are my 3-day stats:

8/21: 2,525 points from 21 challenges
8/20: 2,500 points from 12 challenges
8/19: 650 points from 6 challenges

Today's topics:
Wireshark, forensics, reverse engineering, and a little more cryptography.

The challenge > hyperfocus > dopamine triangle has been supercharged this week for some reason, even though I'd been working at it since getting back from #defcon (and a little before).

What makes a Firefox `user.js` file essential for privacy enthusiasts?

A well-configured `user.js` hardens Firefox by tweaking settings to reduce tracking, enhance encryption, and limit browser fingerprinting. Examples include disabling Service Workers to block unwanted connections and tuning HTTP headers to restrict referer leaks.

#Firefox #Privacy

Project link on #GitHub https://github.com/pyllyukko/user.js

#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity

—
P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking

A perfect example of how #CTF challenges can be mind-bending

GymTok: Breaking #TLS Using the Alt-Svc Header

https://blog.pspaul.de/posts/gymtok-breaking-tls-with-alt-svc/

What is MCP beyond just a protocol?

AWS MCP Servers are lightweight applications tailoring LLM behavior by connecting them to real-world tools and data. Imagine a chatbot with AWS documentation access or an IDE with Terraform-accurate code generation. These servers integrate seamlessly via the Model Context Protocol, enhancing LLMs with dynamic context. #AI #AWS

Project link on #GitHub https://github.com/awslabs/mcp

#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity

—
P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking

Why settle for one AI agent when you can deploy 250+ specialized ones?

HexStrike AI v7.0 is leveling up: streamlined setups, Docker support, deep JavaScript runtime analysis, and 40% memory optimization. It bridges GPTs to tools like Nmap & Ghidra for cutting-edge automated pentesting. #AI #Cybersecurity

Project link on #GitHub https://github.com/0x4m4/hexstrike-ai

#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity

—
P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking

Why write multi-line shell scripts to manage Kubernetes when you can use Cypher-inspired queries?

Cyphernetes simplifies operations like deleting non-running pods:
```cypher
MATCH (p:Pod)
WHERE p.status.phase != "Running"
DELETE p;
```
Readable, relational, and efficient. #Kubernetes #DevOps

Project link on #GitHub https://github.com/AvitalTamir/cyphernetes

#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity

—
P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking

Wondering how to run covert web investigations securely?

Open vBrowser (OvB) is a containerized browser platform tailored for cybersecurity pros. It’s tested on Linux (amd64), and provides anonymity while accessing the deep or dark web. Perfect for SOC teams lacking sandbox tools. #CyberSecurity #Linux

Project link on #GitHub https://github.com/fish-not-phish/open-vbrowser

#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity

—
P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking

New Open-Source Tool Spotlight

TerraSchema converts Terraform `.tf` files into JSON Schema (Draft-07) for variable validation. It handles types, defaults, and validation rules directly, making `.tfvars.json` file generation seamless. Install via `go` or binaries. #Terraform #JSONSchema

Project link on #GitHub https://github.com/HewlettPackard/terraschema

#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity

—
P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking

New Open-Source Tool Spotlight

The `awscurl` tool simplifies making signed AWS API requests directly from your terminal. It combines cURL with AWS Signature Version 4, so you can interact with AWS services securely without manually signing headers. #AWS #DevOps

Project link on #GitHub https://github.com/okigan/awscurl

#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity

—
P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking

Our Windows CTF is coming to Nullcon in Berlin, Sept 4-5 https://github.com/eshard/TTA-CTF

Play for a chance to win a Binary Ninja license or a Flipper Zero.

New Open-Source Tool Spotlight

BlackCat is a PowerShell module tailored for analyzing Microsoft Azure configurations. It detects potential security vulnerabilities while adhering to best practices. A vital tool for Azure security audits. #Azure #PowerShell

Project link on #GitHub https://github.com/azurekid/blackcat

#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity

—
P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking

New Open-Source Tool Spotlight

KubeIP v2 takes node-level public IP management in Kubernetes to the next level. By supporting GKE, EKS, and OCI, it assigns static public IPs to nodes where necessary (e.g., for gaming or IP whitelisting). Transitioning from a controller to a DaemonSet improves reliability and flexibility. #Kubernetes #CloudNetworking

Project link on #GitHub https://github.com/doitintl/kubeip

#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity

—
P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking

Welcome to Day 3 at AppSec Village – the final day at @defcon 33!

We’re closing out with:

FREE Hacker Fuel
Fix the Flag Wargame (10:00–11:45)
Live talks on CVEs, chained exploits, and breaking bloatware
Spotter Arsenal demo & AppSec in the Shadows workshop
POD games & vulnerability hunts
CTF Award Ceremony at 11:50am - don’t miss it!

More details: https://www.appsecvillage.com/events/dc-2025

Let’s go!

New Open-Source Tool Spotlight

GitHub repo alert: Santiago-Labs' Go implementation for OCSF (Open Cybersecurity Schema Framework) simplifies standardized event logging. Critical for improving threat detection and interoperability.

#Cybersecurity #DevOps

Project link on #GitHub https://github.com/Santiago-Labs/go-ocsf

#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity

—
P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking

New Open-Source Tool Spotlight

The OpenPubKey SSH project aims at enhancing SSH security by using a distributed PKI to authenticate public keys through DNSSEC and public repositories. It reduces reliance on centralized authorities like CA-based PKIs. A modern approach to securing SSH connections. #CyberSecurity #OpenSource

Project link on #GitHub https://github.com/openpubkey/opkssh

#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity

—
P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking

Are you located in the US/EU? Passionate about #appsec? Maybe you follow #bugbountytips or are an avid #ctf player and are ready to take the next step. If so, we're looking for our next #intern, so consider applying today - https://hackers.doyensec.com.
#doyensec #security #internship #bugbounty

New Open-Source Tool Spotlight

RustScan is an open-source, ultra-fast port scanner built in Rust. It optimizes scanning by parallelizing requests, and its `--ulimit` feature ensures no OS-imposed bottlenecks. Perfect for speeding up network reconnaissance. #RustLang #Cybersecurity

Project link on #GitHub https://github.com/bee-san/RustScan

#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity

—
P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking

New Open-Source Tool Spotlight

Subfinder is a fast tool for discovering subdomains by leveraging passive enumeration. It uses sources like Shodan, Censys, and more to gather accurate results without triggering rate limits. Ideal for reconnaissance in security workflows. #CyberSecurity #OSINT

Project link on #GitHub https://github.com/projectdiscovery/subfinder

#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity

—
P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking

New Open-Source Tool Spotlight

GitHub repositories like General-Analysis/GA emphasize how version control enables transparent collaboration. Every commit documents changes, ensuring accountability and facilitating teamwork—even across distributed teams. #GitHub #VersionControl

Project link on #GitHub https://github.com/General-Analysis/GA

#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity

—
P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking