Security Blog
Cybersecurity research, vulnerability analysis, and practical security insights.
Unpacking CVE-202 — What It
Unpacking CVE-2024-3094 Unpacking CVE-2024-3094 reveals a critical supply chain attack targeting XZ Utils. This vulnerability, a backdoor hidden within liblzma, achieved a CVSS score of 10.0...
Your Easy Guide to Reverse DNS Lookups
You will accurately perform a reverse dns lookup for an IP address. Prerequisites A Linux, macOS, or Windows system with command-line access. Internet connectivity. Basic understanding...
Acunetix Alternatives (2026): 7 Web Scanners Compared
Key takeaways Acunetix (now part of Invicti) is a mature commercial DAST web application scanner known for automated detection of issues like SQL injection and XSS. Teams look for...
How to Check DNS TXT Records on Linux
Performing a dns txt record lookup reveals verification data, security policies, and other human-readable information associated with a domain. TXT records store arbitrary text strings....
Get the Most From Your Joomla Vulnerability Scanner
A joomla vulnerability scanner identifies security weaknesses within Joomla installations, including core vulnerabilities, outdated extensions, and misconfigurations. Use it before deploying a new...
How to Check DNS History on Linux, Mac
Understanding a domain's past DNS configurations is vital for security investigations. A dns history lookup reveals changes in IP addresses, nameservers, and mail servers over time. This information...
Scan for XSS Flaws Effectively to Secure Your Web
An xss vulnerability scanner automates the detection of Cross-Site Scripting (XSS) flaws in web applications. It injects various XSS payloads into input fields, URL parameters, and other possible...
Continuous Vulnerability Scanning: What It Is and How to Do It Right
Key takeaways Continuous vulnerability scanning means scanning your assets on an ongoing, automated schedule — not once a quarter — so new exposures are caught within days, not months. ...
Best Penetration Testing Tools (2026): A Toolkit by Phase
Key takeaways Penetration testing tools map to the phases of an engagement: reconnaissance, scanning & enumeration, exploitation, post-exploitation, and reporting. No single tool covers...
Tenable Alternatives (2026): 7 Vulnerability Scanning Tools Compared
Key takeaways Tenable (Nessus, Tenable Vulnerability Management, Tenable One) is a mature, enterprise-grade vulnerability management platform. Teams look for alternatives mainly over cost,...
API Security Testing: How to Find Vulnerabilities in Your APIs
API security testing is the practice of probing your APIs for the vulnerabilities attackers actually exploit — broken authorization, weak authentication, injection, misconfiguration, and data...
External Asset Discovery: How to Find Every Internet-Facing Asset You Own
External asset discovery is the process of finding every domain, subdomain, IP address, and internet-facing service that belongs to your organization — including the ones nobody remembers setting up....