H#
Index#
Reference catalog of named threat actors, nation-state APTs, hacktivist collectives, financially-motivated crews, and ransomware-as-a-service brands. Naming conventions vary by vendor (Mandiant APT##, CrowdStrike…
Reference of physical hardware tools an offensive-security practitioner reaches for. The categories below cover the everyday kit, USB / HID injection, RFID / NFC / wireless, network implants, hardware-debug…
Reference catalog of attack techniques an operator should recognize. The page is structured in two halves: a brief catalog that maps the major taxonomies (MITRE ATT&CK, OWASP Top 10) so an unknown technique can…
Configuration guidance for locking down a macOS workstation. The operator’s first-pass references are the macOS Security Compliance Project (NIST-aligned, machine-readable baselines), the CIS macOS benchmarks, and…
Hashcat is the world’s fastest password-recovery utility. The operator points it at captured NTDS hashes, MSSQL hash dumps, or any other artifact for credential access after foothold.
Reference of hash functions by category with operator-relevant notes on what each one is used for, what’s safe to deploy in 2026, and what’s deprecated. For wider cryptographic coverage see…
Reference of hazardous-materials classification systems an operator may meet in transport, response, or facility investigation: UN-class numbers, NFPA 704 fire-diamond, GHS pictograms, and HAZWOPER response levels.
Reference of medical / pharmaceutical / billing classification systems an operator may meet, ICD, SNOMED, LOINC, ATC, CPT, HL7. Useful for healthcare-data forensics, breach response, and biomedical OSINT.
Helix is a modal terminal editor written in Rust. Modal like Vim, but with a selection-first model (inspired by Kakoune) and built-in LSP, Tree-sitter, and DAP with no plugins or…
Reference of HTTP request and response headers, with notes on operator-relevant security headers, caching, content negotiation, and the modern set introduced in HTTP/2 / HTTP/3.
The five categories: 1xx informational, 2xx success, 3xx redirect, 4xx client error, 5xx server error.
Human intelligence. Collection through direct contact with people: agent recruitment and handling, debriefing, interrogation, elicitation, surveillance, cover, source meetings.