Stories by Robbedoes

EmeraldWhale's .git/.env credential scraping is still running, ~2 years on

Most of the CVE-2026-4020 attackers are the same client

127.0.0.1 in eight headers: what attackers hide in X-Forwarded-For

Internet Noise Leaderboard: networks ranked by how much they scan for their size

Show HN: Spip – Open-Source Self-Hosted TCP Network Sensor

JSON Smuggling: A far-fetched intrusion detection evasion technique

Digital False Flag Operations: A How-To Guide

Building a threat intelligence feed using the Twitter API and a bit of code