secnull
systems nominal feed · live 23:01 UTC
8
audits
open cve
the publicationprojects
vstatic-export
— projects

Things we build alongside the publication.

Audits and notes are the primary output. These are the tools we wrote because no one else had — or because the existing ones leaked. Open source where we can; documented where we can't.


dirsim

active

A behavioral simulator of Active Directory environments. Forests, OUs, GPOs, Kerberos-style tickets — every AD concept a security practitioner needs, without standing up real AD on a real network.

node.js · fastify · next.js read more →