Bbo16h ago · 9 min readOne IP, Five Sources: What a Malicious Address Actually ProvesI used to own a WAF block list in AWS. The rules were simple: an allow list, a block list, and a queue of addresses that belonged in one or the other. The hard part was never the rule syntax. It was tbokaung.hashnode.dev
GGhostCiCiOct 16 · 2 min readINIT_001: Introducing GHOSTCICI TRACES TRACES is live. GHOSTCICI TRACES is a public research publication focused on open-source intelligence (OSINT), cryptographic analysis, blockchain investigation, and security research. The Objective Ighostcici.hashnode.dev
OOSINT ProOct 16 · 2 min readWhy I built a breach lookup tool that shows where every result came fromMost breach search sites give you a pile of rows and leave you guessing where they came from. That's fine until you need to act on it. If you're scoping an incident or deciding which passwords to rotaosint-pro.hashnode.dev
AArtifex IgnotvsOct 14 · 2 min readArtifex Ignotvs — Relatio 000I publish as Artifex Ignotvs. The seal carries a question mark. Before I trust a security claim, I want to know what was examined, how it was tested, and where the result stops being reliable. That isartifexignotvs.hashnode.dev
MMolly SohaneyOct 11 · 4 min readCTF Writeup: 2(-1) | Senses | OSINT | Steganography | CSS CTF 2026: Return of NexusDescription A sound has came from deep space. We have tried to decipher is but it seems to alude us. Please note, if you play this file it is advised you turn down your volume to prevent hearing damamollysohaney.hashnode.dev
MMolly SohaneyOct 11 · 2 min readCTF Writeup: Server Juice | OSINT | CSS CTF 2026: Return of NexusDescription If you want to appease the algorithm (and maybe get a head start on future hints), consider keeping us on your radar by following. Flag Format: CSSCTF{...} Overview This was a beginnemollysohaney.hashnode.dev
MMolly SohaneyOct 11 · 4 min readCTF Writeup: Dead Faction Servers | OSINT | CSS CTF 2026: Return of NexusDescription The old faction that ran Sector 9 didn't leave one trail — they left several, and most of them are decoys. Whoever built this infrastructure knew someone would come looking eventually, anmollysohaney.hashnode.dev
AAlexey BakhirevOct 8 · 3 min readHow to find developer locations by Git commitsParameters: scale: +/- country; margin of error: up to a thousand km; error probability, by my estimation, is currently around 20%; Facts: commit time is saved with the user's timezone; we can bakhirev.hashnode.dev
SShreyansh BuildsOct 7 · 10 min readI Walked Away from Cybersecurity. A Phishing Attempt on My Own Code Dragged Me Back In.Last year, I stopped concentrating on cybersecurity. A different technical domain piqued my interest and got me distracted. That being said, recently an automated phishing campaign hit my production c11Fthelastdeploy.hashnode.dev
JJeji JamesOct 5 · 2 min readOSINT Fundamentals And Investigation Techniques OSINT: Finding What's Already Out There OSINT (Open Source Intelligence) is the practice of collecting information from sources anyone can access. Hackers, journalists, investigators, and everyday peojeji-james.hashnode.dev
