Onionspector – now let's see what The Onion knows about you(0ut3r.space)

7 points by h0ek 1 month ago | 3 comments

What I Learned Securing Sniffnet with the GitHub Secure Open Source Fund(sniffnet.app)

13 points by dmit 2 months ago | 2 comments

HackEurope 2026: A short rant on AI and hackathons(duti.dev)

48 points by mindracer 2 months ago | 39 comments

Reverse-engineering an encrypted IoT protocol(smlx.dev)

196 points by smlx 2 years ago | 33 comments

Taking over 60k spyware user accounts with SQL injection(ericdaigle.ca)

221 points by mtlynch 1 year ago | 64 comments

Keeping SSH sessions alive with systemd-inhibit(kd8bny.com)

45 points by kd8bny 1 year ago | 16 comments

How SSH port became 22(ssh.com)

358 points by sysoleg 2 years ago | 140 comments

SSH Academy page from ssh.com explaining SSH ports and the story of how SSH was assigned port 22.

You already have a Git server(maurycyz.com)

596 points by chmaynard 1 year ago | 393 comments

Blog post explaining that any server with SSH access can host git repositories, showing how to clone over SSH and allow pushes to the checked-out branch.

Self-hosted HTTP tunnels with SSH and Nginx(vincent.bernat.ch)

158 points by renehsz 22 days ago | 34 comments

Vincent Bernat's blog post explaining how to build self-hosted HTTP tunnels to expose a local server using a plain SSH client and nginx.

Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure(aws.amazon.com)

227 points by cubefox 4 days ago | 98 comments

AWS Security Blog post reporting that Amazon's MadPot honeypots saw PHP2Shell exploitation attempts four days before public disclosure, with IOCs and recommended actions.

SSH over HTTPS(trofi.github.io)

373 points by jandeboevrie 2 years ago | 124 comments

A blog post showing how to tunnel SSH through HTTPS using an ssh ProxyCommand with socat and Apache's mod_proxy_connect.

What a Hacker Stole from Me(mynoise.net)

355 points by wonger_ 1 year ago | 106 comments

A myNoise blog post by founder Stéphane describing a hacker's attack on the myNoise website, first via code-injection attempts and then a different strategy.