offsecblog.com resources

offsecblog.com

Resources curated from this publisher and indexed across appsec.fyi topic pages. Last item added: 2026-11-09.

Fuzzing 3 Recon 2 AI 1 Bug Bounty 1 OSINT 1 Python 1

Date Added	Resource	Excerpt
2026-11-09 2026	mishegos for differential fuzzing of x86 instruction decoders Fuzzing	This content is a short description of the OffSec Blog. It highlights the blog as a resource for offensive security professionals, covering topics such as bug bounty programs, digital forensics and incident response (DFIR), reverse engineering, malware analysis, and hacker operating systems. The provided text does not mention any specific bug bounty payouts or technical details about "mishegos for differential fuzzing of x86 instruction decoders."
2026-11-09 2026	grizzly for modular cross-platform browser fuzzing Fuzzing Python	This content is an excerpt from the OffSec Blog, which serves as a technical security tooling radar. It focuses on resources and information relevant to offensive security, bug bounty hunting, digital forensics and incident response (DFIR), reverse engineering, malware analysis, and hacker operating systems. The blog aims to guide users on the latest tools and techniques in these specialized cybersecurity fields.
2026-11-09 2026	osint-d2 for agentic identity investigations across public sources AI OSINT Recon	This content is an excerpt from the OffSec Blog, a resource focused on offensive security tools. It highlights "osint-d2" as a tool for agentic identity investigations, utilizing public sources. The blog serves as a technical radar for various security disciplines including bug bounty, DFIR, reverse engineering, malware analysis, and hacker operating systems.
2026-11-08 2026	Jazzer.js for coverage-guided fuzzing of Node.js and TypeScript Fuzzing	Library for coverage-guided, in-process fuzzing of Node.js and TypeScript, based on libFuzzer. Jazzer.js integrates with Jest for seamless inclusion in development workflows, turning failing inputs into regression tests. It helps find bugs in parsers, decoders, and other attack-surface-heavy code by instrumenting code and preferentially evolving inputs that reach new paths.
2026-11-07 2026	lit-bb-hack-tools for bug bounty web reconnaissance Bug Bounty Recon	Library of 26 composable Go utilities for web-focused bug bounty and penetration testing. Designed for Unix pipeline integration, tools like `eae`, `eap`, `eah`, `earh`, `eapath`, and `eaparam` manipulate URL lists, extract file extensions, protocols, hosts, and parameters. Others, like `robotstxt`, `eefjsf`, `chainredir`, and `heacoll`, parse robots.txt, JavaScript endpoints, redirect chains, and HTTP headers. Scope management tools `bbscope` and `genscope` integrate with Burp Suite, while `subtake` aids in detecting subdomain takeovers and `doomxss` scans for DOM XSS sinks.