Brain Sharing on johnmatrix

Web Application Testing

Fri, 17 Jul 2026 14:10:40 +0100

Structured approach to web application penetration testing. Ordered by signal strength – test what’s most likely to yield critical findings first, eliminate noise last.

Testing Order

1. RECON         Endpoints, source maps, tech stack, signals
2. AUTH          Login, registration, session management, JWT, MFA
3. ACCESS        BAC, IDOR, privilege escalation, role matrix
4. INJECTION     SQLi, XSS, SSTI, command injection, XXE
5. LOGIC         Price manipulation, race conditions, state machines
6. INFRASTRUCTURE   SSRF, cache deception, API gateway bypass, CORS

Start at the top. Findings in one phase inform the next – a weak JWT makes IDOR testing trivial, a user enumeration oracle makes brute force the priority.

Bagel

Fri, 17 Jul 2026 13:43:41 +0100

Dev workstation security scanner from BoostSecurity. Checks Git config, SSH keys, npm settings, shell history, cloud credentials, IDE plugins, GitHub CLI, and AI tool configs for security gaps. Privacy-first – only metadata leaves the machine.

Burp MCP Server

Fri, 17 Jul 2026 13:43:41 +0100

MCP server and standalone CLI for Burp Suite Professional. Gives AI assistants structured access to Burp’s HTTP engine, proxy history, scanner, Repeater, and Intruder – with body limits, batch operations, and race condition support.

Caido Go SDK

Fri, 17 Jul 2026 13:43:41 +0100

Community Go SDK for the Caido web proxy. Type-safe GraphQL client with domain-specific packages for requests, intercept, replay, findings, scopes, and more. Powers the Caido MCP server.

Source: caido-community/sdk-go

Architecture

Your Go Code  -->  sdk-go  -->  GraphQL (genqlient)  -->  Caido Instance (port 8080)

Built on Khan/genqlient for compile-time type safety. Every GraphQL query/mutation has a corresponding Go function with typed inputs and outputs.

Caido MCP Server

Fri, 17 Jul 2026 13:43:41 +0100

MCP server and CLI for the Caido web proxy. Browse, replay, and analyze HTTP traffic from AI assistants or your terminal. Built on the community Go SDK with 66 tools and 6 read-only resources, OAuth + static token auth, HTTPQL filtering, session cookie jars, batch operations, WebSocket inspection, race condition testing, and full Caido feature coverage.

HackerOne MCP Server

Fri, 17 Jul 2026 13:43:41 +0100

MCP server for HackerOne triage teams. Full read/write access to reports, triage workflows, severity ratings, assignments, and program management – all from your AI assistant. Single Go binary, zero external dependencies.

Source: c0tton-fluff/hackerone-mcp

Secret Scrubber

Fri, 17 Jul 2026 13:43:41 +0100

Find and scrub secrets from AI CLI session logs. AWS keys, SSH private keys, GitHub tokens, JWTs, Bearer tokens, cloud credentials – replaced with [REDACTED-<type>] markers while preserving conversation context. Zero dependencies, stdlib-only Python.

SentinelOne MCP Server

Fri, 17 Jul 2026 13:43:41 +0100

MCP server for SentinelOne EDR. Query threats, manage agents, run Deep Visibility hunts, and check hash reputation from AI assistants. Stdlib-only Go binary - zero external dependencies.

Source: c0tton-fluff/sentinelone-mcp-server

Architecture

Claude Code  -->  stdio  -->  sentinelone-mcp-server (Go)  -->  REST API  -->  SentinelOne Console

Single binary, no SDK dependencies. Uses Go stdlib net/http + encoding/json for all API communication.

Phantom

Fri, 17 Jul 2026 10:43:50 +0100

Autonomous penetration testing operator. Native Go detectors, signal-based attack planning, and an engagement engine that chains findings into critical-severity paths. Designed to work with AI assistants as the reasoning layer while Go handles all detection at machine speed.

The AI-Era Security Engineer

Fri, 17 Jul 2026 10:43:50 +0100

The AI-Era Security Engineer

A practical guide for security professionals building, specifying, and reviewing code in the age of AI-assisted development.

The Mindset Shift

Traditional security review: find vulnerabilities in human-written code.