r/netsec • u/albinowax • 15h ago

r/netsec monthly discussion & tool thread

Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links.

Rules & Guidelines

  • Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary.
  • Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely.
  • If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely.
  • Avoid use of memes. If you have something to say, say it with real words.
  • All discussions and questions should directly relate to netsec.
  • No tech support is to be requested or provided on r/netsec.

As always, the content & discussion guidelines should also be observed on r/netsec.

Feedback

Feedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox.

5 Upvotes

100% Upvoted

3 comments sorted by

1

u/Due-Fee-867 15h ago

anyone else feel like these monthly threads are 90% people trying to subtly shill their own github projects? not complaining, found some decent scripts that way, just an observation

been messing with automating osint workflows lately, the amount of python wrappers that are just thin veils over shodan or zoomeye api calls is kinda wild

1

u/Tarek_Mhiri 3h ago

That's fair. a lot of tool posts end up being thin wrappers.

I wanted to build something substantial around deterministic AppSec automation rather than API wrapping. I built cpg-nuclei-compiler (v1.0.0) in Rust: it natively ingests Joern Code Property Graphs (AST + CFG + PDG), parses dataflows deterministically, and exports 0%-syntax-error ProjectDiscovery Nuclei templates paired with a Docker harness for non-destructive verification.

Would love feedback on the Rust parser or CPG dataflow routing if you get a chance to inspect it!