Top all-time · #8852
#_shellntel Cybersecurity Blog
Company blog · shellntel.com/blogsecurityprogramming
#_shellntel Cybersecurity Blog is the company blog at shellntel.com, writing about security and programming. Since 2015, 9 different Hacker News readers have linked it 9 times, most often “AWS Metadata Endpoint – How to Not Get Pwned Like Capital One”. It is still writing: the last post was on 2026-07-08, and you can follow it by feed.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN readers link this cybersecurity blog's posts on offensive security, such as SSRF and AWS metadata endpoint abuse, and the Luckystrike malicious macro database. Posts are cited as sources on these topics.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Dive into expert-driven penetration-testing and security-engineering tales from the SynerComm AssureIT team. Discover how to build real offensive-security tools, analyze emerging threats like AI attack surfaces and encrypted mesh networks, and strengthen your organization’s defenses.
Most-linked posts?
- AWS Metadata Endpoint – How to Not Get Pwned Like Capital One2 people · 2 mentions · first linked 2019-10-28
- How to build a 8 GPU password cracker2 people · 2 mentions · first linked 2017-02-14
What Hacker News says?
I’m not a security researcher, but a normal backend dev (possibly) This comment intrigued me and led me down the typically great HN rabbit-hole. I found a couple of sources related to this, fascinating, thank you! https://www.techtarget.com/searchsecurity/news/252467901/Cap... https://www.shellntel.com/blog/2019/8/27/aws-metadata-endpoi... I knew about SSRFs, but the ability of attackers to pivot and stack and chain…
Comment linking /blog/2019/8/27/aws-metadata-endpoint-how-to-not-get-pwned-like-capital-one
on “Stunner – tool to test and exploit STUN, TURN and TURN over TCP servers”Submitted How to build a 8 GPU password cracker as a story · 39 points
HN discussionThis sounds like Luckystrike. http://www.shellntel.com/blog/2016/9/13/luckystrike-a-databa...
Comment linking /blog/2016/9/13/luckystrike-a-database-backed-evil-macro-generator
on “Investigating a malware sample which sometimes fails to behave maliciously”Submitted VPN over DNS as a story · 2 points
HN discussionOnly to put the site into some context, Elcomsoft is a known provider of "password breakers" for several programs, nrmally used for digital forensics. This does not equate to "attack" or "remote attack". It is mainly about having (legal) access to a seized storage device and trying to extract from it as much information as possible. Although using the single NVIDIA GPU of a "normal" desktop is possible, normally som…
Comment linking /blog/2017/2/8/how-to-build-a-8-gpu-password-cracker
on “Breaking into 1Password, KeePass, LastPass and Dashlane”Submitted Drone Code Execution (Part 1) as a story · 2 points
HN discussionSubmitted AWS Metadata Endpoint – How to Not Get Pwned Like Capital One as a story · 1 points
HN discussionSubmitted Websocket based egress buster as a story · 1 points
HN discussionSubmitted CrEAP – Harvesting Users on Enterprise Wireless Networks as a story · 1 points
HN discussion