Skip to content
INDEX / 04

Uses

Nothing here is a recommendation. It is what I stopped changing.

Editor & terminal

  • VS CodeWhere the platform gets written.
  • NeovimAnything over SSH, which is most of it.
  • tmuxBecause a dropped connection should not cost a session.

Web testing

  • Burp SuiteThe proxy everything else routes through.
  • CaidoLighter, and the workflow suits long sessions.
  • ffufContent discovery, and the only fuzzer I have memorised.
  • Firefox profileA separate, extension-free profile so nothing helpful interferes.

Infrastructure

  • DockerTargets, challenge instances, and the HuntCode runner.
  • NginxTermination and per-route rate limiting.
  • PostgreSQLHunterFr's state, with constraints doing real work.
  • ProxmoxThe lab's undo button.

Elsewhere

  • ObsidianNotes during an engagement, so the report is not written from memory.
  • BitwardenBecause reusing a password on a lab box is how a lab box stops being isolated.