Tuxxin

09/02/2026

Empire War is a free browser-based idle tycoon game with a PvP twist. Go from a startup garage to a global conglomerate — execute deals, build divisions, recruit employees, and crush your rivals on the Power 500 leaderboard. No download, no sign-up hassle.

https://empirewar.co

08/31/2026

issued.live — Certificate Transparency, ICANN registrations, and DNS unified in a single, completely free API.

- Formats: JSON, Markdown, and MCP supported site-wide
- Zero setup: curl issued.live/linkedin.com

08/27/2026

The FBI QTFY Advisory: When Attackers Rent the Same Proxies You Do

https://whack.sh/news/fbi-qtfy-advisory-shared-proxy-infrastructure

08/25/2026

whack.sh launched on August 6th. Nearly three weeks in, it is the fourth-largest contributor to abuse.ch MalwareBazaar over the trailing thirty days — listed alongside GovCERT.ch, Switzerland's national computer emergency response team, and researchers with unbroken streaks going back two, three and six years.

We did not set out to climb a leaderboard. But it is a useful thing to be able to point at

https://whack.sh/news/fourth-on-malware-bazaar

08/17/2026

iNetPanel 1.26 supports Debian 13 (Trixie) and serves the setup wizard over HTTPS. Read what broke on Trixie and how each issue was fixed.

08/10/2026

Set up a free daily security audit for your server in under 5 minutes.

Unsanctioned port exposures and unexpected configuration drift are two of the easiest ways for vulnerabilities to slip into production. Here’s how to automate daily security scans using three powerful open-source tools:

🔹 Naabu — Lightning-fast port scanning

🔹 Nmap — Deep service and version identification

🔹 Nuclei — Fast, template-based vulnerability detection

⚡ Bonus: The code examples include a diff feature so you only get alerted when something on your server actually changes (say goodbye to alert fatigue!).

Reports take ~30 seconds to run.

Full guide and ready-to-use code examples here 👇

A small bash script that runs a qsa.sh scan on a schedule, remembers the last result, and notifies you only when your externally visible exposure actually changes. Works with free and paid tokens.

08/06/2026

Per the FBI's IC3 warning, TDS kits fingerprint IPs to hide payloads, targeting only residential, mobile, or specific ASNs. To catch them, you have to blend in. whack.sh allows you to scan any URL via datacenter, residential, mobile, VPN and BYO egress options at once. Then diffs the captures to expose cloaking, TDS, phishing sites and malware a datacenter-only IP scanner misses. Datacenter egress is free (first 5MB/scan); our curl API drives every tier, free or paid.

https://whack.sh

07/27/2026

Want to see what your external perimeter looks like right now, without installing a thing?

Meet QSA.sh. We built it to run a real external port and vulnerability scan on your public IP, streamed directly to your terminal.

Just run "curl qsa.sh". In about 30 seconds, you get live results from naabu, nmap (+ vulners), and nuclei. No black box, nothing to install, and zero data stored.

Catch our new 30-second spot to see it in action. 🎬
🔗 Try it out: https://qsa.sh

07/03/2026

🛳️🦆 Hey Ducksters! Ever set your phone down by the buffet or the pool and immediately panic? 😅

We just launched a fun new feature: Free Cruise Duck Lock Screens! 📱💛

You can now generate custom, duck-themed wallpapers with your cabin number right on them—so if you lose your phone on the ship, it finds its way back to you!
Or, if you're heading to a meetup, try the Duckster Profile template. It puts a QR code on your lock screen so people can scan it to instantly see your ducks, miles, and finds!

It's completely free (you get 5 a week!) and we don't store your images or cabin numbers.

Grab your custom lock screen before your next sailing! ⚓
👉

Free cruise duck phone lock screens: put your cabin number on your wallpaper so a lost phone gets returned. 4 templates, 5 free generations a week.

06/28/2026

Origin of unix /bin, /sbin, and /usr/bin , /usr/sbin split