Skip to content

v0.8.0 — Cross-Writeup Technique Linking

Choose a tag to compare

View all tags
@x746b x746b released this 29 Mar 11:53
· 50 commits to main since this release
v0.8.0
98ea5c9

What's New

Cross-writeup technique linking — find all writeups that share the same attack technique, with tools and tags side by side.

New MCP Tools

  • search_related — Find writeups sharing a technique (e.g., "RBCD", "ADCS ESC1", "SQL Injection")
  • list_techniques — List all indexed techniques with writeup counts
  • enrich — Populate technique links from existing tags (no re-indexing needed)

New CLI Commands

vault techniques --min-count 5       # List techniques with 5+ writeups
vault related "RBCD"                 # All writeups using RBCD
vault related "ADCS ESC1"           # All ESC1 approaches side by side
vault enrich                         # Populate technique links from tags

How It Works

Techniques are extracted from your #hashtag tags — the single source of truth. Tags like #RBCD, #SQLi, #ESC1, #Kerberoasting are mapped to canonical technique names via TAG_TECHNIQUE_MAP. No prose scanning, no false positives.

Stats (example vault)

  • 642 writeups, 943 technique links
  • 75 distinct techniques across AD, web, privesc, credential, crypto, DFIR categories
  • Enrichment runs in ~2 seconds on full vault

Other Changes

  • Removed ROADMAP.md (implemented or descoped)
  • Updated AGENTS.md with technique linking guidance
Assets 2
Loading