Go

Overview

Go is what modern security tools are written in — nuclei, httpx, subfinder, ffuf, and most of the recon ecosystem. It compiles to a single static binary, has first-class concurrency, and its RE2 regex engine can't be DoS'd. Learning Go means being able to read, modify, and build the tools you use every day.

Why learn Go

• The modern recon toolchain is Go — fluency lets you extend it.
• Single static binaries make tooling trivial to deploy on targets.
• Built-in concurrency makes fast scanners easy to write.

Security applications

• Building fast recon and scanning tools
• Reading and extending the Go security ecosystem
• Concurrent network tooling
• Cross-platform implant and agent concepts
• Safe-by-default regex with RE2

Planned curriculum

1. Go syntax and the type system
2. Goroutines and channels
3. Building a concurrent port scanner
4. HTTP tooling and the net/http package
5. The regexp package and RE2
6. Reading nuclei and httpx source
7. Cross-compilation for targets
8. Building a complete recon tool

Related languages