The Book Of Secret Knowledge

Community guide to securing and improving privacy on macOS.

n³ The unorthodox terminal file manager

A little tool to play with Windows security

The premier source of truth powering network automation. Open source under Apache 2. Try NetBox Cloud free: https://netboxlabs.com/products/free-netbox-cloud/

Pre-Built Vulnerable Environments Based on Docker-Compose

HTTP load generator, ApacheBench (ab) replacement

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

🤖 The Modern Port Scanner 🤖

Automated Nginx Reverse Proxy for Docker

Application Kernel for Containers

A fully-modern text-based browser, rendering to TTY and browsers

Build the best interview map. The current content includes JS, network, browser related, performance optimization, security, framework, Git, data structure, algorithm, etc.

Top-like interface for container metrics

A VIM-inspired filemanager for the console

🎮 The only Front-End Performance Checklist that runs faster than the others

z - jump around

What happens behind the scenes when we type www.google.com in a browser?

Impacket is a collection of Python classes for working with network protocols.

In-depth attack surface mapping and asset discovery

A community Bash framework.

Most advanced XSS scanner.

Fast passive subdomain enumeration tool.

Make JSON greppable!

Cheatsheets for web development - devhints.io

How to improve NGINX performance, security, and other important things.

Directory/File, DNS and VHost busting tool written in Go

articles

Various Dockerfiles I use on the desktop and on servers.

CTF framework and exploit development library

dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.

Postgres CLI with autocompletion and syntax highlighting

A high-performance web server and reverse proxy, 100% compatible with nginx.

Incredibly fast crawler designed for OSINT.

Exploitation Framework for Embedded Devices

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

A collection of postmortems. Sorry for the delay in merging PRs!

Dockerfile linter, validate inline bash, written in Haskell

A guide to learn bash

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Rich MySQL Terminal Client with AutoCompletion, Syntax Highlighting, and Dataframes

This is a collection of tutorials for learning how to use Docker with various tools. Contributions welcome.

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections.

The Fish Shell Framework

Linux/OSX/FreeBSD resource monitor

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

The Browser Exploitation Framework Project

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

Fast subdomains enumeration tool for penetration testers

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.