A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

A collection of various awesome lists for hackers, pentesters and security researchers

List of Computer Science courses with video lectures.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Opiniated RAG for integrating GenAI in your apps 🧠 Focus on your product rather than the RAG. Easy integration in existing products with customisation! Any LLM: GPT4, Groq, Llama. Any Vectorstore: PGVector, Faiss. Any Files. Anyway you want.

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Comfortably monitor your Internet traffic 🕵️‍♂️

🕵️‍♂️ All-in-one OSINT tool for analysing any website

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Set up a personal VPN in the cloud

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

The official NGINX Open Source repository.

⚙️ NGINX config generator on steroids 💉

Scripts to build your own IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™

OpenZeppelin Contracts is a library for secure smart contract development.

Proxmox VE Helper-Scripts (Community Edition)

KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.

An evolving how-to guide for securing a Linux server.

Find secrets with Gitleaks 🔑

Infisical is the open-source platform for secrets, certificates, and privileged access management.

Find, verify, and analyze leaked credentials

eBPF-based Networking, Security, and Observability

UNIX-like reverse engineering framework and command-line toolset

Checklist of the most important security countermeasures when designing, testing, and releasing your API

SQL powered operating system instrumentation, monitoring, and analytics.