The Book Of Secret Knowledge

Community guide to securing and improving privacy on macOS.

n³ The unorthodox terminal file manager

A little tool to play with Windows security

The premier source of truth powering network automation. Open source under Apache 2. Try NetBox Cloud free: https://netboxlabs.com/products/free-netbox-cloud/

Pre-Built Vulnerable Environments Based on Docker-Compose

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

🤖 The Modern Port Scanner 🤖

HTTP load generator, ApacheBench (ab) replacement

Automated Nginx Reverse Proxy for Docker

Application Kernel for Containers

A fully-modern text-based browser, rendering to TTY and browsers

Build the best interview map. The current content includes JS, network, browser related, performance optimization, security, framework, Git, data structure, algorithm, etc.

Top-like interface for container metrics

A VIM-inspired filemanager for the console

🎮 The only Front-End Performance Checklist that runs faster than the others

z - jump around

What happens behind the scenes when we type www.google.com in a browser?

Impacket is a collection of Python classes for working with network protocols.

Most advanced XSS scanner.

A community Bash framework.

In-depth attack surface mapping and asset discovery

Make JSON greppable!

Cheatsheets for web development - devhints.io

Fast passive subdomain enumeration tool.

How to improve NGINX performance, security, and other important things.

Directory/File, DNS and VHost busting tool written in Go

articles

Various Dockerfiles I use on the desktop and on servers.

CTF framework and exploit development library

dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.

Postgres CLI with autocompletion and syntax highlighting

A high-performance web server and reverse proxy, 100% compatible with nginx.

Exploitation Framework for Embedded Devices

Incredibly fast crawler designed for OSINT.

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

Dockerfile linter, validate inline bash, written in Haskell

A guide to learn bash

A collection of postmortems. Sorry for the delay in merging PRs!

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Rich MySQL Terminal Client with AutoCompletion, Syntax Highlighting, and Dataframes

This is a collection of tutorials for learning how to use Docker with various tools. Contributions welcome.

The Fish Shell Framework

Linux/OSX/FreeBSD resource monitor

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections.

Fast subdomains enumeration tool for penetration testers

The Browser Exploitation Framework Project

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

Interactive cli tool for HTTP inspection