The Book Of Secret Knowledge

Community guide to securing and improving privacy on macOS.

n³ The unorthodox terminal file manager

A little tool to play with Windows security

The premier source of truth powering network automation. Open source under Apache 2. Try NetBox Cloud free: https://netboxlabs.com/products/free-netbox-cloud/

Pre-Built Vulnerable Environments Based on Docker-Compose

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

HTTP load generator, ApacheBench (ab) replacement

🤖 The Modern Port Scanner 🤖

Automated Nginx Reverse Proxy for Docker

A fully-modern text-based browser, rendering to TTY and browsers

Application Kernel for Containers

Build the best interview map. The current content includes JS, network, browser related, performance optimization, security, framework, Git, data structure, algorithm, etc.

Top-like interface for container metrics

A VIM-inspired filemanager for the console

🎮 The only Front-End Performance Checklist that runs faster than the others

z - jump around

What happens behind the scenes when we type www.google.com in a browser?

Impacket is a collection of Python classes for working with network protocols.

A community Bash framework.

Most advanced XSS scanner.

In-depth attack surface mapping and asset discovery

Make JSON greppable!

Cheatsheets for web development - devhints.io

How to improve NGINX performance, security, and other important things.

Fast passive subdomain enumeration tool.

Various Dockerfiles I use on the desktop and on servers.

Directory/File, DNS and VHost busting tool written in Go

articles

CTF framework and exploit development library

dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.

Postgres CLI with autocompletion and syntax highlighting

A distribution of Nginx with some advanced features

Exploitation Framework for Embedded Devices

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

Incredibly fast crawler designed for OSINT.

A guide to learn bash

Dockerfile linter, validate inline bash, written in Haskell

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

A collection of postmortems. Sorry for the delay in merging PRs!

A Terminal Client for MySQL with AutoCompletion and Syntax Highlighting.

This is a collection of tutorials for learning how to use Docker with various tools. Contributions welcome.

The Fish Shell Framework

Linux/OSX/FreeBSD resource monitor

Fast subdomains enumeration tool for penetration testers

The Browser Exploitation Framework Project

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

Interactive cli tool for HTTP inspection

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections.