Security

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

A collection of various awesome lists for hackers, pentesters and security researchers

List of Computer Science courses with video lectures.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

Comfortably monitor your Internet traffic 🕵️‍♂️

Opiniated RAG for integrating GenAI in your apps 🧠 Focus on your product rather than the RAG. Easy integration in existing products with customisation! Any LLM: GPT4, Groq, Llama. Any Vectorstore: PGVector, Faiss. Any Files. Anyway you want.

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

🕵️‍♂️ All-in-one OSINT tool for analysing any website

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

The official NGINX Open Source repository.

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

Set up a personal VPN in the cloud

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

An evolving how-to guide for securing a Linux server.

Proxmox VE Helper-Scripts (Community Edition)

The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™

⚙️ NGINX config generator on steroids 💉

Infisical is the open-source platform for secrets, certificates, and privileged access management.

Set up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. Supports Ubuntu, Debian, CentOS/RHEL, Alpine Linux and Raspberry Pi OS. Includes client config and management scripts.

Find secrets with Gitleaks 🔑

KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.

OpenZeppelin Contracts is a library for secure smart contract development.

Find, verify, and analyze leaked credentials

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

eBPF-based Networking, Security, and Observability

UNIX-like reverse engineering framework and command-line toolset