:small_orange_diamond: GNU Bash - is an sh-compatible shell that incorporates useful features from the Korn shell and C shell.
:small_orange_diamond: Zsh - is a shell designed for interactive use, although it is also a powerful scripting language.
- :small_orange_diamond: bash-it - framework for using, developing and maintaining shell scripts and custom commands for your daily work.
- :small_orange_diamond: Oh My ZSH! - the best framework for managing your Zsh configuration.
+ :small_orange_diamond: bash-it - is a framework for using, developing and maintaining shell scripts and custom commands.
+ :small_orange_diamond: Oh My ZSH! - is the best framework for managing your Zsh configuration.
:small_orange_diamond: Oh My Fish - the Fishshell framework.
- :small_orange_diamond: Midnight Commander - visual file manager, licensed under GNU General Public License.
- :small_orange_diamond: ranger - a VIM-inspired filemanager for the console.
- :small_orange_diamond: nnn - tiny, lightning fast, feature-packed file manager.
- :small_orange_diamond: screen - full-screen window manager that multiplexes a physical terminal.
- :small_orange_diamond: tmux - terminal multiplexer, lets you switch easily between several programs in one terminal.
- :small_orange_diamond: tmux-cssh - sets a comfortable and easy to use functionality, clustering and synchronizing virtual tmux-sessions.
+ :small_orange_diamond: Midnight Commander - is a visual file manager, licensed under GNU General Public License.
+ :small_orange_diamond: ranger - is a VIM-inspired filemanager for the console.
+ :small_orange_diamond: nnn - is a tiny, lightning fast, feature-packed file manager.
+ :small_orange_diamond: screen - is a full-screen window manager that multiplexes a physical terminal.
+ :small_orange_diamond: tmux - is a terminal multiplexer, lets you switch easily between several programs in one terminal.
+ :small_orange_diamond: tmux-cssh - is a tool to set comfortable and easy to use functionality, clustering and synchronizing tmux-sessions.
:small_orange_diamond: vi - is one of the most common text editors on Unix.
:small_orange_diamond: vim - is a highly configurable text editor.
- :small_orange_diamond: emacs - an extensible, customizable, free/libre text editor - and more.
+ :small_orange_diamond: emacs - is an extensible, customizable, free/libre text editor - and more.
+
+ :small_orange_diamond: fd - is a simple, fast and user-friendly alternative to find.
:small_orange_diamond: PuTTY - is an SSH and telnet client, developed originally by Simon Tatham.
- :small_orange_diamond: nmap - free and open source (license) utility for network discovery and security auditing.
- :small_orange_diamond: masscan - the fastest Internet port scanner, spews SYN packets asynchronously.
- :small_orange_diamond: pbscan - faster and more efficient stateless SYN scanner and banner grabber.
- :small_orange_diamond: hping - command-line oriented TCP/IP packet assembler/analyzer.
- :small_orange_diamond: mtr - functionality of the 'traceroute' and 'ping' programs in a single network diagnostic tool.
- :small_orange_diamond: netcat - networking utility which reads and writes data across network connections, using the TCP/IP protocol.
- :small_orange_diamond: tcpdump - powerful command-line packet analyzer.
- :small_orange_diamond: tshark - dump and analyze network traffic (wireshark cli).
+ :small_orange_diamond: nmap - is a free and open source (license) utility for network discovery and security auditing.
+ :small_orange_diamond: masscan - is the fastest Internet port scanner, spews SYN packets asynchronously.
+ :small_orange_diamond: pbscan - is a faster and more efficient stateless SYN scanner and banner grabber.
+ :small_orange_diamond: hping - is a command-line oriented TCP/IP packet assembler/analyzer.
+ :small_orange_diamond: mtr - is a tool that combines the functionality of the 'traceroute' and 'ping' programs in a single network diagnostic tool.
+ :small_orange_diamond: netcat - is a networking utility which reads and writes data across network connections, using the TCP/IP protocol.
+ :small_orange_diamond: tcpdump - is a powerful command-line packet analyzer.
+ :small_orange_diamond: tshark - is a tool that allows us to dump and analyze network traffic (wireshark cli).
:small_orange_diamond: Termshark - is a simple terminal user-interface for tshark.
:small_orange_diamond: ngrep - is like GNU grep applied to the network layer.
+ :small_orange_diamond: sockdump - dump unix domain socket traffic.
:small_orange_diamond: stenographer - is a packet capture solution which aims to quickly spool all packets to disk.
- :small_orange_diamond: bmon - monitoring and debugging tool to capture networking related statistics and prepare them visually.
+ :small_orange_diamond: bmon - is a monitoring and debugging tool to capture networking related statistics and prepare them visually.
:small_orange_diamond: iptraf-ng - is a console-based network monitoring program for Linux that displays information about IP traffic.
:small_orange_diamond: iPerf3 - is a tool for active measurements of the maximum achievable bandwidth on IP networks.
:small_orange_diamond: ethr - is a Network Performance Measurement Tool for TCP, UDP & HTTP.
:small_orange_diamond: Etherate - is a Linux CLI based Ethernet and MPLS traffic testing tool.
+ :small_orange_diamond: echoip - is a IP address lookup service.
:small_orange_diamond: Nemesis - packet manipulation CLI tool; craft and inject packets of several protocols.
:small_orange_diamond: packetfu - a mid-level packet manipulation library for Ruby.
:small_orange_diamond: Scapy - packet manipulation library; forge, send, decode, capture packets of a wide number of protocols.
:small_orange_diamond: impacket - is a collection of Python classes for working with network protocols.
- :small_orange_diamond: ssh-audit - SSH server auditing.
+ :small_orange_diamond: ssh-audit - is a tool for SSH server auditing.
:small_orange_diamond: aria2 - is a lightweight multi-protocol & multi-source command-line download utility.
+ :small_orange_diamond: iptables-tracer - observe the path of packets through the iptables chains.
- :small_orange_diamond: fierce - a DNS reconnaissance tool for locating non-contiguous IP space.
+ :small_orange_diamond: fierce - is a DNS reconnaissance tool for locating non-contiguous IP space.
:small_orange_diamond: subfinder - is a subdomain discovery tool that discovers valid subdomains for websites.
- :small_orange_diamond: sublist3r - fast subdomains enumeration tool for penetration testers.
- :small_orange_diamond: amass - tool obtains subdomain names by scraping data sources, crawling web archives and more.
+ :small_orange_diamond: sublist3r - is a fast subdomains enumeration tool for penetration testers.
+ :small_orange_diamond: amass - is tool that obtains subdomain names by scraping data sources, crawling web archives and more.
:small_orange_diamond: namebench - provides personalized DNS server recommendations based on your browsing history.
+ :small_orange_diamond: knock - is a tool to enumerate subdomains on a target domain through a wordlist.
:small_orange_diamond: dnscrypt-proxy 2 - a flexible DNS proxy, with support for encrypted DNS protocols.
+ :small_orange_diamond: dnsdbq - API client providing access to passive DNS database systems (pDNS at Farsight Security, CIRCL pDNS).
- :small_orange_diamond: Curl - command line tool and library for transferring data with URLs.
+ :small_orange_diamond: Curl - is a command line tool and library for transferring data with URLs.
:small_orange_diamond: kurly - is an alternative to the widely popular curl program, written in Golang.
- :small_orange_diamond: HTTPie - a user-friendly HTTP client.
- :small_orange_diamond: wuzz - interactive cli tool for HTTP inspection.
- :small_orange_diamond: htrace.sh - simple Swiss Army knife for http/https troubleshooting and profiling.
- :small_orange_diamond: httpstat - visualizes curl statistics in a way of beauty and clarity.
- :small_orange_diamond: httplab - the interactive web server.
+ :small_orange_diamond: HTTPie - is an user-friendly HTTP client.
+ :small_orange_diamond: wuzz - is an interactive cli tool for HTTP inspection.
+ :small_orange_diamond: htrace.sh - is a simple Swiss Army knife for http/https troubleshooting and profiling.
+ :small_orange_diamond: httpstat - is a tool that visualizes curl statistics in a way of beauty and clarity.
+ :small_orange_diamond: httplab - is an interactive web server.
:small_orange_diamond: Lynx - is a text browser for the World Wide Web.
:small_orange_diamond: HeadlessBrowsers - a list of (almost) all headless web browsers in existence.
:small_orange_diamond: ab - is a single-threaded command line tool for measuring the performance of HTTP web servers.
:small_orange_diamond: siege - is an http load testing and benchmarking utility.
:small_orange_diamond: wrk - is a modern HTTP benchmarking tool capable of generating significant load.
- :small_orange_diamond: bombardier - fast cross-platform HTTP benchmarking tool written in Go.
+ :small_orange_diamond: wrk2 - is a constant throughput, correct latency recording variant of wrk.
+ :small_orange_diamond: bombardier - is a fast cross-platform HTTP benchmarking tool written in Go.
:small_orange_diamond: gobench - http/https load testing and benchmarking tool.
:small_orange_diamond: hey - HTTP load generator, ApacheBench (ab) replacement, formerly known as rakyll/boom.
:small_orange_diamond: boom - is a script you can use to quickly smoke-test your web app deployment.
- :small_orange_diamond: gobuster - free and open source directory/file & DNS busting tool written in Go.
+ :small_orange_diamond: SlowHTTPTest - is a tool that simulates some Application Layer Denial of Service attacks by prolonging HTTP.
+ :small_orange_diamond: gobuster - is a free and open source directory/file & DNS busting tool written in Go.
:small_orange_diamond: SELinux - provides a flexible Mandatory Access Control (MAC) system built into the Linux kernel.
:small_orange_diamond: AppArmor - proactively protects the operating system and applications from external or internal threats.
+ :small_orange_diamond: grapheneX - Automated System Hardening Framework.
+ :small_orange_diamond: DevSec Hardening Framework - Security + DevOps: Automatic Server Hardening.
- :small_orange_diamond: TOR Browser - protect your privacy and defend yourself against network surveillance and traffic analysis.
+ :small_orange_diamond: TOR Browser - protect your privacy and defend yourself against network surveillance and traffic analysis.
:small_orange_diamond: SSL/TLS Capabilities of Your Browser - test your browser's SSL implementation.
- :small_orange_diamond: Can I use - provides up-to-date browser support tables for support of front-end web technologies.
+ :small_orange_diamond: Can I use - provides up-to-date browser support tables for support of front-end web technologies.
:small_orange_diamond: Panopticlick 3.0 - is your browser safe against tracking?
:small_orange_diamond: Privacy Analyzer - see what data is exposed from your browser.
:small_orange_diamond: Web Browser Security - it's all about Web Browser fingerprinting.
@@ -346,8 +362,8 @@ Only main chapters:
:small_orange_diamond: SSLLabs Server Test - free online service performs a deep analysis of the configuration of any SSL web server.
:small_orange_diamond: SSLLabs Server Test (DEV) - free online service performs a deep analysis of the configuration of any SSL web server.
- :small_orange_diamond: ImmuniWeb® SSLScan - test SSL/TLS (PCI DSS, HIPAA and NIST).
- :small_orange_diamond: COMODO SSL Analyzer - ssl analyzer and ssl certificate checker.
+ :small_orange_diamond: ImmuniWeb® SSLScan - test SSL/TLS (PCI DSS, HIPAA and NIST).
+ :small_orange_diamond: COMODO SSL Analyzer - ssl analyzer and ssl certificate checker.*
:small_orange_diamond: SSL Check - scan your website for non-secure content.
:small_orange_diamond: CryptCheck - test your TLS server configuration (e.g. ciphers).
:small_orange_diamond: urlscan.io - service to scan and analyse websites.
@@ -406,7 +422,7 @@ Only main chapters:
:small_orange_diamond: MX Toolbox - all of your MX record, DNS, blacklist and SMTP diagnostics in one integrated tool.
:small_orange_diamond: blacklistalert - checks to see if your domain is on a Real Time Spam Blacklist.
:small_orange_diamond: MultiRBL - complete IP check for sending Mailservers.
- :small_orange_diamond: DKIM SPF & Spam Assassin Validator - checks mail authentication and scores messages with Spam Assassin.
+ :small_orange_diamond: DKIM SPF & Spam Assassin Validator - checks mail authentication and scores messages with Spam Assassin.
- :small_orange_diamond: Netcraft - detailed report about the site, helping you to make informed choices about their integrity.
+ :small_orange_diamond: Netcraft - detailed report about the site, helping you to make informed choices about their integrity.*
:small_orange_diamond: RIPE NCC - not-for-profit membership association, a Regional Internet Registry and the secretariat for the RIPE.
:small_orange_diamond: Robtex - uses various sources to gather public information about IP numbers, domain names, host names, routes etc.
:small_orange_diamond: Security Trails - APIs for Security Companies, Researchers and Teams.
:small_orange_diamond: Online Curl - curl test, analyze HTTP Response Headers.
- :small_orange_diamond: Ping.eu - online Ping, Traceroute, DNS lookup, WHOIS and others.
+ :small_orange_diamond: Ping.eu - online Ping, Traceroute, DNS lookup, WHOIS and others.
:small_orange_diamond: Network-Tools - network tools for webmasters, IT technicians & geeks.
:small_orange_diamond: Riseup - provides online communication tools for people and groups working on liberatory social change.
- :small_orange_diamond: VirusTotal - analyze suspicious files and URLs to detect types of malware.
+ :small_orange_diamond: VirusTotal - analyze suspicious files and URLs to detect types of malware.
+ :small_orange_diamond: thispersondoesnotexist - generate fake faces in one click - endless possibilities.
+ :small_orange_diamond: Intigriti Redirector - open redirect/SSRF payload generator.
+
- :small_orange_diamond: Gotcha? - list of 1.4 billion accounts circulates around the Internet.
+ :small_orange_diamond: Gotcha? - list of 1.4 billion accounts circulates around the Internet.*
:small_orange_diamond: have i been pwned? - check if you have an account that has been compromised in a data breach.
- :small_orange_diamond: ImmuniWeb® Mobile App Scanner - test security and privacy of mobile apps (iOS & Android).
+ :small_orange_diamond: ImmuniWeb® Mobile App Scanner - test security and privacy of mobile apps (iOS & Android).
:small_orange_diamond: Quixxi - free Mobile App Vulnerability Scanner for Android & iOS.
:small_orange_diamond: Ostorlab - analyzes mobile application to identify vulnerabilities and potential weaknesses.
:small_orange_diamond: Startpage - the world's most private search engine.
:small_orange_diamond: searX - a privacy-respecting, hackable metasearch engine.
+ :small_orange_diamond: darksearch - the 1st real Dark Web search engine.
- :small_orange_diamond: thispersondoesnotexist - generate fake faces in one click - endless possibilities.
-
- :small_orange_diamond: Unbound - validating, recursive, and caching DNS resolver (with TLS).
+ :small_orange_diamond: Unbound - validating, recursive, and caching DNS resolver (with TLS).
:small_orange_diamond: Knot Resolver - caching full resolver implementation, including both a resolver library and a daemon.
:small_orange_diamond: PowerDNS - is an open source authoritative DNS server, written in C++ and licensed under the GPL.
+ :small_orange_diamond: gvisor - container runtime sandbox.
+ :small_orange_diamond: ctop - top-like interface for container metrics.
+ :small_orange_diamond: docker-bench-security - is a script that checks for dozens of common best-practices around deploying Docker.
+
+ :small_orange_diamond: Moby - a collaborative project for the container ecosystem to assemble container-based system.
+ :small_orange_diamond: Traefik - open source reverse proxy/load balancer provides easier integration with Docker and Let's encrypt.
+ :small_orange_diamond: kong - The Cloud-Native API Gateway.
+ :small_orange_diamond: rancher - complete container management platform.
+ :small_orange_diamond: portainer - making Docker management easy.
+ :small_orange_diamond: nginx-proxy - automated nginx proxy for Docker containers using docker-gen.
+
+ :small_orange_diamond: docker-cheat-sheet - a quick reference cheat sheet on Docker.
+ :small_orange_diamond: awesome-docker - a curated list of Docker resources and projects.
+ :small_orange_diamond: docker_practice - learn and understand Docker technologies, with real DevOps practice!
+ :small_orange_diamond: labs
+ - is a collection of tutorials for learning how to use Docker with various tools.
+ :small_orange_diamond: dockerfiles - various Dockerfiles I use on the desktop and on servers.
+ :small_orange_diamond: kubernetes-the-hard-way - bootstrap Kubernetes the hard way on Google Cloud Platform. No scripts.
+ :small_orange_diamond: kubernetes-the-easy-way - bootstrap Kubernetes the easy way on Google Cloud Platform. No scripts.
+ :small_orange_diamond: k8s-security - kubernetes security notes and best practices.
+
:small_orange_diamond: pure-bash-bible - a collection of pure bash alternatives to external processes.
- :small_orange_diamond: The Bash Hackers Wiki - hold documentation of any kind about GNU Bash.
+ :small_orange_diamond: The Bash Hackers Wiki - hold documentation of any kind about GNU Bash.
:small_orange_diamond: Shell & Utilities - describes the commands and utilities offered to application programs by POSIX-conformant systems.
:small_orange_diamond: the-art-of-command-line - master the command line, in one page.
:small_orange_diamond: Shell Style Guide - a shell style guide for Google-originated open-source projects.
@@ -671,14 +727,16 @@ performance of any of your sites from across the globe.
:small_orange_diamond: nixCraft - linux and unix tutorials for new and seasoned sysadmin.
:small_orange_diamond: TecMint - the ideal Linux blog for Sysadmins & Geeks.
- :small_orange_diamond: Omnisecu - free Networking, System Administration and Security tutorials.
+ :small_orange_diamond: Omnisecu - free Networking, System Administration and Security tutorials.
:small_orange_diamond: linux-cheat - Linux tutorials and cheatsheets. Minimal examples. Mostly user-land CLI utilities.
:small_orange_diamond: Unix Toolbox - collection of Unix/Linux/BSD commands and tasks which are useful for IT work or for advanced users.
:small_orange_diamond: Linux Guide and Hints - tutorials on system administration in Fedora and CentOS.
:small_orange_diamond: strace-little-book - a little book which introduces strace.
:small_orange_diamond: http2-explained - a detailed document explaining and documenting HTTP/2.
:small_orange_diamond: http3-explained - a document describing the HTTP/3 and QUIC protocols.
+ :small_orange_diamond: Nginx Admin's Handbook - describes how to improve NGINX performance, security and other important things.
:small_orange_diamond: openssh guideline - is to help operational teams with the configuration of OpenSSH server and client.
+ :small_orange_diamond: PacketLife.net - a place to record notes while studying for Cisco's CCNP certification.
- :small_orange_diamond: Hacking Articles - LRaj Chandel's Security & Hacking Blog.
+ :small_orange_diamond: Hacking Articles - LRaj Chandel's Security & Hacking Blog.
:small_orange_diamond: AWS security tools - make your AWS cloud environment more secure.
:small_orange_diamond: Rawsec's CyberSecurity Inventory - an inventory of tools and resources about CyberSecurity.
:small_orange_diamond: The Illustrated TLS Connection - every byte of a TLS connection explained and reproduced.
@@ -721,56 +780,51 @@ performance of any of your sites from across the globe.
:small_orange_diamond: OWASP Testing Guide v4 - includes a "best practice" penetration testing framework.
:small_orange_diamond: OWASP Dev Guide - this is the development version of the OWASP Developer Guide.
:small_orange_diamond: Mozilla Web Security - help operational teams with creating secure web applications.
+ :small_orange_diamond: security-bulletins - security bulletins that relate to Netflix Open Source.
:small_orange_diamond: Enable CORS - enable cross-origin resource sharing.
:small_orange_diamond: Application Security Wiki - is an initiative to provide all application security related resources at one place.
:small_orange_diamond: Weird Proxies - reverse proxy related attacks; it is a result of analysis of various reverse proxies, cache proxies, etc.
:small_orange_diamond: Webshells - great series about malicious payloads.
:small_orange_diamond: Practical Web Cache Poisoning - show you how to compromise websites by using esoteric web features.
- :small_orange_diamond: Hidden directories and files - as a source of sensitive information about web application.
- :small_orange_diamond: 50M_CTF_Writeup - $50 million CTF from Hackerone - writeup.
+ :small_orange_diamond: Hidden directories and files - as a source of sensitive information about web application.
+ :small_orange_diamond: Explosive blog - great blog about cybersec and pentests.
:small_orange_diamond: Security Cookies - this paper will take a close look at cookie security.
+ :small_orange_diamond: APISecurityBestPractices - help you keep secrets (API keys, db credentials, certificates) out of source code.
- :small_orange_diamond: CTF Series : Vulnerable Machines - the steps below could be followed to find vulnerabilities and exploits.
- :small_orange_diamond: How to start RE/malware analysis? - collection of some hints and useful links for the beginners.
:small_orange_diamond: LZone Cheat Sheets - all cheat sheets.
:small_orange_diamond: Dan’s Cheat Sheets’s - massive cheat sheets documentation.
:small_orange_diamond: Rico's cheatsheets - this is a modest collection of cheatsheets.
+ :small_orange_diamond: DevDocs API - combines multiple API documentations in a fast, organized, and searchable interface.
+
+ :small_orange_diamond: CTF Series : Vulnerable Machines - the steps below could be followed to find vulnerabilities and exploits.
+ :small_orange_diamond: 50M_CTF_Writeup - $50 million CTF from Hackerone - writeup.
+ :small_orange_diamond: ctf-tasks - an archive of low-level CTF challenges developed over the years.
+ :small_orange_diamond: How to start RE/malware analysis? - collection of some hints and useful links for the beginners.
:small_orange_diamond: The C10K problem - it's time for web servers to handle ten thousand clients simultaneously, don't you think?
+ :small_orange_diamond: poor man's profiler - sampling tools like dtrace's don't really provide methods to see what programs are blocking on.
:small_orange_diamond: Bank Grade Security - when companies say they have "Bank Grade Security" they imply that it is a good thing.*
:small_orange_diamond: HTTPS on Stack Overflow - this is the story of a long journey regarding the implementation of SSL.
:small_orange_diamond: Julia's Drawings - some drawings about programming and unix world, zines about systems & debugging tools.
:small_orange_diamond: Hash collisions - this great repository is focused on hash collisions exploitation.
:small_orange_diamond: BGP Meets Cat - after 3072 hours of manipulating BGP, Job Snijders has succeeded in drawing a Nyancat.
+ :small_orange_diamond: What happens when... - you type google.com into your browser and press enter?
+ :small_orange_diamond: how-web-works - based on the 'What happens when...' repository.
:small_orange_diamond: HTTPS in the real world - great tutorial explain how HTTPS works in the real world.
:small_orange_diamond: Gitlab and NFS bug - how we spent two weeks hunting an NFS bug in the Linux kernel.
:small_orange_diamond: How To Become A Hacker - if you want to be a hacker, keep reading.
:small_orange_diamond: Operation Costs in CPU - an infographics which should help to estimate costs of certain operations in CPU clocks.
:small_orange_diamond: Let's Build a Simple Database - writing a sqlite clone from scratch in C.
-
- :small_orange_diamond: Varnish for PHP developers - very interesting presentation of varnish by Mattias Geniar.
- :small_orange_diamond: A Netflix Guide to Microservices - Josh Evans talks about the chaotic and vibrant world of microservices at Netflix.
-
- :small_orange_diamond: Comparing C to machine language - compare a simple C program with the compiled machine code of that program.
-
- :small_orange_diamond: Diffie-Hellman Key Exchange (short version) - how Diffie-Hellman Key Exchange worked.
+ :small_orange_diamond: simple-computer - great resource to understand how computers work under the hood.
+ :small_orange_diamond: The story of "Have I been pwned?" - working with 154 million records on Azure Table Storage.
+ :small_orange_diamond: TOP500 Supercomputers - shows the 500 most powerful commercially available computer systems known to us.
:small_orange_diamond: Awesome Web Security - a curated list of Web Security materials and resources.
:small_orange_diamond: awesome-cyber-skills - a curated list of hacking environments where you can train your cyber skills.
+ :small_orange_diamond: awesome-threat-intelligence - a curated list of Awesome Threat Intelligence resources.
:small_orange_diamond: Red-Teaming-Toolkit - a collection of open source and commercial tools that aid in red team operations.
:small_orange_diamond: awesome-burp-extensions - a curated list of amazingly awesome Burp Extensions.
:small_orange_diamond: Free Security eBooks - list of a Free Security and Hacking eBooks.
@@ -814,6 +868,7 @@ performance of any of your sites from across the globe.
:small_orange_diamond: reverseengineering-reading-list - a list of Reverse Engineering articles, books, and papers.
:small_orange_diamond: Awesome-WAF - a curated list of awesome web-app firewall (WAF) stuff.
:small_orange_diamond: RobotsDisallowed - a curated list of the most common and most interesting robots.txt disallowed directories.
+ :small_orange_diamond: awesome-yara - a curated list of awesome YARA rules, tools, and people.
:small_orange_diamond: Movies for Hackers - list of movies every hacker & cyberpunk must watch.
:small_orange_diamond: technical-whitepapers - IT whitepapers; hacking, web app security, db, reverse engineering and more; EN/PL.
:small_orange_diamond: Cheatography - over 3,000 free cheat sheets, revision aids and quick references.
+ :small_orange_diamond: awesome-static-analysis - static analysis tools for all programming languages.
+
+ :small_orange_diamond: Varnish for PHP developers - very interesting presentation of Varnish by Mattias Geniar.
+ :small_orange_diamond: A Netflix Guide to Microservices - Josh Evans talks about the chaotic and vibrant world of microservices at Netflix.
+ :small_orange_diamond: Comparing C to machine language - compare a simple C program with the compiled machine code of that program.
+
- :small_orange_diamond: Brendan Gregg's Blog - Brendan Gregg is an industry expert in computing performance and cloud computing.
- :small_orange_diamond: Gynvael "GynDream" Coldwind - Gynvael is a IT security engineer at Google.
- :small_orange_diamond: Michał "lcamtuf" Zalewski - "white hat" hacker, computer security expert.
- :small_orange_diamond: Mattias Geniar - developer, Sysadmin, Blogger, Podcaster and Public Speaker.
- :small_orange_diamond: Nick Craver - Software Developer and Systems Administrator for Stack Exchange.
- :small_orange_diamond: Robert Penz - IT security Expert.
- :small_orange_diamond: Scott Helme - Security Researcher, international speaker and founder of securityheaders.com and report-uri.com.
+ :small_orange_diamond: Brendan Gregg's Blog - is an industry expert in computing performance and cloud computing.
+ :small_orange_diamond: Gynvael "GynDream" Coldwind - is a IT security engineer at Google.
+ :small_orange_diamond: Michał "lcamtuf" Zalewski - white hat hacker, computer security expert.
+ :small_orange_diamond: Mattias Geniar - developer, sysadmin, blogger, podcaster and public speaker.
+ :small_orange_diamond: Nick Craver - software developer and systems administrator for Stack Exchange.
+ :small_orange_diamond: Scott Helme - security researcher, international speaker and founder of securityheaders.com and report-uri.com.
:small_orange_diamond: Brian Krebs - The Washington Post and now an Independent investigative journalist.
- :small_orange_diamond: Binni Shah - Linux Evangelist. Malwares. Kernel Dev. Security Enthusiast.
- :small_orange_diamond: Kacper Szurek - Detection Engineer at ESET.
- :small_orange_diamond: Troy Hunt - Microsoft Regional Director and Microsoft Most Valuable Professional for Developer Security.
- :small_orange_diamond: raymii.org - Linux/Unix Sysadmin specializing in building high availability cloud environments.
+ :small_orange_diamond: Bruce Schneier - is an internationally renowned security technologist, called a "security guru".
+ :small_orange_diamond: Chrissy Morgan - advocate of practical learning, Chrissy also takes part in bug bounty programs.
+ :small_orange_diamond: Andy Gill - is a hacker at heart who works as a senior penetration tester.
+ :small_orange_diamond: Daniel Miessler - cybersecurity expert and writer.
+ :small_orange_diamond: Javvad Malik - is a security advocate at AlienVault, a blogger event speaker and industry commentator.
+ :small_orange_diamond: Graham Cluley - public speaker and independent computer security analyst.
+ :small_orange_diamond: Kacper Szurek - detection engineer at ESET.
+ :small_orange_diamond: Troy Hunt - web security expert known for public education and outreach on security topics.
+ :small_orange_diamond: raymii.org - sysadmin specializing in building high availability cloud environments.
+ :small_orange_diamond: Robert Penz - IT security expert.
- :small_orange_diamond: Linux Audit - the Linux security blog about Auditing, Hardening and Compliance by Michael Boelen.
+ :small_orange_diamond: Linux Audit - the Linux security blog about auditing, hardening and compliance by Michael Boelen.
:small_orange_diamond:
Linux Security Expert - trainings, howtos, checklists, security tools and more.
:small_orange_diamond: The Grymoire - collection of useful incantations for wizards, be you computer wizards, magicians, or whatever.
:small_orange_diamond: PortSwigger Web Security Blog - about web app security vulns and top tips from our team of web security.
+ :small_orange_diamond: Secjuice - is the only non-profit, independent and volunteer led publication in the information security space.
+ :small_orange_diamond: Decipher - security news that informs and inspires.
+
+ :small_orange_diamond: Tenable Podcast - conversations and interviews related to Cyber Exposure, and more.
+ :small_orange_diamond: Sophos - threat news room, giving you news, opinion, advice and research on computer security issues.
+ :small_orange_diamond: Tripwire State of Security - blog featuring the latest news, trends and insights on current information security issues.
+ :small_orange_diamond: Malwarebytes Labs Blog - security blog aims to provide insider news about cybersecurity.
+ :small_orange_diamond: TrustedSec - latest news, and trends about cybersecurity.
+ :small_orange_diamond: AT&T Cybersecurity blog - news on emerging threats and practical advice to simplify threat detection.
+ :small_orange_diamond: Thycotic - where CISOs and IT Admins come to learn about industry trends, IT security, data breaches, and more.
+
+ :small_orange_diamond: Risky Business - is a weekly information security podcast featuring news and in-depth interviews.
+ :small_orange_diamond: Cyber, by Motherboard - stories, and focus on the ideas about cybersecurity.
+ :small_orange_diamond: Tenable Podcast - conversations and interviews related to Cyber Exposure, and more.
+ :small_orange_diamond:
+Cybercrime Investigations - podcast by Geoff White about cybercrimes.
+ :small_orange_diamond: The many hats club - featuring stories from a wide range of Infosec people (Whitehat, Greyhat and Blackhat).
+ :small_orange_diamond: Darknet Diaries - true stories from the dark side of the Internet.
+ :small_orange_diamond: OSINTCurious Webcasts - is the investigative curiousity that helps people be successful in OSINT.
+
+ :small_orange_diamond: rev3rse security - offensive, binary exploitation, web application security, vulnerability, hardening, red team, blue team.
+ :small_orange_diamond: LiveOverflow - a lot more advanced topics than what is typically offered in paid online courses - but for free.
+ :small_orange_diamond: J4vv4D - the important information regarding our internet security.
+ :small_orange_diamond:
+CyberTalks - talks, interviews, and article about cybersecurity.
+
+ :small_orange_diamond: @blackroomsec - a white-hat hacker/pentester. Intergalactic Minesweeper Champion 1990.
+ :small_orange_diamond: @MarcoCiappelli - Co-Founder @ITSPmagazine, at the intersection of IT security and society.
+ :small_orange_diamond: @binitamshah - Linux Evangelist. Malwares. Kernel Dev. Security Enthusiast.
+ :small_orange_diamond: @joe_carson - an InfoSec Professional and Tech Geek.
+ :small_orange_diamond: @mikko - CRO at F-Secure, Reverse Engineer, TED Speaker, Supervillain.
+ :small_orange_diamond: @esrtweet - often referred to as ESR, is an American software developer, and open-source software advocate.
+ :small_orange_diamond: @gynvael - security researcher/programmer, @DragonSectorCTF founder/player, technical streamer.
+ :small_orange_diamond: @x0rz - Security Researcher & Cyber Observer.
+ :small_orange_diamond: @hasherezade - programmer, malware analyst. Author of PEbear, PEsieve, libPeConv.
+ :small_orange_diamond: @TinkerSec - tinkerer, cypherpunk, hacker.
+ :small_orange_diamond: @alisaesage - independent hacker and researcher.
+
+ :small_orange_diamond: @haveibeenpwned - check if you have an account that has been compromised in a data breach.
+ :small_orange_diamond: @bugcrowd - trusted by more of the Fortune 500 than any other crowdsourced security platform.
+ :small_orange_diamond: @Malwarebytes - most trusted security company. Unmatched threat visibility.
+ :small_orange_diamond: @sansforensics - the world's leading Digital Forensics and Incident Response provider.
+ :small_orange_diamond: @attcyber - AT&T Cybersecurity’s Edge-to-Edge technologies provide threat intelligence, and more.
+ :small_orange_diamond: @TheManyHatsClub - an information security focused podcast and group of individuals from all walks of life.
+ :small_orange_diamond: @hedgehogsec - Hedgehog Cyber. Gibraltar and Manchester's top boutique information security firm.
+ :small_orange_diamond: @NCSC - the National Cyber Security Centre. Helping to make the UK the safest place to live and work online.
+ :small_orange_diamond: @Synacktiv - IT security experts.
- :small_orange_diamond: How to Do Things at ARL - how to configure modems, scan images, record CD-ROMs, and other useful techniques.
+ :small_orange_diamond: How to Do Things at ARL - how to configure modems, scan images, record CD-ROMs, and other useful techniques.*
+
+ :small_orange_diamond: Diffie-Hellman Key Exchange (short version) - how Diffie-Hellman Key Exchange worked.
:small_orange_diamond: Sandcat Browser - a penetration-oriented browser with plenty of advanced functionality already built in.
:small_orange_diamond: Metasploit - tool and framework for pentesting system, web and many more, contains a lot a ready to use exploit.
- :small_orange_diamond: Burp Suite - tool for testing Web application security, intercepting proxy to replay, inject, scan and fuzz HTTP requests.
+ :small_orange_diamond: Burp Suite - tool for testing web application security, intercepting proxy to replay, inject, scan and fuzz HTTP requests.
:small_orange_diamond: OWASP Zed Attack Proxy - intercepting proxy to replay, inject, scan and fuzz HTTP requests.
:small_orange_diamond: w3af - is a Web Application Attack and Audit Framework.
:small_orange_diamond: mitmproxy - an interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
@@ -876,12 +1023,15 @@ Linux Security Expert - trainings, howtos, checklists, security tools an
:small_orange_diamond: Photon - incredibly fast crawler designed for OSINT.
:small_orange_diamond: XSStrike - most advanced XSS detection suite.
:small_orange_diamond: Sn1per - automated pentest framework for offensive security experts.
+ :small_orange_diamond: aquatone - a tool for domain flyovers.
+ :small_orange_diamond: BillCipher - information gathering tool for a website or IP address.
:small_orange_diamond: WhatWaf - detect and bypass web application firewalls and protection systems.
:small_orange_diamond: John The Ripper - is a fast password cracker, currently available for many flavors of Unix, Windows, and other.
:small_orange_diamond: hashcat - world's fastest and most advanced password recovery utility.
:small_orange_diamond: p0f - is a tool to identify the players behind any incidental TCP/IP communications.
:small_orange_diamond: Recon-ng - is a full-featured Web Reconnaissance framework written in Python.
:small_orange_diamond: ssh_scan - a prototype SSH configuration and policy scanner.
+ :small_orange_diamond: LeakLooker - find open databases - powered by Binaryedge.io
:small_orange_diamond: exploitdb - searchable archive from The Exploit Database.
:small_orange_diamond: ctf-tools - some setup scripts for security research tools.
:small_orange_diamond: pwntools - CTF framework and exploit development library.
@@ -902,18 +1052,12 @@ Linux Security Expert - trainings, howtos, checklists, security tools an
:small_orange_diamond: AutoSploit - automated mass exploiter.
- :small_orange_diamond: PHP-backdoors - a collection of PHP backdoors. For educational or testing purposes only.
-
:small_orange_diamond: PTES - the penetration testing execution standard.
- :small_orange_diamond: Pentests MindMap - amazing mind map with vulnerable apps and systems.
- :small_orange_diamond: WebApps Security Tests MindMap - incredible mind map for WebApps security tests.
+ :small_orange_diamond: Pentests MindMap - amazing mind map with vulnerable apps and systems.
+ :small_orange_diamond: WebApps Security Tests MindMap - incredible mind map for WebApps security tests.
:small_orange_diamond: Brute XSS - master the art of Cross Site Scripting.
:small_orange_diamond: Offensive Security Bookmarks - security bookmarks collection, all that things I need to pass OSCP.
:small_orange_diamond: Awesome Pentest Cheat Sheets - collection of the cheat sheets useful for pentesting.
@@ -922,13 +1066,15 @@ Linux Security Expert - trainings, howtos, checklists, security tools an
:small_orange_diamond: Awesome Hacking Resources - collection of hacking/penetration testing resources to make you better.
:small_orange_diamond: Awesome Pentest - collection of awesome penetration testing resources, tools and other shiny things.
:small_orange_diamond: Hacking Cheat Sheet - author hacking and pentesting notes.
- :small_orange_diamond: Web App Pentesting Cheat Sheet - the typical steps performed when conducting a web application penetration test.
+ :small_orange_diamond: Web App Pentesting Cheat Sheet - the typical steps performed when conducting a web application penetration test.*
:small_orange_diamond: Cyber Security Resources - includes thousands of cybersecurity-related references and resources.
:small_orange_diamond: Pentest Bookmarks - there are a LOT of pentesting blogs.
+ :small_orange_diamond: ThreatHunter-Playbook - to aid the development of techniques and hypothesis for hunting campaigns.
:small_orange_diamond: PayloadsAllTheThings - a list of useful payloads and bypass for Web Application Security and Pentest/CTF.
:small_orange_diamond: payloads - git all the Payloads! A collection of web attack payloads.
:small_orange_diamond: Pentesting Tools Cheat Sheet - a quick reference high level overview for typical penetration testing engagements.
- :small_orange_diamond: OWASP Cheat Sheet Series - collection of high value information on specific application security topics.
+ :small_orange_diamond: OWASP Cheat Sheet Series - is a collection of high value information on specific application security topics.
+ :small_orange_diamond: OWASP dependency-check - is an open source solution the OWASP Top 10 2013 entry.
:small_orange_diamond: DEF CON Media Server - great stuff from DEFCON.
:small_orange_diamond: Awesome Malware Analysis - a curated list of awesome malware analysis tools and resources.
:small_orange_diamond: SQL Injection Cheat Sheet - detailed technical information about the many different variants of the SQL Injection.
@@ -940,7 +1086,16 @@ Linux Security Expert - trainings, howtos, checklists, security tools an
:small_orange_diamond: SSRF Tips - a collection of SSRF Tips.
:small_orange_diamond: shell-storm repo CTF - great archive of CTFs.
:small_orange_diamond: ctf - CTF (Capture The Flag) writeups, code snippets, notes, scripts.
+ :small_orange_diamond: My-CTF-Web-Challenges - collection of CTF Web challenges.
:small_orange_diamond: MSTG - The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing.
+ :small_orange_diamond: Internal-Pentest-Playbook - notes on the most common things for an Internal Network Penetration Test.
+ :small_orange_diamond: KeyHacks - shows quick ways in which API keys leaked by a bug bounty program can be checked.
+
+ :small_orange_diamond: PHP-backdoors - a collection of PHP backdoors. For educational or testing purposes only.
- :small_orange_diamond: Bounty Factory - European bug bounty platform based on the legislation and rules in force in European countries.
+ :small_orange_diamond: YesWeHack - bug bounty platform with infosec jobs.
:small_orange_diamond: Openbugbounty - allows any security researcher reporting a vulnerability on any website.
:small_orange_diamond: hackerone - global hacker community to surface the most relevant security issues.
:small_orange_diamond: bugcrowd - crowdsourced cybersecurity for the enterprise.
:small_orange_diamond: Crowdshield - crowdsourced security & bug bounty management.
:small_orange_diamond: Synack - crowdsourced security & bug bounty programs, crowd security intelligence platform and more.
:small_orange_diamond: Hacktrophy - bug bounty platform.
- :small_orange_diamond: YesWeHack - bug bounty platform with infosec jobs.
+ :small_orange_diamond: Changelog - is a community of hackers; news & podcasts for developers and hackers.
+
:small_orange_diamond: Unbound DNS Tutorial - a validating, recursive, and caching DNS server.
- :small_orange_diamond: Knot Resolver on Fedora - how to get faster and more secure DNS resolution with Knot Resolver on Fedora.
+ :small_orange_diamond: Knot Resolver on Fedora - how to get faster and more secure DNS resolution with Knot Resolver on Fedora.
:small_orange_diamond: DNS-over-HTTPS - tutorial to setup your own DNS-over-HTTPS (DoH) server.
:small_orange_diamond: DNS-over-TLS - following to your DoH server, setup your DNS-over-TLS (DoT) server.
:small_orange_diamond: DNS Servers - how (and why) i run my own DNS Servers.
@@ -1077,6 +1260,7 @@ Linux Security Expert - trainings, howtos, checklists, security tools an
:small_orange_diamond: os-tutorial - how to create an OS from scratch.
:small_orange_diamond: Write your Own Virtual Machine - how to write your own virtual machine (VM).
:small_orange_diamond: x86 Bare Metal Examples - dozens of minimal operating systems to learn x86 system programming.
+ :small_orange_diamond: simple-computer - the scott CPU from "But How Do It Know?" by J. Clark Scott.