A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
-
Updated
Nov 11, 2021
{{ message }}
Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.
A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
A collection of various awesome lists for hackers, pentesters and security researchers
An open-source x64/x32 debugger for windows.
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
List of Computer Science courses with video lectures.
None yet, but I'm working on OS X v10.11.6 'El Capitan' client-side. (See 'The way of deployment (cloud or local)' below for details on considered server infrastructure.)
None yet, as I haven't yet gotten that far into setting up Algo.
requirements.txtNot applicable (see above.)
Security Guide for Developers (实用性开发人员安全须知)
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
Guide to securing and improving privacy on macOS
SQL powered operating system instrumentation, monitoring, and analytics.
Scripts to build your own IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2
Liberating Web Analytics. Star us on Github? +1. Matomo is the leading open alternative to Google Analytics that gives you full control over your data. Matomo lets you easily collect data from websites & apps and visualise this data and extract insights. Privacy is built-in. We love Pull Requests!
Please describe what are you missing or wanting to be improved
Recently I read a new syntax coloring technique for programing languages. Instead of highlighting grammar, highlight the things you are likely to mistake. So make sure strcpy and strncpy are easily distinguishable by their color. It would be cool to apply this to immediate values in assembly and the ? command
How to improve NGINX performance, security, and other important things.
Source code for Hacker101.com - a free online web and mobile security class.
An evolving how-to guide for securing a Linux server.
Tink is a multi-language, cross-platform, open source library that provides cryptographic APIs that are secure, easy to use correctly, and hard(er) to misuse.
Asking about this since the NSA recently published guidance advising the public and private sectors to transition to cryptographic algorithms that are no less than sha384 & ec384 (elliptic curves).
While Edwards' Curves are different, its worth noting that prior to this update sha256 & secp256k1 were both on the list of acceptable cryptographic algorithms. My deduction was that 128-bit securit
KeePassXC is a cross-platform community-driven port of the Windows application “Keepass Password Safe”.
DockerSlim (docker-slim): Don't change anything in your Docker container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)
The Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.
Free cross-platform password manager compatible with KeePass
Certificate authority and access plane for SSH, Kubernetes, web applications, and databases
Keep dependencies up-to-date with automated Pull Requests
Automatic, daily repo and metadata backup - no maintenance needed: fast restore, DR, AWS, and S3 cloud storage support
Code scanning at ludicrous speed. Find bugs, apply guardrails across your repos, and get feedback in PRs, Slack, or email
Find and prevent zero-days and other critical bugs, with customizable alerts and automated code review
GuardRails provides continuous security feedback for modern development teams
Monitor your open source components for security vulnerabilities - goodbye muda, hello kaizen
Backups your GitHub repositories, fast and secure
Find, fix (and prevent!) known vulnerabilities in your code
Detect open source vulnerabilities in real time with suggested fixes for quick remediation
Backup your GitHub repos & metadata automatically. Get daily backups that can be restored in seconds – AWS storage available
It seems Caddy does not support wildcards/ expression matching in the reverse proxy's header_up.
For example this does not remove any headers:
This works as expected, but is limited in its use:
It'd be great if Caddy would support wildcards/ expression matching in the reverse proxy's header_up/ header_down.