A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
-
Updated
May 27, 2022
{{ message }}
Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.
A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
A collection of various awesome lists for hackers, pentesters and security researchers
Quality of life
I would like to be able to use relative paths in the launcher settings file to point to x32dbg.exe and x64dbg.exe respectively. I've already tried editing the file manually and assuming my implementation (.\/\//) isn't wrong, the launcher seemingly refuses the use of relative paths.
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
List of Computer Science courses with video lectures.
None yet, but I'm working on OS X v10.11.6 'El Capitan' client-side. (See 'The way of deployment (cloud or local)' below for details on considered server infrastructure.)
None yet, as I haven't yet gotten that far into setting up Algo.
requirements.txtNot applicable (see above.)
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
Security Guide for Developers (实用性开发人员安全须知)
Guide to securing and improving privacy on macOS
SQL powered operating system instrumentation, monitoring, and analytics.
Scripts to build your own IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2
Place the access_log and error_log directives inside the main server block instead of http block.
Disable access_log at http block:
File: /etc/nginx/nginx.conf
# ...
http {
# ...
access_log off;
# ...
}
# ...Enable per site access_log and error_log at main server block:
File: /etc/nginx/
Liberating Web Analytics. Star us on Github? +1. Matomo is the leading open alternative to Google Analytics that gives you full control over your data. Matomo lets you easily collect data from websites & apps and visualise this data and extract insights. Privacy is built-in. We love Pull Requests!
Need to have a global flag to control the console output mode (--json-output or something like that).
The Single Sign-On Multi-Factor portal for web apps
KeePassXC is a cross-platform community-driven port of the Windows application “Keepass Password Safe”.
How to improve NGINX performance, security, and other important things.
The upstream issues got closed. It is referenced in:
This issue was created by the ORY Closed Reference Notifier GitHub action.
Source code for Hacker101.com - a free online web and mobile security class.
An evolving how-to guide for securing a Linux server.
Tink is a multi-language, cross-platform, open source library that provides cryptographic APIs that are secure, easy to use correctly, and hard(er) to misuse.
According to the Debain wiki keys “MUST NOT be placed in /etc/apt/trusted.gpg.d or loaded by apt-key add.”: https://wiki.debian.org/DebianRepository/UseThirdParty
So instead of this:
wget -qO - https://aquasecurity.github.io/trivy-repo/deb/public.key | sudo apt-key add -
echo deb https://aquasecurity.github.io/trivy-repo/deb $(lsb_release -sc) main | sudo tee -a /etc/apt/sources.eBPF-based Networking, Security, and Observability
Certificate authority and access plane for SSH, Kubernetes, web apps, databases and desktops
Automatic, daily repo and metadata backup - no maintenance needed: fast restore, DR, AWS, and S3 cloud storage support
Find and prevent zero-days and other critical bugs, with customizable alerts and automated code review
GuardRails provides continuous security feedback for modern development teams
Keep dependencies up-to-date with automated Pull Requests
Automatic backups of your repos, metadata and even LFS. Backup to AWS, Azure, OneDrive, GCP, and more. Instant restores
Detect open source vulnerabilities in real time with suggested fixes for quick remediation
Daily, automatic backups of your repos & metadata. Restore your backups with metadata in seconds + Sync to your S3 or Azure
Code scanning at ludicrous speed. Find bugs and enforce code standards
Find, fix (and prevent!) known vulnerabilities in your code
It would be a nice addition to integrate Minimal windows service stub in Caddy (built for Windows).
At the moment, it is necessary to use for example NSSM to install Caddy as a service on Windows.
See how it becomes much more natural to [install the service and remove it in the case of another project (Gitea) with the Windows tools](https: