A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

A collection of various awesome lists for hackers, pentesters and security researchers

Fast, multi-platform web server with automatic HTTPS

List of Computer Science courses with video lectures.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

An open-source x64/x32 debugger for windows.

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Set up a personal VPN in the cloud

⚙️ NGINX config generator on steroids 💉

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

Security Guide for Developers (实用性开发人员安全须知)

OpenZeppelin Contracts is a library for secure smart contract development.

Scripts to build your own IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2

Guide to securing and improving privacy on macOS

SQL powered operating system instrumentation, monitoring, and analytics.

Checklist of the most important security countermeasures when designing, testing, and releasing your API

UNIX-like reverse engineering framework and command-line toolset

Liberating Web Analytics. Star us on Github? +1. Matomo is the leading open alternative to Google Analytics that gives you full control over your data. Matomo lets you easily collect data from websites & apps and visualise this data and extract insights. Privacy is built-in. We love Pull Requests!

DockerSlim (docker-slim): Don't change anything in your Docker container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)