A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

A collection of various awesome lists for hackers, pentesters and security researchers

Fast, multi-platform web server with automatic HTTPS

List of Computer Science courses with video lectures.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

An open-source x64/x32 debugger for windows.

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Set up a personal VPN in the cloud

⚙️ NGINX config generator on steroids 💉

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

Security Guide for Developers (实用性开发人员安全须知)

Scripts to build your own IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2

Guide to securing and improving privacy on macOS

OpenZeppelin Contracts is a library for secure smart contract development.

SQL powered operating system instrumentation, monitoring, and analytics.

Checklist of the most important security countermeasures when designing, testing, and releasing your API

UNIX-like reverse engineering framework and command-line toolset

Liberating Web Analytics. Star us on Github? +1. Matomo is the leading open alternative to Google Analytics that gives you full control over your data. Matomo lets you easily collect data from websites & apps and visualise this data and extract insights. Privacy is built-in. We love Pull Requests!

DockerSlim (docker-slim): Don't change anything in your Docker container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)