⚡️ A curated list of awesome performance stories

Find newer versions of package dependencies than what your package.json allows

rep+ — Burp-style HTTP Repeater for Chrome DevTools with built‑in AI to explain requests and suggest attacks

Malformed servers to test your HTTP client

NGINX configuration static analyzer

GTFOArgs is a curated list of programs and their associated arguments that can be exploited to gain privileged access or execute arbitrary commands, using argument injection.

Monitor browser traffic, and alert when a resource is loaded from an unregistered domain

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.

🎓 Path to a free self-taught education in Computer Science!

Resources related to distributed systems, system design, microservices, scalability and performance, etc

A tool for exploring each layer in a docker image

Penetration Testing For - Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting, etc...

Archive Alchemist is a tool for creating specially crafted archives to test extraction vulnerabilities.

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.

The Simple Agent Development Kit.

Mirror of cisa.gov/kev data files

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝

An open-source security suite aiming to combine structural code analysis with AI-powered vulnerability detection. Built for advanced structural search, derive insights, find vulnerabilities in code.

Secure Code Review AI Agent (SeCoRA) - AI SAST

See README.md for link to Discord & YouTube. I will use this repository for my Flipper Zero projects & wiki.

Chat with your current directory's files using a local or API LLM.

aider is AI pair programming in your terminal

💀 Don't fear the Reaper 👻

A curation of awesome tools, documents and projects about LLM Security.

All the deals for InfoSec related software/tools this Black Friday

The best resource you will ever find for getting started with Obsidian, probably