Links
AddCockroachDB is a cloud-native distributed PostgreSQL-compatible SQL database designed to build, scale, and manage modern, data-intensive applications.
Related contents:
- Migrating to Postgres @ Motion Engineering Blog.
- Optimizing PgBench for CockroachDB Part 1 @ DZone.
- Optimizing PgBench for CockroachDB Part 2 @ DZone.
- Optimizing PgBench for CockroachDB Part 3 @ DZone.
- Leveraging Change Data Capture For Database Migrations At Scale @ SquareSpace Engineering.
- How CockroachDB Built Vector Indexing at Scale @ ByteByteGo Newsletter.
Open-source hyperconverged infrastructure.
The open source hyperconverged infrastructure (HCI) solution for a cloud native world. Harvester is a modern, open, interoperable, hyperconverged infrastructure (HCI) solution built on Kubernetes. It is an open-source alternative designed for operators seeking a cloud-native HCI solution. Harvester runs on bare metal servers and provides integrated virtualization and distributed storage capabilities. In addition to traditional virtual machines (VMs), Harvester supports containerized environments automatically through integration with Rancher. It offers a solution that unifies legacy virtualized infrastructure while enabling the adoption of containers from core to edge locations.
A file manager from the future. One Explorer. All Your Files.
Unify files from all your devices and clouds into a single, easy-to-use explorer. Designed for creators, hoarders and the painfully disorganized.
Spacedrive is an open source cross-platform file explorer, powered by a virtual distributed filesystem written in Rust.
Interactively find and recover deleted or 👉 overwritten 👈 files from your terminal.
A default credential scanner.
changeme picks up where commercial scanners leave off. It focuses on detecting default and backdoor credentials and not necessarily common credentials. It's default mode is to scan HTTP default credentials, but has support for other credentials.
Exploitation Framework for Embedded Devices. It consists of various modules that aid penetration testing operations.
Sealed Secrets provides declarative Kubernetes Secret Management in a secure way. Since the Sealed Secrets are encrypted, they can be safely stored in a code repository. This enables an easy to implement GitOps flow that is very popular among the OSS community.
Terraform CLI wrapper to deploy your Terraform applications directly to LocalStack.
CLI to prevent malicious Terraform Providers from being executed. You can define the allow list of Terraform Providers and their versions, and check if disallowed providers aren't used
Run Locally, Deploy Globally
Develop and test your AWS applications locally to reduce development time and increase product velocity. Reduce unnecessary AWS spend and remove the complexity and risk of maintaining AWS dev accounts
Related contents:
A minimum security baseline for enterprise-ready products and services.
Minimum Viable Secure Product (MVSP) is a list of essential application security controls that should be implemented in enterprise-ready products and services. The controls are designed to be simple to implement and provide a good foundation for building secure and resilient systems and services. MVSP is based on the experience of contributors in enterprise application security and has been built with contributions from a range of companies.
Flatcar Container Linux,
A community Linux distribution designed for container workloads, with high security and low maintenance.
Encyclopedia of note taking apps. 36 best note taking apps analyzed over 306 features.
One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️
🚀 The best place to find icons for your dashboards.
Multi-Cluster Kubernetes Orchestration.
KubeAdmiral is a multi-cluster management system for Kubernetes, developed from Kubernetes Federation v2. Kubernetes Federation v2 allows users to manage Kubernetes resources across multiple clusters through the use of federated types such as FederatedDeployment, FederatedReplicaSet, FederatedSecret, etc. KubeAdmiral extends the Kubernetes Federation v2 API, providing compatibility with the Kubernetes native API and more powerful resource management capabilities.
The ARTful library for dynamically modifying the Android Runtime.
ARTful is a native Android library the allows developers to modify the Android Runtime (ART) on Android 13 + 14. With this tool, you can dynamically change the implementation of any static method within your application or the Android Framework to affect methods called from within your application. This eliminates the requirement of using plaintext references to Android ClassLoaders to execute unexpected code and thwarts Reverse Engineering by entirely removing method cross-references.
Kubernetes Native Policy Management.
Kyverno is a policy engine designed for Kubernetes. It can validate, mutate, and generate configurations using admission controls and background scans. Kyverno policies are Kubernetes resources and do not require learning a new language. Kyverno is designed to work nicely with tools you already use like kubectl, kustomize, and Git.
Related contents:
- Vos politiques de conformité sur Kubernetes avec Kyverno @ Zwindler's Reflection :fr:.
- Understanding Kyverno: Enhancing Kubernetes Security with Policy Enforcement @ Jyothi Ram's blog.
- Using the Kyverno CLI to Write Policy Test Cases @ The New Stack.
- Simplify Kubernetes Security With Kyverno and OPA Gatekeeper @ The New Stack.
- Announcing Kyverno Release 1.15! @ CNCF.
- Optimizing Kyverno CLI performance: My LFX mentorship journey @ CNCF.
- GitOps architecture, patterns and anti-patterns @ Platform Engineering.
- GitOps policy-as-code: Securing Kubernetes with Argo CD and Kyverno @ CNCF.
- Automating Confidential Containers (CoCo) infrastructure with Kyverno @ CNCF.
Data Integration, Data Quality, & Analytics Solutions.
Qlik, now with Talend, delivers a data fabric for modern data architectures and next-gen analytics powered by Qlik Staige™, a suite of AI and machine learning capabilities.
An automated e-mail OSINT tool.
Mosint is an automated email osint tool written in Go that allows you investigate for target emails in a fast and efficient manner. It consolidates numerous services, enabling security researchers to swiftly access a wealth of information.
A fast, friendly, functional language.
Related contents:
🕷 Super-agent driven library for testing node.js HTTP servers using a fluent API. Maintained for @forwardemail, @ladjs, @spamscanner, @breejs, @cabinjs, and @lassjs.
⚡ Vigil ⚡ Detect prompt injections, jailbreaks, and other potentially risky Large Language Model (LLM) inputs.
Vigil is a Python library and REST API for assessing Large Language Model prompts and responses against a set of scanners to detect prompt injections, jailbreaks, and other potential risks.
IP Geolocation API.
IP2Location.io provides a fast and accurate IP Geolocation API tool to determine a user's location and use the geolocation information in different use cases.
A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.
ForensicMiner, a PowerShell-based DFIR automation tool, revolutionizes the field of digital investigations. Designed for efficiency, it automates artifact and evidence collection from Windows machines. Compatibility with Flacon Crowdstrike RTR and Palo Alto Cortex XDR Live Terminal, along with its swift performance and user-friendly interface, makes ForensicMiner an indispensable asset for investigators navigating the complexities of forensic analysis. Streamlined and effective, this tool sets a new standard in the realm of digital forensics.
HopToDesk is an open-source remote desktop, and alternative to TeamViewer.
Leak Detection In The DevOps Pipeline
Insta is an enjoyable snapshot testing tool for Rust.
Snapshots tests (also sometimes called approval tests) are tests that assert values against a reference value (the snapshot). This is similar to how assert_eq! lets you compare a value against a reference value but unlike simple string assertions, snapshot tests let you test against complex values and come with comprehensive tools to review changes.
Lambda function that streamlines containment of an AWS account compromise.
AWS Kill Switch is a Lambda function (and proof of concept client) that an organization can implement in a dedicated "Security" account to give their security engineers the ability to delete IAM roles or apply a highly restrictive service control policy (SCP) on any account in their organization.
Directory of french news and newspaper RSS feeds grouped by administrative region.
RSS-Bridge is a PHP project capable of generating RSS and Atom feeds for websites that don't have one. It can be used on webservers or as a stand-alone application in CLI mode.
(almost) Everything I know in math.
This is a big course of mathematics declined in two versions.
Squest is a self-service portal that works on top of Red Hat Ansible Automation Platform/AWX.
open source big data platform.
Trunk Data Platform is an Open Source, free, Hadoop distribution.
Haiku is an open-source operating system that specifically targets personal computing. Inspired by BeOS, Haiku is fast and easy to learn but very powerful.
KubeSkoop is a kubernetes networking diagnose tool for different CNI plug-ins and IAAS providers. KubeSkoop automatic construct network traffic graph of Pod in the Kubernetes cluster, monitoring and analysis of the kernel's critical path by eBPF, to resolve most of Kubernetes cluster network problems.
Integration library for all your Android hardware barcode scanner integration needs.
This library makes the integration of all barcode scanners easy in any Android application, avoiding vendor lock-in and lowering the cost of advanced scanner integration.
Floorp is built on Firefox and was built in Japan and is a new browser with excellent privacy & flexibility.
Floorp's layout customization is unlimited. Move the tab bar to the bottom of the window, hide the title bar, and more. Create your own Floorp.
This project focuses on utilizing the built-in Bluetooth Low Energy (BLE) functionality of Android smartphones to create Phantom Bluetooth Device Advertisements, similar to what is known, for instance, in the case of the Flipper Zero. While there are other apps available that provide similar functionality, the objective of this app is to enhance convenience and user-friendliness in the process.
Cadence, the resource-oriented smart contract programming language 🏃♂️ .
Cadence is a resource-oriented programming language that introduces new features to smart contract programming that help developers ensure that their code is safe, secure, clear, and approachable.
Advanced vulnerability scanning with Nmap NSE.
Vulscan is a module which enhances nmap to a vulnerability scanner. The nmap option -sV enables version detection per service which is used to determine potential flaws according to the identified product. The data is looked up in an offline version of VulDB.
A little tool to play with Windows security.
mimikatz extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets.
Related contents:
PolarDNS is a specialized authoritative DNS server suitable for penetration testing and vulnerability research.
PolarDNS is a specialized authoritative DNS server written in Python 3.x, which allows the operator to produce fully custom DNS responses, suitable for DNS protocol testing purposes.
CI/CD Security Analyzer.
RAVEN (Risk Analysis and Vulnerability Enumeration for CI/CD) is a powerful security tool designed to perform massive scans for GitHub Actions CI workflows and digest the discovered data into a Neo4j database.
The Kubernetes control plane manager.
An open source control plane manager for unified cluster management. k0smotron allows you to unify your Kubernetes cluster management for an efficient use of resources. It’s designed for k0s.
HAR Sanitizer. Sanitizing and securing HAR files with precision.
HAR files are intricate blueprints of web interactions, elegantly capturing a web session's every nuance. In the domain of web diagnostics, these files stand as critical repositories, meticulously cataloging everything from headers to payload content. However, their granular details also make them susceptible to potential data exposures.
Follow your favorite news letters and keep an 👀 on the latest technologies news.
You may touch the artifacts.
an Internet history online museum
The coolest buttons in town.
Buttons you'll Crave. collection of free buttons to copy & paste in your project, made in codepen by awesome people.
easy to use, completely free.
Violet is a UML editor with these benefits: Very easy to learn and use. Draws nice-looking diagrams. Completely free. Cross-platform. Violet is intended for developers, students, teachers, and authors who need to produce simple UML diagrams quickly
Open Source Feature Flag & Remote Config Service.
Flagsmith is an open source, fully featured, Feature Flag and Remote Config service. Use our hosted API, deploy to your own private cloud, or run on-premise.
Simplebus is a organization that helps you to use CQRS and event sourcing in your application. Get started by reading more about these concepts LINK or by digging in to common use cases LINK.
An opinionated guide to today's technology landscape.
The Technology Radar is a snapshot of tools, techniques, platforms, languages and frameworks based on the practical experiences of Thoughtworkers around the world. Published twice a year, it provides insights on how the world builds software today. Use it to identify and evaluate what’s important to you.