Links
AddYou may touch the artifacts.
an Internet history online museum
Follow your favorite news letters and keep an 👀 on the latest technologies news.
HAR Sanitizer. Sanitizing and securing HAR files with precision.
HAR files are intricate blueprints of web interactions, elegantly capturing a web session's every nuance. In the domain of web diagnostics, these files stand as critical repositories, meticulously cataloging everything from headers to payload content. However, their granular details also make them susceptible to potential data exposures.
The Kubernetes control plane manager.
An open source control plane manager for unified cluster management. k0smotron allows you to unify your Kubernetes cluster management for an efficient use of resources. It’s designed for k0s.
CI/CD Security Analyzer.
RAVEN (Risk Analysis and Vulnerability Enumeration for CI/CD) is a powerful security tool designed to perform massive scans for GitHub Actions CI workflows and digest the discovered data into a Neo4j database.
PolarDNS is a specialized authoritative DNS server suitable for penetration testing and vulnerability research.
PolarDNS is a specialized authoritative DNS server written in Python 3.x, which allows the operator to produce fully custom DNS responses, suitable for DNS protocol testing purposes.
A little tool to play with Windows security.
mimikatz extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets.
Related contents:
Advanced vulnerability scanning with Nmap NSE.
Vulscan is a module which enhances nmap to a vulnerability scanner. The nmap option -sV enables version detection per service which is used to determine potential flaws according to the identified product. The data is looked up in an offline version of VulDB.
Cadence, the resource-oriented smart contract programming language 🏃♂️ .
Cadence is a resource-oriented programming language that introduces new features to smart contract programming that help developers ensure that their code is safe, secure, clear, and approachable.
This project focuses on utilizing the built-in Bluetooth Low Energy (BLE) functionality of Android smartphones to create Phantom Bluetooth Device Advertisements, similar to what is known, for instance, in the case of the Flipper Zero. While there are other apps available that provide similar functionality, the objective of this app is to enhance convenience and user-friendliness in the process.
Floorp is built on Firefox and was built in Japan and is a new browser with excellent privacy & flexibility.
Floorp's layout customization is unlimited. Move the tab bar to the bottom of the window, hide the title bar, and more. Create your own Floorp.
Integration library for all your Android hardware barcode scanner integration needs.
This library makes the integration of all barcode scanners easy in any Android application, avoiding vendor lock-in and lowering the cost of advanced scanner integration.
KubeSkoop is a kubernetes networking diagnose tool for different CNI plug-ins and IAAS providers. KubeSkoop automatic construct network traffic graph of Pod in the Kubernetes cluster, monitoring and analysis of the kernel's critical path by eBPF, to resolve most of Kubernetes cluster network problems.
Haiku is an open-source operating system that specifically targets personal computing. Inspired by BeOS, Haiku is fast and easy to learn but very powerful.
open source big data platform.
Trunk Data Platform is an Open Source, free, Hadoop distribution.
Squest is a self-service portal that works on top of Red Hat Ansible Automation Platform/AWX.
(almost) Everything I know in math.
This is a big course of mathematics declined in two versions.
RSS-Bridge is a PHP project capable of generating RSS and Atom feeds for websites that don't have one. It can be used on webservers or as a stand-alone application in CLI mode.
Directory of french news and newspaper RSS feeds grouped by administrative region.
Lambda function that streamlines containment of an AWS account compromise.
AWS Kill Switch is a Lambda function (and proof of concept client) that an organization can implement in a dedicated "Security" account to give their security engineers the ability to delete IAM roles or apply a highly restrictive service control policy (SCP) on any account in their organization.
Insta is an enjoyable snapshot testing tool for Rust.
Snapshots tests (also sometimes called approval tests) are tests that assert values against a reference value (the snapshot). This is similar to how assert_eq! lets you compare a value against a reference value but unlike simple string assertions, snapshot tests let you test against complex values and come with comprehensive tools to review changes.
Leak Detection In The DevOps Pipeline
HopToDesk is an open-source remote desktop, and alternative to TeamViewer.
A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.
ForensicMiner, a PowerShell-based DFIR automation tool, revolutionizes the field of digital investigations. Designed for efficiency, it automates artifact and evidence collection from Windows machines. Compatibility with Flacon Crowdstrike RTR and Palo Alto Cortex XDR Live Terminal, along with its swift performance and user-friendly interface, makes ForensicMiner an indispensable asset for investigators navigating the complexities of forensic analysis. Streamlined and effective, this tool sets a new standard in the realm of digital forensics.
IP Geolocation API.
IP2Location.io provides a fast and accurate IP Geolocation API tool to determine a user's location and use the geolocation information in different use cases.
⚡ Vigil ⚡ Detect prompt injections, jailbreaks, and other potentially risky Large Language Model (LLM) inputs.
Vigil is a Python library and REST API for assessing Large Language Model prompts and responses against a set of scanners to detect prompt injections, jailbreaks, and other potential risks.
🕷 Super-agent driven library for testing node.js HTTP servers using a fluent API. Maintained for @forwardemail, @ladjs, @spamscanner, @breejs, @cabinjs, and @lassjs.
A fast, friendly, functional language.
Related contents:
An automated e-mail OSINT tool.
Mosint is an automated email osint tool written in Go that allows you investigate for target emails in a fast and efficient manner. It consolidates numerous services, enabling security researchers to swiftly access a wealth of information.
Data Integration, Data Quality, & Analytics Solutions.
Qlik, now with Talend, delivers a data fabric for modern data architectures and next-gen analytics powered by Qlik Staige™, a suite of AI and machine learning capabilities.
Kubernetes Native Policy Management.
Kyverno is a policy engine designed for Kubernetes. It can validate, mutate, and generate configurations using admission controls and background scans. Kyverno policies are Kubernetes resources and do not require learning a new language. Kyverno is designed to work nicely with tools you already use like kubectl, kustomize, and Git.
Related contents:
- Vos politiques de conformité sur Kubernetes avec Kyverno @ Zwindler's Reflection :fr:.
- Understanding Kyverno: Enhancing Kubernetes Security with Policy Enforcement @ Jyothi Ram's blog.
- Using the Kyverno CLI to Write Policy Test Cases @ The New Stack.
- Simplify Kubernetes Security With Kyverno and OPA Gatekeeper @ The New Stack.
- Announcing Kyverno Release 1.15! @ CNCF.
- Optimizing Kyverno CLI performance: My LFX mentorship journey @ CNCF.
- GitOps architecture, patterns and anti-patterns @ Platform Engineering.
- GitOps policy-as-code: Securing Kubernetes with Argo CD and Kyverno @ CNCF.
- Automating Confidential Containers (CoCo) infrastructure with Kyverno @ CNCF.
The ARTful library for dynamically modifying the Android Runtime.
ARTful is a native Android library the allows developers to modify the Android Runtime (ART) on Android 13 + 14. With this tool, you can dynamically change the implementation of any static method within your application or the Android Framework to affect methods called from within your application. This eliminates the requirement of using plaintext references to Android ClassLoaders to execute unexpected code and thwarts Reverse Engineering by entirely removing method cross-references.
Multi-Cluster Kubernetes Orchestration.
KubeAdmiral is a multi-cluster management system for Kubernetes, developed from Kubernetes Federation v2. Kubernetes Federation v2 allows users to manage Kubernetes resources across multiple clusters through the use of federated types such as FederatedDeployment, FederatedReplicaSet, FederatedSecret, etc. KubeAdmiral extends the Kubernetes Federation v2 API, providing compatibility with the Kubernetes native API and more powerful resource management capabilities.
🚀 The best place to find icons for your dashboards.
One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️
Encyclopedia of note taking apps. 36 best note taking apps analyzed over 306 features.
Flatcar Container Linux,
A community Linux distribution designed for container workloads, with high security and low maintenance.
A minimum security baseline for enterprise-ready products and services.
Minimum Viable Secure Product (MVSP) is a list of essential application security controls that should be implemented in enterprise-ready products and services. The controls are designed to be simple to implement and provide a good foundation for building secure and resilient systems and services. MVSP is based on the experience of contributors in enterprise application security and has been built with contributions from a range of companies.
Run Locally, Deploy Globally
Develop and test your AWS applications locally to reduce development time and increase product velocity. Reduce unnecessary AWS spend and remove the complexity and risk of maintaining AWS dev accounts
Related contents:
CLI to prevent malicious Terraform Providers from being executed. You can define the allow list of Terraform Providers and their versions, and check if disallowed providers aren't used
Terraform CLI wrapper to deploy your Terraform applications directly to LocalStack.
Sealed Secrets provides declarative Kubernetes Secret Management in a secure way. Since the Sealed Secrets are encrypted, they can be safely stored in a code repository. This enables an easy to implement GitOps flow that is very popular among the OSS community.
Exploitation Framework for Embedded Devices. It consists of various modules that aid penetration testing operations.
A default credential scanner.
changeme picks up where commercial scanners leave off. It focuses on detecting default and backdoor credentials and not necessarily common credentials. It's default mode is to scan HTTP default credentials, but has support for other credentials.
Interactively find and recover deleted or 👉 overwritten 👈 files from your terminal.
A file manager from the future. One Explorer. All Your Files.
Unify files from all your devices and clouds into a single, easy-to-use explorer. Designed for creators, hoarders and the painfully disorganized.
Spacedrive is an open source cross-platform file explorer, powered by a virtual distributed filesystem written in Rust.
Open-source hyperconverged infrastructure.
The open source hyperconverged infrastructure (HCI) solution for a cloud native world. Harvester is a modern, open, interoperable, hyperconverged infrastructure (HCI) solution built on Kubernetes. It is an open-source alternative designed for operators seeking a cloud-native HCI solution. Harvester runs on bare metal servers and provides integrated virtualization and distributed storage capabilities. In addition to traditional virtual machines (VMs), Harvester supports containerized environments automatically through integration with Rancher. It offers a solution that unifies legacy virtualized infrastructure while enabling the adoption of containers from core to edge locations.
CockroachDB is a cloud-native distributed PostgreSQL-compatible SQL database designed to build, scale, and manage modern, data-intensive applications.
Related contents:
- Migrating to Postgres @ Motion Engineering Blog.
- Optimizing PgBench for CockroachDB Part 1 @ DZone.
- Optimizing PgBench for CockroachDB Part 2 @ DZone.
- Optimizing PgBench for CockroachDB Part 3 @ DZone.
- Leveraging Change Data Capture For Database Migrations At Scale @ SquareSpace Engineering.
- How CockroachDB Built Vector Indexing at Scale @ ByteByteGo Newsletter.
Knip finds unused files, dependencies and exports in your JavaScript and TypeScript projects.
Related contents:
SessionProbe is a multi-threaded tool designed for penetration testing and bug bounty hunting. It evaluates user privileges in web applications by taking a session token and checking access across a list of URLs, highlighting potential authorization issues.
concise commandline monitoring for containers.Top-like interface for container metrics.
ctop provides a concise and condensed overview of real-time metrics for multiple containers.
Related contents:
100 books vetted by the community to inspire growth across the many disciplines influencing modern software design.
PhpUnitGen is an online and command line tool to generate your unit tests' skeletons on your projects.
The tool is divided into three GitHub repositories.
- phpunitgen-core, which contains the core of the tool's features.
- phpunitgen-console, which contains the command line interface.
- phpunitgen-webapp, which contains the web application and the API.
xUnit.net is a free, open source, community-focused unit testing tool for the .NET Framework.