Security · GitHub

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

Learn cloud security by building it! An open-source homelab teaching Zero Trust, DevSecOps, IaC, and cloud architecture from the ground up.

Search inside documents, code, and even screenshots - instantly and locally. A free, open-source file launcher with OCR, semantic search, and MCP agent access.

• Filename search across ~100,000 files in a few milliseconds on a warm cache. Method and numbers are in Performance.
• Results update as you type. There is no separate search page.

DNS-Blocklists: For a better internet - keep the internet clean!

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

A collection of various awesome lists for hackers, pentesters and security researchers

AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.

⚡️A native, local-first alternative to Logitech Options+, written in Rust 🦀 — remap buttons, DPI, and SmartShift over HID++. No account, no telemetry.

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

• No exploit, no report: Reports only vulnerabilities confirmed with a reproducible proof of concept, reducing speculative scanner noise.
• Advanced code analysis: Maps architecture, trust boundaries, interfaces, data flows, and critical assets before sending credible attack paths to live pentesting agents.

Check Risk WAF is an all-in-one Web Application Firewall with Anti-Bot and Anti-DDoS protection at L3, L4, and L7. Available on-premises or as SaaS, it protects web apps against OWASP Top 10 attacks, CWE vulnerabilities, botnets, and DoS/DDoS. Free and unlimited for everyone, forever for personal, non-commercial use.

• Connecting web applications to WAF protection - Create and manage protected domains and applications, including ports, upstream servers, SSL certificates, and individual protection settings. - ✓ - ✓
• Domain ownership verification - Verify domain ownership before connecting to cloud protection. - ✗ - ✓

Debloat your Android TV, install apps, browse and transfer files on it, all from your phone. Just 3 MB, no tracking, no root, no PC.

Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.

Useful tool to track location or mobile number

Comfortably monitor your network traffic 🕵️‍♂️

• 💻 choose a network adapter of your PC to inspect
• 🏷️ select a set of filters to apply to the observed traffic

Free, open-source Windows optimization tool for performance, privacy, and simplicity.

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

Building 70 Projects ranging from beginner to advanced so anyone can — learn from, build upon, use as a reference, or even copy directly. Owned by my cybersecurity company 👇

Send files directly between devices over the internet - no cloud storage, no size limits.

• No accounts — no signup, no login, no email address required
• No cloud storage — files go directly between devices; nothing is ever uploaded or stored on a server

Get Android app updates straight from the source.

Offline gym log for Android. No account, no ads, no internet.