the-book-of-secret-knowledge - A collection of inspiring lists, manuals, cheatshe - 剑庭安 - 网站开发定制 SEO 优化蜘蛛池代做在线看手相算命

项目说明

"Knowledge is powerful, be careful how you use it!"

<h4 align="center">A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools, and more.</h4>

:notebook_with_decorati:  What is it?

This repository is a collection of materials and tools that I use every day in my work. It contains a lot of useful information gathered in one piece. It is an in 源码 of knowledge for me that I often look back on.

:restroom:  For whom?

For e, really. Here e can find their fa tastes. But to be perfectly honest, it is aimed towards System and 网络 administrators, DevOps, Pentesters, and Security Researchers.

:information_source:  Contributing

If you find something which doesn't make sense, or something doesn't seem right, please make a pull request and please add valid and well-reasoned explanations about your changes or comments.

A few simple rules for this project:

in and clear

not tiring

useful

These below rules may be better:

easy to contribute to (Markdown + HTML ...)

easy to find (simple TOC, maybe it's worth extending them?)

Url marked \* is temporary una. Please don't delete it without confirming that it has permanently expired.

Before adding a pull request, please see the contributing guidelines. You should also remember about this:

All suggestions/PR are welcome!

Code Contributors

This project exists thanks to all the people who contribute.

<a href=" src="

Financial Contributors

:newspaper:  RSS Feed & Updates

GitHub exposes an RSS/Atom feed of the commits, which may also be useful if you want to be kept informed about all changes.

:ballot_box_with_check:  ToDo

[ ] Add new stuff...

[ ] Add useful shell functions

[ ] Add one-liners for collection tools (eg. CLI Tools)

[ ] Sort order in lists

New items are also added on a regular basis.

:anger:  Table of Contents

Only main chapters:

CLI Tools

GUI Tools

Web Tools

Systems/Services

Networks

Containers/Orchestration

Manuals/Howtos/Tutorials

Inspiring Lists

Blogs/Podcasts/

Hacking/Penetration Testing

Your daily knowledge and news

Other Cheat Sheets

Shell One-liners

Shell Tricks

Shell Functions

:trident:  The Book of Secret Knowledge (Chapters)

#### CLI Tools  [[TOC]](#anger-table-of-contents)

##### :black_small_square: Shells

<a href=" Bash</a> - is an sh-compatible shell that incorporates useful features from the Korn shell and C shell. 
   <a href=" - is a shell designed for interactive use, although it is also a powerful scripting language. 
   <a href=" - is a very powerful cross-platform shell, suitable for a huge range of uses. 
   <a href=" - is a 框架 for using, de and maintaining shell scripts and custom commands. 
   <a href=" My ZSH!</a> - is the best 框架 for managing your Zsh configuration. 
   <a href=" My Fish</a> - the Fishshell 框架. 
   <a href=" - the cross-shell prompt written in Rust. 
   <a href=" - is a fast reimplementation of Powerlevel9k ZSH theme.

##### :black_small_square: Shell plugins

<a href=" - tracks the folder you use the most and allow you to jump, without having to type the whole path. 
   <a href=" - is a general-purpose command-line fuzzy finder. 
   <a href=" - Fish-like autosuggestions for Zsh. 
   <a href=" - Fish shell like syntax highlighting for Zsh. 
   <a href=" ZSH Plugins</a> - A list of frameworks, plugins, themes and tutorials for ZSH.

##### :black_small_square: Managers

<a href=" Commander</a> - is a file manager, licensed under GNU General Public License. 
   <a href=" - is a filemanager for the console. 
   <a href=" - is a tiny, lightning fast, feature-packed file manager. 
   <a href=" - is a full-screen window manager that multiplexes a physical terminal. 
   <a href=" - is a terminal multiplexer, lets you switch easily between several programs in one terminal. 
   <a href=" - is a 工具 to set comfortable and easy to use functionality tmux-sessions.

##### :black_small_square: Text editors

<a href=" - is one of the most common text editors on Unix. 
   <a href=" - is a highly configurable text editor. 
   <a href=" - is an extensible, customizable, free/libre text editor, and more. 
   <a href=" - is a modern and intuiti text editor. 
   <a href=" - is a free open 源码, powerful, extensible and usable 代码 editor. 
   <a href=" - a community-dri distribution. 
   <a href=" - a community-driven .

##### :black_small_square: Files and directories

<a href=" - is a simple, fast and user-friendly alternative to find. 
   <a href=" - is an easy to use, fast disk usage analyzer.

##### :black_small_square: Network

<a href=" - is an SSH and telnet 客户端, de originally by Simon Tatham. 
   <a href=" - is a SSH wrapper designed to keep a SSH session alive over a connection. 
   <a href=" Terminal</a> - enables mouse-scrolling and tmux commands inside the SSH session. 
   <a href=" - is a free and open 源码 (license) utility for 网络 discovery and security auditing. 
   <a href=" - is a fast single packet 网络 scanner designed for Internet-wide 网络 surveys. 
   <a href=" Scan</a> - to find all open ports faster than Nmap. 
   <a href=" - is the fastest Internet port scanner, spews SYN packets asynchronously. 
   <a href=" - is a faster and more efficient stateless SYN scanner and banner grabber. 
   <a href=" - is a command-line oriented TCP/IP packet assembler/analyzer. 
   <a href=" - is a 工具 that combines the functionality of the 'traceroute' and 'ping' programs in a single 工具. 
   <a href=" - utility which combines the functions of the different 网络 probes in one diagnostic 工具. 
   <a href=" - utility which reads and writes data across 网络 connections, using the TCP/IP 协议. 
   <a href=" - utility which transfers data between two objects. 
   <a href=" - is a powerful command-line packet analyzer. 
   <a href=" - is a 工具 that allows us to dump and analyze 网络 traffic (wireshark cli). 
   <a href=" - is a simple terminal user-interface for tshark. 
   <a href=" - is like GNU grep applied to the 网络 layer. 
   <a href=" - is a Swiss army knife for your daily Linux 网络 plumbing if you will. 
   <a href=" - dump unix domain socket traffic. 
   <a href=" - is a packet capture solution which aims to quickly spool all packets to disk. 
   <a href=" - packets in TUI. 
   <a href=" - is a monitoring and debugging 工具 to capture networking related statistics and prepare them . 
   <a href=" - is a console-based 网络 monitoring program for Linux that displays information about IP traffic. 
   <a href=" - is a 网络 traffic monitor for Linux and BSD. 
   <a href=" - is a 工具 for acti of the maximum achievable bandwidth on IP networks. 
   <a href=" - is a 网络 Performance Measurement 工具 for TCP, UDP & HTTP. 
   <a href=" - is a Linux CLI based Ethernet and MPLS traffic testing 工具. 
   <a href=" - is a IP address lookup service. 
   <a href=" - packet manipulation CLI 工具; craft and inject packets of several protocols. 
   <a href=" - a mid-le manipulation library for Ruby. 
   <a href=" - packet manipulation library; forge, send, decode, capture packets of a wide number of protocols. 
   <a href=" - is a collection of Python classes for working with 网络 protocols. 
   <a href=" - is a 工具 for SSH ser. 
   <a href=" - is a lightweight multi-协议 & multi-源码 command-line download utility. 
   <a href=" - observe the path of packets through the iptables chains. 
   <a href=" - a highly configurable 工具 to check for whatever you like against any number of hosts. 
   <a href=" - a fork of mRemote, multi-tabbed PuTTy on steroids!

##### :black_small_square: Network (DNS)

<a href=" - is a DNS diagnostics and performance measurement tools. 
   <a href=" - is a DNS reconnaissance 工具 for locating non-contiguous IP space. 
   <a href=" - is a subdomain discovery 工具 that discovers valid subdomains for websites. 
   <a href=" - is a fast subdomains enumeration 工具 for penetration testers. 
   <a href=" - is 工具 that obtains subdomain names by scraping data sources, crawling web archives, and more. 
   <a href=" - provides personalized DNS ser based on your browsing history. 
   <a href=" - is a high-performance DNS stub resolver for bulk lookups and reconnaissance. 
   <a href=" - is a 工具 to enumerate subdomains on a target domain through a wordlist. 
   <a href=" - DNS performance testing tools. 
   <a href=" 2</a> - a flexible DNS proxy, with support for encrypted DNS protocols. 
   <a href=" - API 客户端 pro access to passive DNS 数据库 systems. 
   <a href=" - fast dns proxy, built to black-hole internet ad and malware servers. 
   <a href=" - detect typosquatters, phishing attacks, fraud, and brand impersonation.

##### :black_small_square: Network (HTTP)

<a href=" - is a command line 工具 and library for transferring data with URLs. 
   <a href=" - is an alternative to the widely popular curl program, written in Golang. 
   <a href=" - is an user-friendly HTTP 客户端. 
   <a href=" - is an interactive cli 工具 for HTTP inspection. 
   <a href=" - is a conformance testing 工具 for HTTP/2 implementation. 
   <a href=" - is a simple 工具 to help sysadmins to hardening their websites. 
   <a href=" - is a simple Swiss Army knife for http/https troubleshooting and profiling. 
   <a href=" - is a 工具 that curl statistics in a way of beauty and clarity. 
   <a href=" - is an interactive web 服务端. 
   <a href=" - is a text browser for the World Wide Web. 
   <a href=" - is a fully interacti, and modern text-based browser. 
   <a href=" - a list of (almost) all headless web browsers in existence. 
   <a href=" - is a single-threaded command line 工具 for measuring the performance of HTTP web servers. 
   <a href=" - is an http load testing and benchmarking utility. 
   <a href=" - is a modern HTTP benchmarking 工具 capable of generating significant load. 
   <a href=" - is a constant throughput, correct latency recording of wrk. 
   <a href=" - is a constant throughput, correct latency recording of wrk. 
   <a href=" - is a fast cross-platform HTTP benchmarking 工具 written in Go. 
   <a href=" - http/https load testing and benchmarking 工具. 
   <a href=" - HTTP load generator, ApacheBench (ab) replacement, formerly known as rakyll/boom. 
   <a href=" - is a script you can use to quickly smoke-test your web app deployment. 
   <a href=" - is a 工具 that simulates some Application Layer Denial of Service attacks by prolonging HTTP. 
   <a href=" - is a free and open 源码 directory/file & DNS busting 工具 written in Go. 
   <a href=" - command-line reference-implementation 客户端 for SSL Labs APIs. 
   <a href=" - Mozilla HTTP Obser cli . 
   <a href=" - is a command line 工具 to run and test HTTP requests with plain text.

##### :black_small_square: SSL

<a href=" - is a robust, commercial-grade, and full-featured toolkit for the TLS and SSL protocols. 
   <a href=" - 客户端 program to set up a TLS connection to some other computer. 
   <a href="
</a> - fast and powerful SSL/TLS ser library. 
   <a href=" - tests SSL/TLS enabled services to disco cipher suites. 
   <a href=" - testing TLS/SSL encryption anywhere on any port. 
   <a href=" - a very simple way to find out which SSL ciphersuites are supported by a target. 
   <a href=" - is a utility for creating symmetrically encrypted and authenticated pipes between socket addresses. 
   <a href=" - is EFF's 工具 to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your 服务端. 
   <a href=" - simple zero-config 工具 to make locally trusted de certificates with any names you'd like. 
   <a href=" - tools to bootstrap CAs, certificate requests, and signed certificates. 
   <a href=" - is a security and reconnaissance 工具 to automatically monitor new subdomains. 
   <a href=" - open 源码工具 to help you build a valid SSL certificate chain. 
   <a href=" - SSL Certification Expiration Checker.

##### :black_small_square: Security

<a href=" - provides a flexible Mandatory Access Control (MAC) system built into the Linux kernel. 
   <a href=" - proactively protects the operating system and applications from external or internal threats. 
   <a href=" - Automated System Hardening 框架. 
   <a href=" Hardening 框架</a> - Security + DevOps: Automatic Ser.

##### :black_small_square: Auditing Tools

<a href=" - actively monitoring all aspects of system activity with file integrity monitoring. 
   <a href=" - provides a way to track security-relevant information on your system. 
   <a href=" - is a security 工具 that can be use both as a security audit and intrusion detection system. 
   <a href=" - battle-tested security 工具 for systems running Linux, macOS, or Unix-based operating system. 
   <a href=" - scripted Local Linux Enumeration & Pri Escalation Checks. 
   <a href=" - scanner 工具 for Linux systems that scans backdoors, rootkits and local exploits on your systems. 
   <a href=" - is a light-weight 工具 that helps to detect malware running on the system. 
   <a href=" - pri escalation tools for Windows and Linux/Unix and MacOS.

##### :black_small_square: System Diagnostics/Debuggers

<a href=" - diagnostic, debugging and instructional userspace utility for Linux. 
   <a href=" - is a performance analysis and troubleshooting 工具. 
   <a href=" - is a library call tracer, used to trace calls made by programs to library functions. 
   <a href=" - is a friendly wrapper around ptrace. 
   <a href=" - performance analysis tools based on Linux perf_events (aka perf) and ftrace. 
   <a href=" - high-le language for Linux eBPF. 
   <a href=" - system exploration and troubleshooting 工具 with first class support for containers. 
   <a href=" - is an instrumentation 框架 for building dynamic analysis tools. 
   <a href=" - high-performance multi-threaded malloc() implementation, plus some performance analysis tools. 
   <a href=" - cross-platform system monitoring 工具 written in Python. 
   <a href=" - interacti process for Unix systems. It aims to be a better 'top'. 
   <a href=" - Linux resource monitor written in pure Bash. 
   <a href=" - a single executable for performance monitoring and data analysis. 
   <a href=" - ASCII performance monitor. Includes statistics for CPU, memory, disk, swap, 网络, and processes. 
   <a href=" - displays in its output information about files that are opened by processes. 
   <a href=" - stack trace . 
   <a href=" - convert Unix lsof output to a graph showing FIFO and UNIX interprocess communication. 
   <a href=" - is a lightweight 工具 for recording, replaying and debugging execution of applications. 
   <a href=" Co-Pilot</a> - a system performance analysis toolkit. 
   <a href=" - a command-line hex . 
   <a href=" - Python frame stack sampler for CPython.

##### :black_small_square: Log Analyzers

<a href=" - slice and dice log files on the command line. 
   <a href=" - log file na with search and automatic refresh. 
   <a href=" - real-time web log analyzer and interacti that runs in a terminal. 
   <a href=" - real-time metrics for nginx 服务端.

##### :black_small_square: Databases

<a href=" - uni command-line interface for SQL databases. 
   <a href=" - postgres CLI with autocompletion and syntax highlighting. 
   <a href=" - terminal 客户端 for MySQL with autocompletion and syntax highlighting. 
   <a href=" - SQLite CLI with autocompletion and syntax highlighting. 
   <a href=" - SQL 服务端 CLI with autocompletion and syntax highlighting. 
   <a href=" - is a SQL powered operating system instrumentation, monitoring, and analytics 框架. 
   <a href=" - sync data from one Postgres 数据库 to another. 
   <a href=" - a terminal 客户端 for redis with autocompletion and syntax highlighting. 
   <a href=" - generates an E-R diagram of your 数据库.

##### :black_small_square: TOR

<a href=" - script to make Tor 网络 your default gateway. 
   <a href=" - a 工具 that lets you create multiple TOR instances with a load-balancing.

##### :black_small_square: Messengers/IRC Clients

<a href=" - is a free open 源码 terminal based IRC 客户端. 
   <a href=" - is an extremely extensible and lightweight IRC 客户端.

##### :black_small_square: Productivity

<a href=" - task management system, todo list

##### :black_small_square: Other

<a href=" - tools for Linux/Unix sysadmins. 
   <a href=" - is an inode-based filesystem notification technology. 
   <a href=" - synchronizes local directories with remote targets (Li Daemon). 
   <a href=" - is a terminal based interface for Git repositories. 
   <a href=" - text-mode interface for Git. 
   <a href=" - simplified and community-driven man pages. 
   <a href=" - easily create and extract .zip, .tar, .tar.gz, .tar.bz2, .tar.xz, .tar.lz4, .tar.sz, and .rar. 
   <a href=" - minimal CLI creator in Ja. 
   <a href=" - make JSON greppable! 
   <a href=" - binary editor written in Go.

#### 界面 Tools  [[TOC]](#anger-table-of-contents)

##### :black_small_square: Terminal emulators

<a href=" - is a dropdown terminal made for the GNOME desktop en. 
   <a href=" - is based on GNOME Terminal, useful features for sysadmins and other users. 
   <a href=" - is a GPU based terminal emulator that supports smooth scrolling and images. 
   <a href=" - is a fast, cross-platform, OpenGL terminal emulator.

##### :black_small_square: Network

<a href=" - is the world’s foremost and widely-used 网络协议 analyzer. 
   <a href=" - is a comprehensi monitor 工具. 
   <a href=" - is a graphical 网络 monitoring solution. 
   <a href=" Sender</a> - is a networking utility for packet generation and built-in UDP/TCP/SSL 客户端 and servers. 
   <a href=" - is a packet crafter and traffic generator. 
   <a href=" - open 源码 software to load test functional behavior and measure performance. 
   <a href=" - scalable user load testing 工具 written in Python.

##### :black_small_square: Browsers

<a href=" Browser</a> - protect your privacy and defend yourself against 网络 sur and traffic analysis.

##### :black_small_square: Password Managers

<a href=" - store your passwords safely and auto-type them into your e websites and apps. 
   <a href=" - open 源码 password manager with built-in sync. 
   <a href=" - unofficial Bitwarden compatible ser in Rust.

##### :black_small_square: Messengers/IRC Clients

<a href=" - is an IRC 客户端 based on XChat. 
   <a href=" - is an easy to use and free chat 客户端 used by millions.

##### :black_small_square: Messengers (end-to-end encryption)

<a href=" - is an encrypted communications app. 
   <a href=" - secure messaging, file sharing, voice calls and video conferences. 
   <a href=" - decentralized anonymous instant messenger on top of Tor Hidden Services. 
   <a href=" - an open 网络 for secure, decentralized, real-time communication.

##### :black_small_square: Text editors

<a href=" Text</a> - is a lightweight, cross-platform 代码 editor known for its speed, ease of use. 
   <a href=" Studio 代码</a> - an open-源码 and free 源码代码 editor de by Microsoft. 
   <a href=" - a hackable text editor for the 21st Century.

#### Web Tools  [[TOC]](#anger-table-of-contents)

##### :black_small_square: Browsers

<a href=" Capabilities of Your Browser</a> - test your browser's SSL implementation. 
   <a href=" I use</a> - provides up-to-date browser support tables for support of front-end web technologies. 
   <a href=" 3.0</a> - is your browser safe against tracking? 
   <a href=" Analyzer</a> - see what data is exposed from your browser. 
   <a href=" Browser Security</a> - it's all about Web Browser fingerprinting. 
   <a href=" My SSL?</a> - help a web ser learn what real world TLS clients were capable of. 
   <a href=" - 客户端 test (incl TLSv1.3 information).

##### :black_small_square: SSL/Security

<a href=" 服务端 Test</a> - performs a deep analysis of the configuration of any SSL web 服务端. 
   <a href=" 服务端 Test (DEV)</a> - performs a deep analysis of the configuration of any SSL web 服务端. 
   <a href=" SSLScan</a> - test SSL/TLS (PCI DSS, HIPAA and NIST). 
   <a href=" Check</a> - scan your website for non-secure content. 
   <a href=" Scanner</a> - analyze website security. 
   <a href=" - test your TLS ser (e.g. ciphers). 
   <a href=" - service to scan and analyse websites. 
   <a href=" URI</a> - monitoring security policies like CSP and HPKP. 
   <a href=" E</a> - allows de and security experts to check if a Content Security Policy. 
   <a href=" CSP</a> - public list about CSP in some big players (might make them care a bit more). 
   <a href=" No HTTPS?</a> - top 100 websites by Alexa rank not automatically redirecting insecure requests. 
   <a href=" Cipher Suite Search</a>- cipher suite search 引擎. 
   <a href=" - strong ciphers for Apache, Nginx, Lighttpd, and more.* 
   <a href=" - public Diffie-Hellman parameter service/工具. 
   <a href=" - memorable site for testing clients against bad SSL configs. 
   <a href=" - registered for tests regarding the TLS/SSL 协议. 
   <a href=" Record Helper</a> - generate a CAA policy. 
   <a href=" CA 数据库</a> - repository of information about CAs, and their root and intermediate certificates. 
   <a href=" - real-time certificate transparency log update stream. 
   <a href=" - discovers certificates by continually monitoring all of the publicly known CT. 
   <a href=" - deploy the security standards. 
   <a href=" suite compatibility</a> - test TLS cipher suite compatibility. 
   <a href=" - this service helps you detect potentially malicious websites. 
   <a href=" - a proposed standard (generator) which allows websites to define security policies. 
   <a href=" - help you follow the Mozilla 服务端 Side TLS configuration guidelines. 
   <a href=" - pure python, SSL/TLS 协议 and cipher scanner/enumerator.

##### :black_small_square: HTTP Headers & Web Linters

<a href=" Headers</a> - analyse the HTTP response headers (with rating system to the results). 
   <a href=" by Mozilla</a> - set of tools to analyze your website. 
   <a href=" - is a linting 工具 that will help you with your site's accessibility, speed, security, and more.

##### :black_small_square: DNS

<a href=" - one 源码 for free DNS related tools and information. 
   <a href=" - is an ad DNS lookup 工具. 
   <a href=" - online DNS in 工具. 
   <a href=" Spy</a> - monitor, and your DNS configurations. 
   <a href=" - helps you to control how your DNS works. 
   <a href=" DNS</a> - comprehensive DNS tester. 
   <a href=" subdomains online</a> - find subdomains for security assessment penetration test. 
   <a href=" - dns recon & research, find & lookup dns records. 
   <a href=" Table online</a> - search for DNS records by domain, IP, CIDR, ISP. 
   <a href=" - DNS and mail ser checker. 
   <a href=" Bajaj</a> - check the delegation of your domain. 
   <a href=" Delegation LAB</a> - check, trace and delegation of your domain. 
   <a href=" - DS or DNSKEY records . 
   <a href=" - this site is responsible for the safekeeping of historical reverse DNS records. 
   <a href=" - wildcard DNS for e. 
   <a href=" - dead simple wildcard DNS for any IP Address. 
   <a href=" (ceipam)</a> - one of the best DNS propagation checker (and not only). 
   <a href=" My DNS</a> - DNS propagation checking 工具. 
   <a href=" - quickly searching large DNS datasets.

##### :black_small_square: Mail

<a href=" - check an email domain for SMTP TLS support. 
   <a href=" Toolbox</a> - all of your MX record, DNS, blacklist and SMTP diagnostics in one integrated 工具. 
   <a href=" Email</a> - complete email test tools for email technicians. 
   <a href=" - checks to see if your domain is on a Real Time Spam Blacklist. 
   <a href=" - complete IP check for sending Mailservers. 
   <a href=" SPF & Spam Assassin </a> - checks mail authentication and scores messages with Spam Assassin.

##### :black_small_square: Encoders/Decoders and Regex testing

<a href=" Encode/Decode</a> - 工具 from above to either encode or decode a string of text. 
   <a href=" - the online translator for search queries on log data. 
   <a href=" - online regex tester and debugger: PHP, PCRE, Python, Golang and Ja. 
   <a href=" - online 工具 to learn, build, & test Regular Expressions (RegEx / RegExp). 
   <a href=" Testing</a> - online regex testing 工具. 
   <a href=" Pal</a> - online regex testing 工具 + other tools. 
   <a href=" Cyber Swiss Army Knife</a> - a web app for encryption, encoding, compression and data analysis.

##### :black_small_square: Net-tools

<a href=" - detailed report about the site, helping you to make informed choices about their integrity.* 
   <a href=" NCC Atlas</a> - a global, open, distributed Internet measurement platform. 
   <a href=" - uses sources to gather public information about IP numbers, domain names, host names, etc. 
   <a href=" Trails</a> - APIs for Security Companies, Researchers and Teams. 
   <a href=" Curl</a> - curl test, analyze HTTP Response Headers. 
   <a href=" Tools for De</a> - HTTP API tools, testers, encoders, con, formatters, and other tools. 
   <a href=" - online Ping, Traceroute, DNS lookup, WHOIS and others. 
   <a href=" - 网络 tools for webmasters, IT technicians & geeks. 
   <a href=" - search for any ASN, IP, Prefix or Resource name. 
   <a href=" BGP safe yet?</a> - check BGP (RPKI) security of ISPs and other major Internet players. 
   <a href=" - provides online communication tools for people and groups working on liberatory social change. 
   <a href=" - analyze suspicious files and URLs to detect types of malware.

##### :black_small_square: Privacy

<a href=" - provides knowledge and tools to protect your privacy against global mass sur. 
   <a href=" Privacy Test Servers</a> - DNS privacy recursi list (with a 'no logging' policy).

##### :black_small_square: Code parsers/playgrounds

<a href=" - finds bugs in your shell scripts. 
   <a href=" - get interactive help texts for shell commands. 
   <a href=" - li for HTML, CSS & Ja, and more. 
   <a href=" - online 代码 editor for web application de. 
   <a href=" Sandbox</a> - test your PHP 代码 with this 代码 tester. 
   <a href=" - an instant IDE to learn, build, collaborate, and host all in one place. 
   <a href=" - is an online 工具 for experimenting with the Cache VCL. 
   <a href=" Dockerfile Linter</a> - a smarter Dockerfile linter that helps you build best practice Docker images.

##### :black_small_square: Performance

<a href=" - analyze your site’s speed and make it faster. 
   <a href=" loadtimetester</a> - test here the
performance of any of your sites from across the globe. 
   <a href=" Tools</a> - analyze your site’s speed around the world. 
   <a href=" - run website latency tests across multiple geographic regions. 
   <a href=" Insights</a> - analyze your site’s speed and make it faster. 
   <a href=" - helps de like you learn and apply the web's modern capabilities to your own sites and apps. 
   <a href=" - automated auditing, performance metrics, and best practices for the web.

##### :black_small_square: Mass scanners (search engines)

<a href=" - platform that helps information security practitioners discover, monitor, and analyze devices. 
   <a href=" - the world's first search 引擎 for Internet-connected devices. 
   <a href=" 2000</a> - this 工具 looks for randomly generated data from Shodan. 
   <a href=" - mass scanner such as Shodan and Censys. 
   <a href=" - search 引擎 for cyberspace that lets the user find specific 网络 components. 
   <a href=" - tools to monitor and understand deep structure of the web. 
   <a href=" - is a cyberspace search 引擎. 
   <a href=" - is a search 引擎 for open-源码 and cyber threat intelligence data collected. 
   <a href=" - is a search 引擎 and data archive. 
   <a href=" - it scan the entire internet space and create real-time threat intelligence streams and reports. 
   <a href=" - Internet assets registry: networks, threats, web objects, etc. 
   <a href=" - is a submission-based catalog of wireless networks. All the networks. Found by E. 
   <a href=" - find any alphanumeric snippet, signature or keyword in the web pages HTML, JS and CSS 代码. 
   <a href=" - this repository contains hundreds of online search utilities. 
   <a href=" - lets you find email addresses in seconds and connect with the people that matter for your business. 
   <a href=" - search by full email address or username. 
   <a href=" - was my email affected by data breach? 
   <a href=" Leak Info</a> - world's fastest and largest data breach search 引擎. 
   <a href=" - scans of malicious URLs, IPs, and domains, including port scans and web requests. 
   <a href=" by Grayhatwarfar</a> - 数据库 with public search for Open Amazon S3 Buckets and their contents. 
   <a href=" - the breached 数据库 directory. 
   <a href=" - find out what websites are built with. 
   <a href=" - search the web's 源码代码 for technologies, across millions of sites. 
   <a href=" - search for sites, images, apps, softwares & more. 
   <a href=" open FTP Index</a> - if a target has an open FTP site with accessible content it will be listed here. 
   <a href=" 框架</a> - focused on gathering information from free tools or resources. 
   <a href=" - is a service oriented to cybersecurity analysts. 
   <a href=" 源码</a> - is a collaboration of data found online in the form of a lookup. 
   <a href=" Leak Info</a> - to help e indi secure their online life, a getting hacked. 
   <a href=" - is the place to find the person behind the email address, social username or phone number. 
   <a href=" - is operated by a random swiss guy fighting malware for non-profit. 
   <a href=" - malware search 引擎. 
   <a href=" Tracker</a> - monitors and tracks malware families that are used to perpetrate cyber crimes. 
   <a href=" - find GitHub secrets in real time. 
   <a href=" - helping you find real world examples of functions, API's and libraries. 
   <a href=" - the world biggest directory of online sur security cameras. 
   <a href=" - contains great stuff like: security, hacking, reverse engineering, cryptography, programming etc. 
   <a href=" Labs Open Data</a> - is a great resources of datasets from Project Sonar. 
   <a href=" Response Headers</a> - the largest 数据库 of HTTP response headers. 
   <a href=" Labs</a> - InQuest Labs is an open, interactive, and API driven data portal for security researchers.

##### :black_small_square: Generators

<a href=" - generate fake faces in one click - endless possibilities. 
   <a href=" Generated Photos</a> - 100.000 AI generated faces. 
   <a href=" - your randomly generated identity. 
   <a href=" Redirector</a> - open redirect/SSRF payload generator.

##### :black_small_square: Passwords

<a href=" i been pwned?</a> - check if you have an account that has been compromised in a data breach. 
   <a href=" - is a hacked 数据库 search 引擎. 
   <a href=" 源码</a> - is a collaboration of data found online in the form of a lookup.

##### :black_small_square: C databases

<a href=" - list of publicly known cybersecurity . 
   <a href=" - C ad 数据库. 
   <a href=" DB</a> - C archive of public exploits and corresponding software. 
   <a href=" - exploits market provides you the possibility to buy/sell zero-day exploits. 
   <a href=" - the exploit and tools 数据库. 
   <a href=" - free 数据库. 
   <a href=" - is a 数据库 for and their corresponding 源码代码 if a. 
   <a href=" - free API for CVE data.

##### :black_small_square: Mobile apps scanners

<a href=" Mobile App Scanner</a> - test security and privacy of mobile apps (iOS & Android). 
   <a href=" - free Mobile App Scanner for Android & iOS. 
   <a href=" - analyzes mobile application to identify and potential weaknesses.

##### :black_small_square: Private Search Engines

<a href=" - the world's most private search 引擎. 
   <a href=" - a pri, hackable metasearch 引擎. 
   <a href=" - the 1st real Dark Web search 引擎. 
   <a href=" - the search 引擎 that respects your privacy. 
   <a href=" - the search 引擎 that doesn't track you. 
   <a href=" - privacy safe web search 
   <a href=" - the search 引擎 that anonymizes your searches. 
   <a href=" - the search 引擎 that uses anonymous proxy and hidden Tor branches.

##### :black_small_square: Secure Webmail Pro

<a href=" - online email service, designed to provide maximum security and privacy. 
   <a href=" - is a Tor Hidden Service that allows anyone to send and recei anonymously. 
   <a href=" - is the world's most secure email service and amazingly easy to use. 
   <a href=" - is the world's largest secure email service, de by CERN and MIT scientists. 
   <a href=" - private & encrypted email made easy.

##### :black_small_square: Crypto

<a href=" - it's open 源码 and powered by public-key cryptography.

##### :black_small_square: PGP Keyservers

<a href=" OpenPGP Key 服务端</a> - services for the SKS keyservers used by OpenPGP.

#### Systems/Services  [[TOC]](#anger-table-of-contents)

##### :black_small_square: Operating Systems

<a href=" - the most "Unix-like" Linux distribution. 
   <a href=" - multi-platform 4.4BSD-based UNIX-like operating system. 
   <a href=" - HardenedBSD aims to implement inno exploit mitigation and security solutions. 
   <a href=" Linux</a> - Linux distribution used for Penetration Testing, Ethical Hacking and 网络 security assessments. 
   <a href=" Security OS</a> - cyber security GNU/Linux en. 
   <a href=" Linux</a> - penetration test and security assessment oriented Ubuntu-based Linux distribution. 
   <a href=" - is an Arch Linux-based penetration testing distribution for penetration testers. 
   <a href=" - is a security-focused livecd based on Gentoo. 
   <a href=" Onion</a> - Linux distro for intrusion detection, enterprise security monitoring, and log management. 
   <a href=" - is a li that aims to preserve your privacy and anonymity. 
   <a href=" - OpenBSD router boilerplate. 
   <a href=" OS</a> - is a security-oriented OS that uses Xen-based .

##### :black_small_square: HTTP(s) Services

<a href=" Cache</a> - HTTP accelerator designed for content-hea web sites. 
   <a href=" - open 源码 web and reverse proxy 服务端 that is similar to Apache, but very light weight. 
   <a href=" - is a dynamic web platform based on NGINX and LuaJIT. 
   <a href=" - a distribution of Nginx with some ad features. 
   <a href=" 服务端</a> - is an open 源码, HTTP/2-enabled web 服务端 with HTTPS by default. 
   <a href=" - the reliable, high performance TCP/HTTP load balancer.

##### :black_small_square: DNS Services

<a href=" - , recursive, and caching DNS resolver (with TLS). 
   <a href=" Resolver</a> - caching full resol, including both a resol and a daemon. 
   <a href=" - is an open 源码 authoritative DNS 服务端, written in C++ and licensed under the GPL.

##### :black_small_square: Other Services

<a href=" - tiny free proxy 服务端.

##### :black_small_square: Security/hardening

<a href=" Onion</a> - is a 501(c)(3) nonprofit organization and transit internet service provider (ISP). 
   <a href=" - the Pi-hole® is a DNS sinkhole that protects your devices from unwanted content. 
   <a href=" - malicious traffic detection system. 
   <a href=" - monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time. 
   <a href=" - secure and fast microVMs for ser computing. 
   <a href=" - sets up a new ser your choice of WireGuard, OpenSSH, OpenVPN, and more.

#### Networks  [[TOC]](#anger-table-of-contents)

##### :black_small_square: Tools

<a href=" - web 工具 to analyze large amounts of captured 网络 traffic (PCAP analyzer). 
   <a href=" - IP address management (IPAM) and data center infrastructure management (DCIM) 工具.

##### :black_small_square: Labs

<a href=" Labs</a> - learn automation by doing it. Right now, right here, in your browser.

##### :black_small_square: Other

<a href=" 网络 Research Group</a> - home page of the 网络 Research Group (NRG).

#### Containers/Orchestration  [[TOC]](#anger-table-of-contents)

##### :black_small_square: CLI Tools

<a href=" - container runtime sandbox. 
   <a href=" - top-like interface for container metrics.

##### :black_small_square: Web Tools

<a href=" - a collaborati for the container ecosystem to assemble container-based system. 
   <a href=" - open 源码 reverse proxy/load balancer provides easier integration with Docker and Let's encrypt. 
   <a href=" - The Cloud-Native API Gateway. 
   <a href=" - complete container management platform. 
   <a href=" - making Docker management easy. 
   <a href=" - automated nginx proxy for Docker containers using docker-gen. 
   <a href=" - nginx docker image "secure by default".

##### :black_small_square: Security

<a href=" - checks for dozens of common best-practices around deploying Docker. 
   <a href=" - scanner for containers, suitable for CI. 
   <a href=" - cloud nati project that stores, signs, and scans content. 
   <a href=" - hundreds of offensive and useful docker images for 网络 intrusion.

##### :black_small_square: Manuals/Tutorials/Best Practices

<a href=" - a quick reference cheat sheet on Docker. 
   <a href=" - a curated list of Docker resources and projects. 
   <a href=" - learn and understand Docker technologies, with real DevOps practice! 
   <a href="
</a> - is a collection of tutorials for learning how to use Docker with tools. 
   <a href=" - Dockerfiles I use on the desktop and on servers. 
   <a href=" - bootstrap Kubernetes the hard way on Google Cloud Platform. No scripts. 
   <a href=" - bootstrap Kubernetes the easy way on Google Cloud Platform. No scripts. 
   <a href=" - Kubernetes CheatSheets in A4. 
   <a href=" - kubernetes security notes and best practices. 
   <a href=" - checklists with best-practices for production-ready Kubernetes. 
   <a href=" - kubernetes security - best practice guide. 
   <a href=" - is a compilation of public failure/horror stories related to Kubernetes.

#### Manuals/Howtos/Tutorials  [[TOC]](#anger-table-of-contents)

##### :black_small_square: Shell/Command line

<a href=" - is a collection of pure bash alternatives to external processes. 
   <a href=" - is a collection of pure POSIX sh alternatives to external processes. 
   <a href=" - is a guide to learn bash. 
   <a href=" - for those who wanna learn Bash. 
   <a href=" Bash Hackers Wiki</a> - hold documentation of any kind about GNU Bash. 
   <a href=" & Utilities</a> - describes the commands offered to application programs by POSIX-conformant systems. 
   <a href=" - master the command line, in one page. 
   <a href=" Style Guide</a> - a shell style guide for Google-originated open-源码 projects.

##### :black_small_square: Text Editors

<a href=" Sheet</a> - great multi language .

##### :black_small_square: Python

<a href=" Python</a> - a curated list of awesome Python frameworks, libraries, software and resources. 
   <a href=" - comprehensi cheatsheet. 
   <a href=" - basic reference for beginner and ad de.

##### :black_small_square: Sed & Awk & Other

<a href=" Yeah!</a> - ad sed and awk usage (Parsing for Pentesters 3).

##### :black_small_square: \*nix & Network

<a href=" - linux and unix tutorials for new and seasoned sysadmin. 
   <a href=" - the ideal Linux blog for Sysadmins & Geeks. 
   <a href=" - free Networking, System Administration and Security tutorials. 
   <a href=" - Linux tutorials and cheatsheets. Minimal examples. Mostly user-land CLI utilities. 
   <a href=" - learn the skills required to sysadmin. 
   <a href=" Toolbox</a> - Unix/Linux/BSD commands and tasks which are useful for IT work or for ad users. 
   <a href=" Kernel Teaching</a> - is a collection of lectures and labs Linux kernel topics. 
   <a href=" explained</a> - explanation of e you can see in htop/top on Linux. 
   <a href=" Guide and Hints</a> - tutorials on system administration in Fedora and CentOS. 
   <a href=" - a little book which introduces strace. 
   <a href=" - examples and hands-on labs for Linux tracing tools workshops. 
   <a href=" - a detailed document explaining and documenting HTTP/2. 
   <a href=" - a document describing the HTTP/3 and QUIC protocols. 
   <a href=" in Action</a> - an excellent introduction to the new HTTP/2 standard. 
   <a href=" 代码 a TCP/IP stack</a> - great stuff to learn 网络 and system programming at a deeper level. 
   <a href=" Admin's Handbook</a> - how to impro performance, security and other important things. 
   <a href=" - NGINX config generator on steroids. 
   <a href=" guideline</a> - is to help operational teams with the configuration of OpenSSH 服务端 and 客户端. 
   <a href=" Handshake Explained</a> - is a relatively brief description of the SSH handshake. 
   <a href=" Knowledgebase</a> - you'll find some general information about BIND 9, ISC DHCP, and Kea DHCP. 
   <a href=" - a place to record notes while studying for Cisco's CCNP certification.

##### :black_small_square: Microsoft

<a href=" - attack and defend acti using modern post exploitation activity.

##### :black_small_square: Large-scale systems

<a href=" System Design Primer</a> - learn how to design large-scale systems. 
   <a href=" Scalability</a> - best practices in building High Scalability, High A, High Stability, and more. 
   <a href=" Architecture 101</a> - the basic architecture concepts.

##### :black_small_square: System hardening

<a href=" Benchmarks</a> - secure configuration settings for over 100 technologies, a as a free PDF. 
   <a href=" Harden CentOS 7</a> - this walks you through the steps required to security harden CentOS. 
   <a href=" 7 Ser Guide</a> - great guide for hardening CentOS; familiar with OpenSCAP. 
   <a href=" - is a collection of security hardening guides, tools and other resources. 
   <a href=" Practical Linux Hardening Guide</a> - provides a high-le of hardening GNU/Linux systems. 
   <a href=" Hardening Guide</a> - how to harden Linux as much as possible for security and privacy.

##### :black_small_square: Security & Privacy

<a href=" Articles</a> - LRaj Chandel's Security & Hacking Blog. 
   <a href=" security tools</a> - make your AWS cloud en more secure. 
   <a href=" CyberSecurity In</a> - an in of tools and resources about CyberSecurity. 
   <a href=" Illustrated TLS Connection</a> - every byte of a TLS connection explained and reproduced. 
   <a href=" Research</a> - SSL and TLS Deployment Best Practices by SSL Labs. 
   <a href=" 游戏</a> - learn SELinux by doing. Sol, show skillz. 
   <a href=" and PKI</a> - e you should know about certificates and PKI but are too afraid to ask. 
   <a href=" Art of Subdomain Enumeration</a> - a reference for subdomain enumeration techniques. 
   <a href=" Google</a> - the comprehensi to quitting Google.

##### :black_small_square: Web Apps

<a href=" - worldwide not-for-profit charitable organization focused on improving the security of software. 
   <a href=" ASVS 3.0.1</a> - OWASP Application Security Standard Project. 
   <a href=" ASVS 3.0.1 Web App</a> - simple web app that helps de understand the AS. 
   <a href=" ASVS 4.0</a> - is a list of application security requirements or tests. 
   <a href=" Testing Guide v4</a> - includes a "best practice" penetration testing 框架. 
   <a href=" De</a> - this is the de of the OWASP De Guide. 
   <a href=" WSTG</a> - is a comprehensive open 源码 guide to testing the security of web apps. 
   <a href=" API Security Project</a> - focuses specifically on the top ten in API security. 
   <a href=" Web Security</a> - help operational teams with creating secure web applications. 
   <a href=" - security bulletins that relate to Netflix Open 源码. 
   <a href=" - security countermeasures when designing, testing, and releasing your API. 
   <a href=" CORS</a> - enable cross-origin resource sharing. 
   <a href=" Security Wiki</a> - is an initiative to provide all application security related resources at one place. 
   <a href=" Proxies</a> - reverse proxy related attacks; it is a result of analysis of proxies. 
   <a href=" - great series about malicious payloads. 
   <a href=" Web Cache Poisoning</a> - show you how to compromise websites by using esoteric web features. 
   <a href=" directories and files</a> - as a 源码 of sensiti about web application. 
   <a href=" blog</a> - great blog about cybersec and pentests. 
   <a href=" Cookies</a> - this paper will take a close look at cookie security. 
   <a href=" - help you keep secrets (API keys, db credentials, certificates) out of 源码代码.

##### :black_small_square: All-in-one

<a href=" Cheat Sheets</a> - all cheat sheets. 
   <a href=" Cheat Sheets’s</a> - massi sheets documentation. 
   <a href=" cheatsheets</a> - this is a modest collection of cheatsheets. 
   <a href=" API</a> - combines multiple API documentations in a fast, organized, and searchable interface. 
   <a href=" - the only cheat sheet you need. 
   <a href=" - collection of cheat sheets about bash, vim and networking. 
   <a href=" Skills</a> - o of useful skills to learn as a web de.

##### :black_small_square: Ebooks

<a href=" - list of free learning resources in many languages.

##### :black_small_square: Other

<a href=" Series : Machines</a> - the steps below could be followed to find and exploits. 
   <a href=" - $50 million CTF from Hackerone - writeup. 
   <a href=" - an archive of low-level CTF challenges de over the years. 
   <a href=" to start RE/malware analysis?</a> - collection of some hints and useful links for the beginners. 
   <a href=" C10K problem</a> - it's time for web servers to handle ten thousand clients simultaneously, don't you think? 
   <a href=" 1500 bytes became the MTU of the internet</a> - great story about the Maximum Transmission Unit. 
   <a href=" man's profiler</a> - like dtrace's don't really provide methods to see what programs are blocking on. 
   <a href=" on Stack O</a> - this is the story of a long journey regarding the implementation of SSL. 
   <a href=" Drawings</a> - some drawings about programming and unix world, zines about systems & debugging tools. 
   <a href=" collisions</a> - this great repository is focused on hash collisions exploitation. 
   <a href=" - animation of the SHA-256 hash function in your terminal. 
   <a href=" - sha256 algorithm explained online step by step . 
   <a href=" Meets Cat</a> - after 3072 hours of manipulating BGP, Job Snijders has succeeded in drawing a Nyancat. 
   <a href=" - playing battleships over BGP. 
   <a href=" happens when...</a> - you type google.com into your browser and press enter? 
   <a href=" - based on the 'What happens when...' repository. 
   <a href=" in the real world</a> - great tutorial explain how HTTPS works in the real world. 
   <a href=" and NFS bug</a> - how we spent two weeks hunting an NFS bug in the Linux kernel. 
   <a href=" melts down</a> - postmortem on the 数据库 outage of January 31 2017 with the lessons we learned. 
   <a href=" To Become A Hacker</a> - if you want to be a hacker, keep reading. 
   <a href=" Costs in CPU</a> - should help to estimate costs of certain operations in CPU clocks. 
   <a href=" Build a Simple 数据库</a> - writing a sqlite clone from scratch in C. 
   <a href=" - great resource to understand how computers work under the hood. 
   <a href=" story of "Have I been pwned?"</a> - working with 154 million records on Azure Table Storage. 
   <a href=" Supercomputers</a> - shows the 500 most powerful commercially a computer systems. 
   <a href=" to build a 8 GPU password cracker</a> - hours of frustration like desktop components do. 
   <a href=" Data Centre</a> - 3D of the CERN computing en (and more). 
   <a href=" fucked is my 数据库</a> - e how fucked your 数据库 is with this handy website. 
   <a href=" Troubleshooting 101 , 2016 Edition</a> - e is a DNS Problem... 
   <a href=" Whys</a> - you know what the problem is, but you cannot solve it? 
   <a href=" me & notPetya</a> - how did ransomware successfully hijack hundreds of domain controllers? 
   <a href=" - how HTTPS works ...in a comic! 
   <a href=" - a fun and colorful explanation of how DNS works. 
   <a href=" - your postgresql.conf documentation and recommendations.

#### Inspiring Lists  [[TOC]](#anger-table-of-contents)

##### :black_small_square: SysOps/DevOps

<a href=" Sysadmin</a> - amazingly awesome open 源码 sysadmin resources. 
   <a href=" Shell</a> - awesome command-line frameworks, toolkits, guides and gizmos. 
   <a href=" - finding text to search and replace, sorting to beautifying, and more. 
   <a href=" Pcaptools</a> - collection of tools de by other researchers to process 网络 traces. 
   <a href=" - a curated list of awesome projects related to eBPF. 
   <a href=" 网络 Performance</a> - where some of the 网络 sysctl fit into the Linux/Kernel 网络 flow. 
   <a href=" Postgres</a> - list of awesome PostgreSQL software, libraries, tools and resources. 
   <a href=" - a quick reminder of all SQL queries and examples on how to use them. 
   <a href=" - list of Free Software 网络 services and web applications which can be hosted locally. 
   <a href=" of applications</a> - huge list of apps sorted by category, as a reference for those looking for packages. 
   <a href=" - build the best interview map. 
   <a href=" - DevOps Guide from basic to ad with Interview Questions and Notes. 
   <a href=" Journal</a> - it is a great list of periodical magazines about FreeBSD and other important things. 
   <a href=" - contains interview questions on DevOps and SRE related topics.

##### :black_small_square: De

<a href=" De Roadmap</a> - roadmaps, articles and resources to help you choose your path, learn and improve. 
   <a href=" - the perfect Front-End Checklist for modern websites and meticulous de. 
   <a href=" - Front-End Performance Checklist that runs faster than the others. 
   <a href=" Magic Methods</a> - what are magic methods? They're e in object-oriented Python. 
   <a href=" - a collection of surprising Python snippets and lesser-known features. 
   <a href=" - a list of books and articles for the discerning web de to read. 
   <a href=" messages guide</a> - a guide to understand the importance of commit messages.

##### :black_small_square: Security/Pentesting

<a href=" Web Security</a> - a curated list of Web Security materials and resources. 
   <a href=" - a curated list of hacking en where you can train your cyber skills. 
   <a href=" - an authoritative list of awesome de tools. 
   <a href=" - is a curated list of amazingly awesome OSINT. 
   <a href=" - tips and tutorials on Bug Bounty Hunting and Web App Security. 
   <a href=" - a curated list of Awesome Threat Intelligence resources. 
   <a href=" - a collection of open 源码 and commercial tools that aid in red team operations. 
   <a href=" - a curated list of amazingly awesome Burp Extensions. 
   <a href=" Security eBooks</a> - list of a Free Security and Hacking eBooks. 
   <a href=" - top 100 Hacking & Security E-Books. 
   <a href=" - curated list of privacy respecting services and software. 
   <a href=" - list of awesome reverse engineering resources. 
   <a href=" - a collection of resources for linux reverse engineering. 
   <a href=" - a list of Reverse Engineering articles, books, and papers. 
   <a href=" - a curated list of awesome web-app firewall (WAF) stuff. 
   <a href=" - interesting, funny, and depressing search queries to plug into shodan.io. 
   <a href=" - a curated list of the most common and most interesting robots.txt disallowed directories. 
   <a href=" - is a small course on exploiting and defending neural networks. 
   <a href=" - why you probably shouldn't use a wildcard certificate. 
   <a href=" use </a> - which is what every third-party "" does. 
   <a href=" - a curated list of awesome YARA rules, tools, and people. 
   <a href=" - guide to securing and improving privacy on macOS. 
   <a href=" - macOS Security Compliance Project. 
   <a href=" - is a collected list of awesome security talks. 
   <a href=" for Hackers</a> - list of movies every hacker & cyberpunk must watch. 
   <a href=" - materials used whilst taking Prof. Dan Boneh Stanford Crypto course. 
   <a href=" - library to learn and practice Offensive and Defensi.

##### :black_small_square: Other

<a href=" - over 3,000 free cheat sheets, re aids and quick references. 
   <a href=" - static analysis tools for all programming languages. 
   <a href=" - path to a free self-taught education in Computer Science. 
   <a href=" - is a collection of postmortems (config errors, hardware failures, and more). 
   <a href=" - build your own (insert technology here). 
   <a href=" - is a curated list of project-based tutorials in C. 
   <a href=" - README templates & tips on writing high-quality documentation. 
   <a href=" - free software that works great, and also happens to be open-源码 Python. 
   <a href=" - a topic-centric list of HQ open datasets. 
   <a href=" - a curated list of all machine learning algorithms and concepts.

#### Blogs/Podcasts/  [[TOC]](#anger-table-of-contents)

##### :black_small_square: SysOps/DevOps

<a href=" for PHP de</a> - very interesting presentation of by Mattias Geniar. 
   <a href=" Netflix Guide to Microservices</a> - talks about the chaotic and world of microservices at Netflix.

##### :black_small_square: De

<a href=" C to machine lang</a> - compare a simple C app with the compiled machine 代码 of that program.

##### :black_small_square: Geeky Persons

<a href=" Gregg's Blog</a> - is an industry expert in computing performance and cloud computing. 
   <a href=" "GynDream" Coldwind</a> - is a IT security engineer at Google. 
   <a href=" "lcamtuf" Zalewski</a> - white hat hacker, computer security expert. 
   <a href=" Geniar</a> - de, sysadmin, blogger, podcaster and public speaker. 
   <a href=" Craver</a> - software de and systems administrator for Stack Exchange. 
   <a href=" Helme</a> - security researcher, speaker and founder of securityheaders.com and report-uri.com. 
   <a href=" Krebs</a> - The Washington Post and now an Independent in journalist. 
   <a href=" Schneier</a> - is an internationally renowned security technologist, called a "security guru". 
   <a href=" Morgan</a> - ad of practical learning, Chrissy also takes part in bug bounty programs. 
   <a href=" Gill</a> - is a hacker at heart who works as a senior penetration tester. 
   <a href=" Miessler</a> - cybersecurity expert and writer. 
   <a href=" Kamkar</a> - is an American privacy and security researcher, computer hacker. 
   <a href=" - is a security ad at AlienVault, a blogger event speaker and industry commentator. 
   <a href=" Cluley</a> - public speaker and independent computer security analyst. 
   <a href=" Szurek</a> - detection engineer at ESET. 
   <a href=" Hunt</a> - web security expert known for public education and outreach on security topics. 
   <a href=" - sysadmin specializing in building high a cloud en. 
   <a href=" Penz</a> - IT security expert.

##### :black_small_square: Geeky Blogs

<a href=" Audit</a> - the Linux security blog about auditing, hardening and compliance by Michael Boelen. 
   <a href="
Linux Security Expert</a> - trainings, howtos, checklists, security tools, and more. 
   <a href=" Grymoire</a> - collection of useful incantations for wizards, be you computer wizards, magicians, or whatever. 
   <a href=" - is the only non-profit, independent and led publication in the information security space. 
   <a href=" - security news that informs and inspires.

##### :black_small_square: Geeky Blogs

<a href=" Podcast</a> - con and interviews related to Cyber Exposure, and more. 
   <a href=" - threat news room, giving you news, opinion, advice and research on computer security issues. 
   <a href=" State of Security</a> - blog featuring the latest news, trends and insights on current security issues. 
   <a href=" Labs Blog</a> - security blog aims to provide insider news about cybersecurity. 
   <a href=" - latest news, and trends about cybersecurity. 
   <a href=" Web Security Blog</a> - about web app security vulns and top tips from our team of web security. 
   <a href=" Cybersecurity blog</a> - news on emerging threats and practical advice to simplify threat detection. 
   <a href=" - where CISOs and IT Admins come to learn about industry trends, IT security, and more.

##### :black_small_square: Geeky Cybersecurity Podcasts

<a href=" Business</a> - is a weekly information security podcast featuring news and in-depth interviews. 
   <a href=" by Motherboard</a> - stories, and focus on the ideas about cybersecurity. 
   <a href=" Podcast</a> - con and interviews related to Cyber Exposure, and more. 
   <a href="
Cybercrime In</a> - podcast by Geoff White about cybercrimes. 
   <a href=" many hats club</a> - featuring stories from a wide range of Infosec people (Whitehat, Greyhat and Blackhat). 
   <a href=" Diaries</a> - true stories from the dark side of the Internet. 
   <a href=" Webcasts</a> - is the in curiosity that helps people be successful in OSINT. 
   <a href=" Weekly</a> - the latest information security and hacking news.

##### :black_small_square: Geeky Cybersecurity Video Blogs

<a href=" security</a> - offensi exploitation, web app security, hardening, red team, blue team. 
   <a href=" - a lot more ad topics than what is typically offered in paid online courses - but for free. 
   <a href=" - the important information regarding our internet security. 
   <a href="
CyberTalks</a> - talks, interviews, and article about cybersecurity.

##### :black_small_square: Best Personal Twitter Accounts

<a href=" - a white-hat hacker/pentester. Intergalactic Minesweeper Champion 1990. 
   <a href=" - Co-Founder , at the intersection of IT security and society. 
   <a href=" - Linux E. Malwares. Kernel De Enthusiast. 
   <a href=" - an InfoSec Professional and Tech Geek. 
   <a href=" - CRO at F-Secure, Reverse Engineer, TED Speaker, Super. 
   <a href=" - often referred to as ESR, is an American software de, and open-源码 software ad. 
   <a href=" - security researcher/programmer, founder/player, technical streamer. 
   <a href=" - Security Researcher & Cyber Observer. 
   <a href=" - programmer, malware analyst. Author of PEbear, PEsie. 
   <a href=" - tinkerer, cypherpunk, hacker. 
   <a href=" - independent hacker and researcher. 
   <a href=" - systems security, industrial safety, sysadmin, author of decentsecurity.com. 
   <a href=" - is one of just se with the authority to restore the DNS root keys. 
   <a href=" - is a famous "grey hat" hacker, security researcher, creator of the MySpace "Samy" worm. 
   <a href=" - founder & CTO of Security Weekly podcast 网络. 
   <a href=" - co-founder. 
   <a href=" - Security Researcher. 
   <a href=" - a cryptographer and professor at Johns Hopkins Uni.

##### :black_small_square: Best Commercial Twitter Accounts

<a href=" - check if you have an account that has been compromised in a data breach. 
   <a href=" - trusted by more of the Fortune 500 than any other crowdsourced security platform. 
   <a href=" - most trusted security company. Unmatched threat . 
   <a href=" - the world's leading Digital Forensics and Incident Response provider. 
   <a href=" - AT&T Cybersecurity’s Edge-to-Edge technologies provide threat intelligence, and more. 
   <a href=" - an information security focused podcast and group of indi from all walks of life. 
   <a href=" - Hedgehog Cyber. Gibraltar and Manchester's top boutique information security firm. 
   <a href=" - the National Cyber Security Centre. Helping to make the UK the safest place to live and work online. 
   <a href=" - IT security experts.

##### :black_small_square: A piece of history

<a href=" to Do Things at ARL</a> - how to configure modems, scan images, record CD-ROMs, and other.*

##### :black_small_square: Other

<a href=" Key Exchange (short )</a> - how Diffie-Hellman Key Exchange worked.

#### Hacking/Penetration Testing  [[TOC]](#anger-table-of-contents)

##### :black_small_square: Pentesters arsenal tools

<a href=" Browser</a> - a penetration-oriented browser with plenty of ad functionality already built in. 
   <a href=" - 工具 and 框架 for pentesting system, web and many more. 
   <a href=" Suite</a> - 工具 for testing web app security, intercepting proxy to replay, inject, scan and fuzz. 
   <a href=" Zed Attack Proxy</a> - intercepting proxy to replay, inject, scan and fuzz HTTP requests. 
   <a href=" - is a Web Application Attack and Audit 框架. 
   <a href=" - an interacti intercepting HTTP proxy for penetration testers. 
   <a href=" - web ser which performs comprehensi against web servers for multiple items. 
   <a href=" - 工具 that automates the process of detecting and exploiting SQL injection flaws. 
   <a href=" - is a full-featured Web Reconnaissance 框架 written in Python. 
   <a href=" - is a 网络 reconnaissance 工具 which performs automated enumeration of services. 
   <a href=" - an Integrated Multiuser Pentest En. 
   <a href=" - incredibly fast crawler designed for OSINT. 
   <a href=" - most ad XSS detection suite. 
   <a href=" - automated pentest 框架 for offensi experts. 
   <a href=" - is an agent-less scanner for Linux, FreeBSD, and other. 
   <a href=" - is a general purpose 网络 security scanner with an extensible plugin system. 
   <a href=" - a 工具 for domain flyovers. 
   <a href=" - information gathering 工具 for a website or IP address. 
   <a href=" - detect and bypass web application firewalls and protection systems. 
   <a href=" - CORS misconfiguration scanner. 
   <a href=" - is a high performance offensi 工具 for reconnaissance and scanning. 
   <a href=" - find web directories without bruteforce. 
   <a href=" The Ripper</a> - is a fast password cracker, currently a for many flavors of Unix, Windows, and other. 
   <a href=" - world's fastest and most ad password recovery utility. 
   <a href=" - is a 工具 to identify the players behind any incidental TCP/IP communications. 
   <a href=" - a prototype SSH configuration and policy scanner. 
   <a href=" - find open databases - powered by Binaryedge.io 
   <a href=" - searchable archive from The Exploit 数据库. 
   <a href=" - is a command line utility for searching and downloading exploits. 
   <a href=" - some setup scripts for security research tools. 
   <a href=" - CTF 框架 and exploit de library. 
   <a href=" - collection of small security tools created mostly in Python. CTFs, pentests and so on. 
   <a href=" - is a package of Pentest scripts. 
   <a href=" - python tools for penetration testers. 
   <a href=" - dictionary of attack patterns and primitives for black-box application fault injection. 
   <a href=" - is a free software fuzzer maintained by Google. 
   <a href=" - is AFL with community patches. 
   <a href=" - is an unsupervised, co kernel fuzzer. 
   <a href=" - exploit de and reverse engineering with GDB made easy. 
   <a href=" PEDA</a> - Python Exploit De Assistance for GDB. 
   <a href=" - multi-processor disassembler and debugger useful for reverse engineering malware. 
   <a href=" - 框架 for re and analyzing binaries. 
   <a href=" - exploitation 框架 for embedded devices. 
   <a href=" - is a software reverse engineering (SRE) 框架. 
   <a href=" - is an SRE platform integrating Ghidra's decompiler. 
   <a href=" - open-源码 pentesting management and automation platform by Salesforce Product Security. 
   <a href=" - is a graphical 工具 for custom wordlist generation. 
   <a href=" - assessment and management helps to perform scans and manage . 
   <a href=" - fully automated offensi 工具 for reconnaissance and scanning. 
   <a href=" - the browser exploitation 框架 project. 
   <a href=" - automated mass exploiter. 
   <a href=" - is a 工具 to identify and exploit sudo rules' misconfigurations and . 
   <a href=" - the pattern matching swiss knife. 
   <a href=" - a little 工具 to play with Windows security. 
   <a href=" - hunt down social media accounts by username across social networks. 
   <a href=" Threat Dragon</a> - is a 工具 used to create threat model diagrams and to record possible threats.

##### :black_small_square: Pentests bookmarks collection

<a href=" - the penetration testing execution standard. 
   <a href=" MindMap</a> - amazing mind map with apps and systems. 
   <a href=" Security Tests MindMap</a> - incredible mind map for WebApps security tests. 
   <a href=" XSS</a> - master the art of Cross Site Scripting. 
   <a href=" cheat sheet</a> - contains many that can help you bypass WAFs and filters. 
   <a href=" Bookmarks</a> - security bookmarks collection, all things that author need to pass OSCP. 
   <a href=" Pentest Cheat Sheets</a> - collection of the cheat sheets useful for pentesting. 
   <a href=" Hacking by HackWithGithub</a> - awesome lists for hackers, pentesters and security researchers. 
   <a href=" Hacking by carpedm20</a> - a curated list of awesome hacking tutorials, tools and resources. 
   <a href=" Hacking Resources</a> - collection of hacking/penetration testing resources to make you better. 
   <a href=" Pentest</a> - collection of awesome penetration testing resources, tools and other shiny things. 
   <a href=" - is a curated list of awesome Hacking Tools. 
   <a href=" Cheat Sheet</a> - author hacking and pentesting notes. 
   <a href=" - official Black Hat arsenal security tools repository. 
   <a href=" Testing and WebApp Cheat Sheets</a> - the complete list of Infosec related cheat sheets. 
   <a href=" Security Resources</a> - includes thousands of cybersecurity-related references and resources. 
   <a href=" Bookmarks</a> - there are a LOT of pentesting blogs. 
   <a href=" - Penetration Testing Reference Bank - OSCP/PTP & PTX Cheatsheet. 
   <a href=" - to aid the de of techniques and hypothesis for hunting campaigns. 
   <a href=" - notes for beginner 网络 pentesting course. 
   <a href=" - is a list of resources that author have been gathering in preparation for the OSCP. 
   <a href=" - a list of useful payloads and bypass for Web Application Security and Pentest/CTF. 
   <a href=" - git all the Payloads! A collection of web attack payloads. 
   <a href=" - command injection payload list. 
   <a href=" Shodan Search Queries</a> - great search queries to plug into Shodan. 
   <a href=" - is a collection of Awesome XSS resources. 
   <a href=" - common php webshells. 
   <a href=" Tools Cheat Sheet</a> - a quick reference high le for typical penetration testing. 
   <a href=" Cheat Sheet Series</a> - is a collection of high value information on specific application security topics. 
   <a href=" dependency-check</a> - is an open 源码 solution the OWASP Top 10 2013 entry. 
   <a href=" ProActi</a> - OWASP Top 10 Proacti 2018. 
   <a href=" - hacking & penetration testing & red team & cyber security resources. 
   <a href=" - is a free online security knowledge library for pentesters/researchers. 
   <a href=" CON Media 服务端</a> - great stuff from DEFCON. 
   <a href=" Malware Analysis</a> - a curated list of awesome malware analysis tools and resources. 
   <a href=" Injection Cheat Sheet</a> - detailed technical stuff about the many different of the SQL Injection. 
   <a href=" Knowledge Base</a> - great and detailed reference about . 
   <a href=" Security Cheatsheet</a> - a collection of HTML5 related XSS attack . 
   <a href=" String Encoder</a> - for generating XSS 代码 to check your input filters against XSS. 
   <a href=" - list of Unix binaries that can be exploited by an attacker to bypass local security restrictions. 
   <a href=" Ruiz Notes</a> - collection of security, system, 网络 and pentest cheatsheets. 
   <a href=" Tips</a> - a collection of SSRF Tips. 
   <a href=" repo CTF</a> - great archive of CTFs. 
   <a href=" - CTF (Capture The Flag) writeups, 代码 snippets, notes, scripts. 
   <a href=" - collection of CTF Web challenges. 
   <a href=" - The Mobile Security Testing Guide (MSTG) is a comprehensi for mobile app security testing. 
   <a href=" - notes on the most common things for an Internal 网络 Penetration Test. 
   <a href=" - shows quick ways in which API keys leaked by a bug bounty program can be checked. 
   <a href=" - Proof of Concepts of security research performed by Securitum. 
   <a href=" - is a list of public pentest reports released by several consulting security groups. 
   <a href=" - is a comprehensi list of a Bug Bounty. 
   <a href=" - is a list of bug bounty write-ups. 
   <a href=" - is a curated list of bugbounty writeups. 
   <a href=" bounty writeups</a> - list of bug bounty writeups (2012-2020). 
   <a href=" - a great journey into security.

##### :black_small_square: Backdoors/exploits

<a href=" - a collection of PHP backdoors. For educational or testing purposes only.

##### :black_small_square: Wordlists and Weak passwords

<a href=" - for any kind of bruteforce find wordlists or unleash the power of them all at once! 
   <a href=" - is a free online hash resolving service incorporating many unparalleled techniques. 
   <a href=" - collection of multiple types of lists used during security assessments, collected in one place. 
   <a href=" - sorted by probability originally created for password generation and testing. 
   <a href=" passwords</a> - password dictionaries and leaked passwords repository. 
   <a href=" PREMIUM Dictionary</a> - official dictionary created by the team on the forum bezpieka.org.* <a href="
   <a href=" - wordlists for creating statistically likely username lists.

##### :black_small_square: Bounty platforms

<a href=" - bug bounty platform with infosec jobs. 
   <a href=" - allows any security researcher reporting a on any website. 
   <a href=" - global hacker community to surface the most relevant security issues. 
   <a href=" - crowdsourced cybersecurity for the enterprise. 
   <a href=" - crowdsourced security & bug bounty management. 
   <a href=" - crowdsourced security & bug bounty programs, crowd security intelligence platform, and more. 
   <a href=" - bug bounty platform.

##### :black_small_square: Web Training Apps (local installation)

<a href=" - comprehensive and well maintained registry of all known web applications. 
   <a href=" - PHP/MySQL web application that is damn . 
   <a href=" - web application amongst security researchers. 
   <a href=" - is a VM that is built from the ground up with a large amount of security . 
   <a href=" - is a deliberately web application written in under 100 lines of 代码. 
   <a href=" Mutillidae II</a> - free, open 源码, deliberately web-application. 
   <a href=" Juice Shop Project</a> - the most bug-free application in existence. 
   <a href=" Node js Goat Project</a> - OWASP Top 10 security risks apply to web apps de using Node.js. 
   <a href=" - run Capture the Flags and Security Trainings with OWASP Juice Shop. 
   <a href=" - web and mobile application security training platform. 
   <a href=" Ninjas</a> - open 源码 application security training program. 
   <a href=" - a modern web app. 
   <a href=" - damn NodeJS application. 
   <a href=" - is an open-源码 application correlation and security orchestration 工具. 
   <a href=" Gruyere</a> - web application exploits and defenses. 
   <a href=" - is a playground focused on learning the exploitation of 客户端-side web . 
   <a href=" - single vm lab with the purpose of combining several appliations in one en. 
   <a href=" - pre-built En based on docker-compose. 
   <a href=" 2</a> - the new & improved " by Design"
AWS deployment tool. 
   <a href=" - is a laboratory for learning secure web de in a practical manner. 
   <a href=" - sample 代码 and its exploit 代码. 
   <a href=" - a 游戏 of Hackers (CTF Scoreboard & 游戏 Manager). 
   <a href=" - application security training (OWASP Top Web & Api).

##### :black_small_square: Labs (ethical hacking platforms/trainings/CTFs)

<a href=" - true performance-based penetration testing training for over a decade. 
   <a href=" The Box</a> - online platform allowing you to test your penetration testing skills. 
   <a href=" - online ethical hacking, computer 网络 and security challenge platform. 
   <a href=" - non-commercial wargame site which provides pwn challenges. 
   <a href=" - is a wargame site for hackers to test and expand their binary exploiting skills. 
   <a href=" - is a free computer security 游戏 targeted at middle and high school students. 
   <a href=" - is an online platform built to help ethical hackers learn and practice their cybersecurity knowledge. 
   <a href=" - CTF archive and a place, where you can get some another CTF-related info. 
   <a href=" Security Lab</a> - high quality security testing services. 
   <a href=" Pentest Labs</a> - pentest lab, take your Hacking skills to the next level. 
   <a href=" Me</a> - the fast, easy, and affordable way to train your hacking skills. 
   <a href=" - a great platform to train your pentesting skills. 
   <a href=" - learning Cyber Security made easy. 
   <a href=" - is a realistic web application hacking 游戏, designed to help players of all abilities develop their skills. 
   <a href=" Yourself First</a> - it's full of nasty app sec holes. 
   <a href=" - can help you to learn and practice security concepts in the form of fun-filled games. 
   <a href=" Labs</a> - is an online Penetration Testing Lab. 
   <a href=" - provides systems that can be used to test and understand . 
   <a href=" - tons of challenges designed to test and improve your hacking skills. 
   <a href=" - several security-oriented challenges for your entertainment. 
   <a href=" - preconfigured lab en. 
   <a href=" - emulate IT infrastructures of real companies for legal pen testing and improving pentest skills. 
   <a href=" - re challenges done in the web interface. 
   <a href=" - download crackmes to help improve your reverse engineering skills. 
   <a href=" - DOM XSS security learning and practicing platform. 
   <a href=" Challenges</a> - upgrade your web hacking techniques today! 
   <a href=" - allows anyone to gain practical 'hands-on' experience in digital security. 
   <a href=" - is a penetration testing training platform, which offers computer challenges. 
   <a href=" CTF</a> - offers you tons of challenges designed to test and improve your hacking skills. 
   <a href=" - a platform where you can build, host and share web apps for educational purposes. 
   <a href=" - discover how hacks, dumps and defacements are performed and secure your website. 
   <a href=" Group WebApp Training</a> - these challenges cover the exploits listed in the OWASP Top 10 Project. 
   <a href=" Engineering Challenges</a> - challenges, exercises, problems and tasks - by level, by type, and more. 
   <a href=" - the home of the Hacker - Malware, Reverse Engineering, and Computer Science. 
   <a href=" Chall</a> - there are exist a lots of different challenge types. 
   <a href=" Gateway</a> - is the go-to place for hackers who want to test their skills. 
   <a href=" - is a free class for web security. 
   <a href=" - a stupid 游戏 for learning about containers, capabilities, and syscalls. 
   <a href=" challenge!</a> - a series of levels you'll learn about common mistakes and gotchas when using AWS. 
   <a href=" WTF</a> - provides web hacking challenges derived from bounty write-ups. 
   <a href=" Challenge</a> - CTF Web App challenges. 
   <a href=" - most of the challenges used in the Google CTF 2017. 
   <a href=" This Site</a> - is a free, safe and legal training ground for hackers. 
   <a href=" & Defense</a> - is a browser-based cloud labs. 
   <a href=" - a fun platform for learning modern cryptography. 
   <a href=" - the cryptopals crypto challenges.

##### :black_small_square: CTF platforms

<a href=" - platform to host Capture the Flag competitions. 
   <a href=" - scoreboard for Capture The Flag competitions.

##### :black_small_square: Other resources

<a href=" Uni</a> - open 源码 education content for the researcher community. 
   <a href=" - a list of resources and scripts that I have been gathering in preparation for the OSCP. 
   <a href=" Top 10: Real-World Examples</a> - test your web apps with real-world examples (two-part series). 
   <a href=" - an awesome collection of articles from several respected hackers and other thinkers. 
   <a href=" - compilation of resources from TCM's Udemy Course.

#### Your daily knowledge and news  [[TOC]](#anger-table-of-contents)

##### :black_small_square: RSS Readers

<a href=" - organize, read and share what matters to you. 
   <a href=" - similar to feedly with a support for filtering what you fetch from rss.

##### :black_small_square: IRC Channels

<a href=" - hackerspace IRC channels.

##### :black_small_square: Security

<a href=" Hacker News</a> - leading news 源码 dedicated to promoting awareness for security experts and hackers. 
   <a href=" Hacking News</a> - provides the latest hacking news, exploits and for ethical hackers. 
   <a href=" Newsletter</a> - security news as a weekly digest (email notifications). 
   <a href=" Online Security Blog</a> - the latest news and insights from Google on security and safety on the Internet. 
   <a href=" Blog</a> - expert 网络 security guidance and news. 
   <a href=" - connecting the Information Security Community. 
   <a href=" - latest hacking tools, hacker news, cybersecurity best practices, ethical hacking & pen-testing. 
   <a href=" - public disclosure watcher who keeps you up to date about the recently disclosed bugs. 
   <a href=" - Hacking</a> - a subreddit dedicated to hacking and hackers. 
   <a href=" Storm</a> - information security services, news, files, tools, exploits, ad and whitepapers. 
   <a href=" - about security, penetration tests, and many others (PL/EN). 
   <a href=" - basic aspects and mechanisms of Linux operating system security (PL).

##### :black_small_square: Other/All-in-one

<a href=" - is a community of hackers; news & podcasts for de and hackers.

#### Other Cheat Sheets  [[TOC]](#anger-table-of-contents)

###### Build your own DNS Servers

<a href=" DNS Tutorial</a> - a , recursive, and caching DNS 服务端. 
   <a href=" Resolver on Fedora</a> - how to get faster and more secure DNS resolution with Knot Resolver on Fedora. 
   <a href=" - tutorial to setup your own DNS-o (DoH) 服务端. 
   <a href=" - a cartoon intro to DNS o. 
   <a href=" - following to your DoH 服务端, setup your DNS-o (DoT) 服务端. 
   <a href=" Servers</a> - how (and why) i run my own DNS Servers.

###### Build your own Certificate Authority

<a href=" Certificate Authority</a> - build your own certificate authority (CA) using the OpenSSL tools. 
   <a href=" Certificate Authority</a> - build your own certificate authority (CA) using open 源码 step-ca.

###### Build your own System/ Machine

<a href=" - how to create an OS from scratch. 
   <a href=" your Own Machine</a> - how to write your own machine (VM). 
   <a href=" Bare Metal Examples</a> - dozens of minimal operating systems to learn x86 system programming. 
   <a href=" - the scott CPU from "But How Do It Know?" by J. Clark Scott. 
   <a href=" - the little book about OS de.

###### DNS Servers list (privacy)

| IP | URL |
| :--- | :--- |
| 84.200.69.80 | dns.watch |
| 94.247.43.254 | opennic.org |
| 64.6.64.6 | .com |
| 89.233.43.71 | censurfridns.dk |
| 1.1.1.1 | cloudflare.com |
| 94.130.110.185 | dnsprivacy.at |

###### TOP Browser extensions

###### TOP Burp extensions

###### Hack Mozilla Firefox address bar

In Firefox's address bar, you can limit results by typing special characters before or after your term:

^ - for matches in your browsing history

* - for matches in your bookmarks.

% - for matches in your currently open tabs.

# - for matches in page titles.

@ - for matches in web addresses.

###### Chrome hidden commands

chrome://chrome-urls - list of all commands

chrome://flags - enable experiments and de features

chrome://interstitials - errors and warnings

chrome://net-internals - network internals (events, dns, cache)

chrome://network-errors - network errors

chrome://net-export - start logging future 网络 activity to a file

chrome://safe-browsing - safe browsing options

chrome://user-actions - record all user actions

chrome://restart - restart chrome

chrome://dino - ERR_INTERNET_DISCONNECTED...

cache:<website-address> - view the cached of the web page

###### Bypass WAFs by Shortening IP Address (by 0xInfection)

IP addresses can be shortened by dropping the zeroes:

> This bypasses WAF filters for SSRF, open-redirect, etc where any IP as input gets blacklisted.

For more information please see How to Obscure Any URL and Magic IP Address Shortcuts.

###### Hashing, encryption and encoding (by Michal Špaček)

_Hashing_

plaintext :arrow_right: hash 
hash :no_entry: plaintext

_Symmetric encryption_

plaintext :arrow_right: :key: :arrow_right: ciphertext 
plaintext :arrow_left: :key: :arrow_left: ciphertext 
(:key: shared key)

_Asymmetric encryption_

plaintext :arrow_right: :key: :arrow_right: ciphertext 
plaintext :arrow_left: :part_alternation_mark: :arrow_left: ciphertext 
(:key: public key, :part_alternation_mark: private key)

_Encoding_

text :arrow_right: encoded 
text :arrow_left: encoded

#### Shell One-liners  [[TOC]](#anger-table-of-contents)

##### Table of Contents

* terminal
* busybox
* mount
* fuser
* lsof
* ps
* top
*
* iostat
* strace
* kill
* find
* diff
*
* tail
* cpulimit
* pwdx
* tr
* chmod
* who
* last
* screen
* script
* du
* inotifywait
* openssl
* secure-delete
* dd
* gpg
* system-other
* curl
* httpie
* ssh
* linux-dev
* tcpdump
* tcpick
* ngrep
* hping3
* nmap
* netcat
* socat
* p0f
* gnutls-cli
* netstat
* rsync
* host
* dig
* certbot
* network-other
* git
* awk
* sed
* grep
* perl

##### Tool: terminal

###### Reload shell without exit

###### Close shell keeping all subprocess running

###### Exit without saving shell history

###### Perform a branching conditional

###### Pipe stdout and stderr to separate commands

###### Redirect stdout and stderr each to separate files and print both to the screen

###### List of commands you use most often

###### Sterilize bash history

> Look also: A nai to censor credentials in command history.

###### Quickly backup a file

###### Empty a file (truncate to 0 size)

###### Delete all files in a folder that don't match a certain file extension

###### Pass multi-line string to a file

###### Edit a file on a remote host using vim

###### Create a directory and change into it at the same time

###### Convert uppercase files to lowercase files

###### Print a row of characters across the terminal

###### Show shell history without line numbers

###### Run command(s) after exit session

###### Generate a sequence of numbers

###### Simple Bash filewatching

---

##### Tool: busybox

###### Static HTTP web server

___

##### Tool: mount)

###### Mount a temporary ram partition

* -t - filesystem type
* -o - mount options

###### Remount a filesystem as read/write

___

##### Tool: fuser)

###### Show which processes use the files/directories

###### Kills a process that is locking a file

* -i - interacti

###### Kills a process that is locking a file with specific signal

* --list-signals - list a signal names

###### Show what PID is listening on specific port

###### Show all processes using the named filesystems or block device

___

##### Tool: lsof

###### Show process that use internet connection at the moment

###### Show process that use specific port number

###### Lists all listening ports together with the PID of the associated process

###### List all open ports and their owning executables

###### Show all open ports

###### Show open ports (LISTEN)

###### List all files opened by a particular command

###### View user activity per directory

###### Show 10 largest open files

###### Show current working directory of a process

___

##### Tool: ps)

###### Show a 4-way scrollable process tree with full details

###### Processes per user counter

###### Show all processes by name with main header

___

##### Tool: find)

###### Find files that have been modified on your system in the past 60 minutes

###### Find all files larger than 20M

###### Find duplicate files (based on MD5 hash)

###### Change permission only for files

###### Change permission only for directories

###### Find files and directories for specific user/group

###### Find files and directories for all without specific user/group

###### Looking for files/directories that only ha permission

###### Delete older files than 60 days

###### Recursively remove all empty sub-directories from a directory

###### How to find all hard links to a file

###### Recursively find the latest modified files

###### Recursively find/replace of a string with sed

###### Recursively find/replace of a string in directories and file names

###### Recursively find suid executables

___

##### Tool: top)

###### Use top to monitor only all processes with the specific string

* <str> - process containing string (eg. nginx, worker)

___

##### Tool:

###### Show current system utilization (fields in kilobytes)

* 2 - number of times with a defined time interval (delay)
* 20 - each execution of the command (count)
* -t - show timestamp
* -w - wide output
* -S M - output of the fields in megabytes instead of kilobytes

###### Show current system utilization will get refreshed every 5 seconds

###### Display report a summary of disk operations

###### Display report of event counters and memory stats

###### Display report about kernel objects stored in slab layer cache

##### Tool: iostat

###### Show information about the CPU usage, and I/O statistics about all the partitions

* 2 - number of times with a defined time interval (delay)
* 10 - each execution of the command (count)
* -t - show timestamp
* -m - fields in megabytes (-k - in kilobytes, default)

###### Show information only about the CPU utilization

###### Show information only about the disk utilization

###### Show information only about the L

___

##### Tool: strace

###### Track with child processes

###### Track process with 30 seconds limit

###### Track processes and redirect output to a file

###### Track with print time spent in each syscall and limit length of print strings

###### Track the open request of a 网络 port

###### Track the open request of a 网络 port (show TCP/UDP)

___

##### Tool: kill)

###### Kill a process running on port

___

##### Tool: diff

###### Compare two directory trees

###### Compare output of two commands

___

##### Tool:

###### Highlight the exact differences, based on characters and words

###### Compare two JSON files

###### Compare Hex dump

###### diffchar

Save diffchar @ ~/.

Click F7 to switch between diff modes

Usefull commands:

* qa to exit all windows
* : resize 70 to resize window
* set window width Ctrl+W [N columns]+(Shift+)<\>

___

##### Tool: tail)

###### Annotate tail -f with timestamps

###### Analyse an Apache access log for the most common IP addresses

###### Analyse web 服务端 log and show only 5xx http codes

___

##### Tool: tar)

###### System backup with exclude specific directories

###### System backup with exclude specific directories (pigz)

___

##### Tool: dump)

###### System backup to file

###### Restore system from lzo file

___

##### Tool: cpulimit

###### Limit the cpu usage of a process

___

##### Tool: pwdx

###### Show current working directory of a process

___

##### Tool: taskset

###### Start a command on only one CPU core

___

##### Tool: tr)

###### Show directories in the PATH, one per line

___

##### Tool: chmod

###### Remo bit from all files in the current directory

###### Restore permission for /bin/chmod

___

##### Tool: who)

###### Find last reboot time

###### Detect a user sudo-su'd into the current shell

___

##### Tool: last

###### Was the last reboot a panic?

___

##### Tool: screen

###### Start screen in detached mode

###### Attach to an existing screen session

___

##### Tool: script)

###### Record and replay terminal session

___

##### Tool: du

###### Show 20 biggest directories with 'K M G'

___

##### Tool: inotifywait

###### Init 工具 e a file in a directory is modified

___

##### Tool: openssl

###### Testing connection to the remote host

###### Testing connection to the remote host (debug mode)

###### Testing connection to the remote host (with SNI support)

###### Testing connection to the remote host with specific ssl

###### Testing connection to the remote host with specific ssl cipher

###### 0-RTT

###### Generate private key without passphrase

###### Generate private key with passphrase

###### Remo from private key

###### Encrypt existing private key with a passphrase

###### Check private key

###### Get public key from private key

###### Generate private key and CSR

###### Generate CSR

###### Generate CSR (metadata from existing certificate)

> Where private.key is the existing private key. As you can see you do not generate this CSR from your certificate (public key). Also you do not generate the "same" CSR, just a new one to request a new certificate.

###### Generate CSR with -config param

Other in [ dn ]:

Example of oids (you'll probably also have to make OpenSSL know about the new fields required for EV by adding the following under [new_oids]):

Full example:

For more information please look at these great explanations:

RFC 5280

How to create multidomain certificates using config files

Generate a multi domains certificate using config files

Your OpenSSL CSR command is out of date

OpenSSL example configuration file

Object Identifiers (OIDs)

openssl objects.txt

###### List a EC curves

###### Print ECDSA private and public keys

###### Generate ECDSA private key

###### Generate private key and CSR (ECC)

###### Generate self-signed certificate

###### Generate self-signed certificate from existing private key

###### Generate self-signed certificate from existing private key and csr

###### Generate DH public parameters

###### Display DH public parameters

###### Extract private key from pfx

###### Extract private key and certs from pfx

###### Extract certs from p7b

###### Convert DER to PEM

###### Convert PEM to DER

###### of the private key

###### of the public key

###### of the certificate

###### of the CSR

###### Check the private key and the certificate are match

###### Check the private key and the CSR are match

___

##### Tool: secure-delete

###### Secure delete with shred

###### Secure delete with scrub

###### Secure delete with badblocks

###### Secure delete with secure-delete

___

##### Tool: dd)

###### Show dd status every so often

###### Redirect output to a file with dd

___

##### Tool: gpg

###### Export public key

* --export - export all keys from all keyrings or specific key
* -a|--armor - create ASCII armored output

###### Encrypt file

* -e|--encrypt - encrypt data
* -r|--recipient - encrypt for specific <username>

###### Decrypt file

* -o|--output - use as output file
* -d|--decrypt - decrypt data (default)

###### Search recipient

* --keyserver - set specific key server
* --search-keys - search for keys on a key server

###### List all of the packets in an encrypted file

___

##### Tool: system-other

###### Reboot system from init

###### Init system from single user mode

###### Show current working directory of a process

###### Show actual pathname of the executed command

##### Tool: curl

* -I - show response headers only
* -k - insecure connection when using ssl
* -s - silent mode (not display body)

* --location - follow redirects
* -X - set method
* -A - set user-agent

* --proxy [socks5://| - set proxy server

* -o - write output to file
* -C - resume the transfer

###### Find your external IP address (external services)

###### Repeat URL request

###### Check DNS and HTTP trace with headers for specific domains

___

##### Tool: httpie

* -p - print request and response headers
* H - request headers
* B - request body
* h - response headers
* b - response body

* -F, --follow - follow redirects
* -- no - skip SSL

* --proxy [http:] - set proxy server

##### Tool: ssh

###### Escape Sequence

###### Compare a remote file with a local file

###### SSH connection through host in the middle

###### Run command over SSH on remote host

###### Get public key from private key

###### Get all fingerprints

###### SSH authentication with user password

###### SSH authentication with publickey

###### Simple recording SSH session

###### Using Keychain for SSH logins

###### SSH login without processing any login scripts

###### SSH local port forwarding

Example 1:

Example 2:

* -n - redirects stdin from /dev/null
* -N - do not execute a remote command
* -T - disable pseudo-terminal allocation

###### SSH remote port forwarding

___

##### Tool: linux-dev

###### Testing remote connection to port

* <proto - set protocol (tcp/udp)
* <host> - set remote host
* <port> - set destination port

###### Read and write to TCP or UDP sockets with common bash tools

___

##### Tool: tcpdump

###### Filter incoming (on interface) traffic (specific <ip:port>)

* -n - don't convert addresses (-nn will not resol or ports)
* -e - print the link-le
* -i [iface|any] - set interface
* -Q|-D [in|out|inout] - choose send/recei (-D - for old tcpdump )
* host [ip|hostname] - set host, also [host not]
* [and|or] - set logic
* port [1-65535] - set port number, also [port not]

###### Filter incoming (on interface) traffic (specific <ip:port>) and write to a file

* -c [num] - capture only num number of packets
* -w [filename] - write packets to file, -r [filename] - reading from file

###### Capture all ICMP packets

###### Check 协议 used (TCP or UDP) for service

###### Display ASCII text (to parse the output using grep or other)

###### Grab e between two keywords

###### Grab user and pass e http

###### Extract HTTP User Agent from HTTP request header

###### Capture only HTTP GET and POST packets

or simply:

###### Rotate capture files

* -G <num> - pcap will be created every <num> seconds
* -C <size> - close the current pcap and open a new one if is larger than <size>

###### Top hosts by packets

###### Excludes any RFC 1918 private address

___

##### Tool: tcpick

###### Analyse packets in real-time

___

##### Tool: ngrep

* -d [iface|any] - set interface
* [domain] - set hostname
* port [1-65535] - set port number

* (host [ip|hostname]) - filter by ip or hostname
* (port [1-65535]) - filter by port number

* -q - quiet mode (only payloads)
* -t - added timestamps
* -O [filename] - sa to file, -I [filename] - reading from file

* HTTP - show http headers
* tcp|udp - set protocol
* [src|dst] host [ip|hostname] - set direction for specific node

* -l - stdout line buffered
* -i - case-insensiti

___

##### Tool: hping3

* - - mode
* -p|--destport - set destination port
* -s|--baseport - set source port
* <scan_type> - set scan type
* -F|--fin - set FIN flag, port open if no reply
* -S|--syn - set SYN flag
* -P|--push - set PUSH flag
* -A|--ack - set ACK flag (use when ping is blocked, RST response back if the port is open)
* -U|--urg - set URG flag
* -Y|--ymas - set Y unused flag (0x80 - nullscan), port open if no reply
* -M 0 -UPF - set TCP sequence number and scan type (URG+PUSH+FIN), port open if no reply

* -c [num] - packet count
* -1 - set ICMP mode
* -C|--icmptype [icmp-num] - set icmp type (default icmp-echo = 8)

* --flood - sent packets as fast as possible (don't show replies)
* --rand-source - random source address mode
* -d --data - data size
* -w|--win - winsize (default 64)

___

##### Tool: nmap

###### Ping scans the network

###### Show only open ports

###### Full TCP port scan using with service detection

###### Nmap scan and pass output to Nikto

###### Recon specific ip:service with Nmap NSE scripts stack

___

##### Tool: netcat

* -l - listen for an incoming connection
* -k - listening after client has disconnected
* >filename.out - sa data to file (optional)

* < filename.in - send data to remote host

* -v - output
* -z - scan for listening daemons

* -u - scan only udp ports

###### Transfer data file (archive)

###### Launch remote shell

###### Simple file server

###### Simple minimal HTTP Server

###### Simple HTTP Server

> Restarts web ser each request - remove while condition for only single connection.

* -p - port number

###### Simple HTTP Proxy (single connection)

###### Create a single-use TCP or UDP proxy

___

##### Tool: gnutls-cli

###### Testing connection to remote host (with SNI support)

###### Testing connection to remote host (without SNI support)

___

##### Tool: socat

###### Testing remote connection to port

* - - standard input (STDIO)
* TCP4:<params> - set tcp4 connection with specific params
* [hostname|ip] - set hostname/ip
* [1-65535] - set port number

###### Redirecting TCP-traffic to a UNIX domain socket under Linux

* TCP-LISTEN:<params> - set tcp listen with specific params
* [1-65535] - set port number
* bind=[hostname|ip] - set bind hostname/ip
* reuseaddr - allows other sockets to bind to an address
* fork - keeps the parent process attempting to produce more connections
* su=nobody - set user
* range=[ip-range] - ip range
* UNIX-CLIENT:<params> - communicates with the specified peer socket
* filename - define socket

___

##### Tool: p0f

###### Set iface in promiscuous mode and dump traffic to the log file

* -i - listen on the specified interface
* -p - set interface in promiscuous mode
* -d - fork into background
* -o - output file

___

##### Tool: netstat

###### Graph # of connections for each hosts

###### Monitor open connections for specific port including listen, count and sort it per IP

###### Grab banners from local IPv4 listening ports

___

##### Tool: rsync

###### Rsync remote data as root using sudo

___

##### Tool: host)

###### Resolves the domain name (using external dns 服务端)

###### Checks the domain administrator (SOA record)

___

##### Tool: dig)

###### Resolves the domain name (short output)

###### Lookup NS record for specific domain

###### Query only answer section

###### Query ALL DNS Records

###### DNS Reverse Look-up

___

##### Tool: certbot

###### Generate multidomain certificate

###### Generate wildcard certificate

###### Generate certificate with 4096 bit private key

___

##### Tool: network-other

###### Get all subnets for specific AS (Autonomous system)

###### Resol name from dns.google.com with curl and jq

##### Tool: git

###### Log alias for a decent view of your repo

___

##### Tool: python

###### Static HTTP web server

###### Static HTTP web server with SSL support

###### Encode base64

###### Decode base64

##### Tool: awk

###### Search for matching lines

###### Search non matching lines

###### Print matching lines with numbers

###### Print the last column

###### Find all the lines longer than 80 characters

###### Print only lines of less than 80 characters

###### Print double new lines a file

###### Print line numbers

###### Print line numbers for only non-blank lines

###### Print the line and the next two (i=5) lines after the line matching regexp

###### Print the lines starting at the line matching '服务端 {' until the line matching '}'

###### Print multiple columns with separators

###### Remo lines

###### Delete trailing white space (spaces, tabs)

###### Delete leading white space

###### Remo consecuti

###### Remo entries in a file without sorting

###### Exclude multiple columns

###### Substitute foo for bar on lines matching regexp

###### Add some characters at the beginning of matching lines

###### Get the last hour of Apache logs

___

##### Tool: sed

###### Print a specific line from a file

###### Remove a specific line from a file

###### Remove a range of lines from a file

###### Replace newline(s) with a space

:a create a label a

N append the next line to the pattern space

$! if not the last line, ba branch (go to) label a

s substitute, /\n/ regex for new line, / / by a space, /g global match (as many times as it can)

Alternatives:

###### Delete string +N next lines

___

##### Tool: grep

###### Search for a "pattern" inside all files in the current directory

###### Show only for multiple patterns

###### Except multiple patterns

###### Show data from file without comments

###### Show data from file without comments and new lines

###### Show strings with a dash/hyphen

###### Remo lines from a file and sa to new file

##### Tool: perl

###### Search and replace (in place)

###### Edit of *.conf files changing all foo to bar (and backup original)

###### Prints the first 20 lines from *.conf files

###### Search lines 10 to 20

###### Delete first 10 lines (and backup original)

###### Delete all but lines between foo and bar (and backup original)

###### Reduce multiple blank lines to a single line

###### Convert tabs to spaces (1t = 2sp)

###### Read input from a file and report number of lines and characters

#### Shell Tricks  [[TOC]](#anger-table-of-contents)

When you get a shell, it is generally not very clean, but after following these steps, you will have a fairly clean and comfortable shell to work with.

1) script /dev/null -c bash
2) Ctrl-Z (to send it to background)
3) stty raw -echo; fg (returns the shell to foreground)
4) reset (to reset terminal)
5) xterm (when asked for terminal type)
6) export TERM=xterm; export SHELL=bash

#### Shell functions  [[TOC]](#anger-table-of-contents)

##### Table of Contents

Domain resolve

Get ASN

###### Domain resolve

Example:

###### Get ASN

Example:

项目信息

开发语言：未知

Star 数：248019

技术要点

该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。

登录后才能参与讨论

下载链接

会员才能下载

登录后开通会员

同分类推荐

暂无同类资源

资源标题	the-book-of-secret-knowledge - A collection of inspiring lists, manuals, cheatshe
所属分类	黑客技术
发布作者	admin
发布时间	2026-10-05 22:28:00
下载权限	免费下载
附件数量	2 个下载链接
浏览次数	334
讨论数量	0
主题状态	正常讨论中

the-book-of-secret-knowledge - A collection of inspiring lists, manuals, cheatshe

项目说明

:notebook_with_decorati: &nbsp;What is it?

:restroom: &nbsp;For whom?

:information_source: &nbsp;Contributing

Code Contributors

Financial Contributors

:newspaper: &nbsp;RSS Feed & Updates

:ballot_box_with_check: &nbsp;ToDo

:anger: &nbsp;Table of Contents

:trident: &nbsp;The Book of Secret Knowledge (Chapters)

项目信息

技术要点

使用与学习建议

免责声明

怎么获取这个资源？

下载链接失效了怎么办？

可以转载或二次发布吗？

下载链接

同分类推荐

:notebook_with_decorati: What is it?

:restroom: For whom?

:information_source: Contributing

:newspaper: RSS Feed & Updates

:ballot_box_with_check: ToDo

:anger: Table of Contents

:trident: The Book of Secret Knowledge (Chapters)