Papers from the computer science community to read and discuss.

Run macOS VM in a Docker! Run near native OSX-KVM in Docker! X11 Forwarding! CI/CD for OS X Security Research! Docker mac Containers.

A pure Unix shell script implementing ACME client protocol

💻📖 Laws, Theories, Principles and Patterns that developers will find useful. #hackerlaws

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

How to improve NGINX performance, security, and other important things.

Prevents you from committing secrets and credentials into git repositories

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

Wipe and reinstall a running Linux system via SSH, without rebooting. You know you want to.

An informative and fancy bash prompt for Git users

A standard style for README files

Bash Infinity is a modern standard library / framework / boilerplate for Bash

A short tutorial about building Linux based operating systems.

Command-line tools for working with Architecture Decision Records

🔥 Save Your Code in an Emergency

A temporary email right from your terminal written in POSIX sh

ipsets dynamically updated with firehol's update-ipsets.sh script

A Steam Big Picture based couch gaming OS

Supply-chain Levels for Software Artifacts

A kindle <=5.16.2.1.1 jailbreak

An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects

MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way …

A Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use.

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)

janky twitter replacement.

An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.

Web framework in Bash

My subdomain enumeration script. It's unique in the way it is built upon.

🔒Secure Bastion implemented as Docker Container running Alpine Linux with Google Authenticator & DUO MFA support