\ud83d\udd38 pure-bash-bible<\/strong><\/a> – is a collection of pure bash alternatives to external processes. \ud83d\udd38 Vim Cheat Sheet<\/strong><\/a> – great multi language vim guide.<\/p>\n\n\n\n \ud83d\udd38 Awesome Python<\/strong><\/a> – a curated list of awesome Python frameworks, libraries, software and resources. \ud83d\udd38 F\u2019Awk Yeah!<\/strong><\/a> – advanced sed and awk usage (Parsing for Pentesters 3).<\/p>\n\n\n\n \ud83d\udd38 nixCraft<\/strong><\/a> – linux and unix tutorials for new and seasoned sysadmin. \ud83d\udd38 AD-Attack-Defense<\/strong><\/a> – attack and defend active directory using modern post exploitation activity.<\/p>\n\n\n\n \ud83d\udd38 The System Design Primer<\/strong><\/a> – learn how to design large-scale systems. \ud83d\udd38 CIS Benchmarks<\/strong><\/a> – secure configuration settings for over 100 technologies, available as a free PDF. \ud83d\udd38 Hacking Articles<\/strong><\/a> – LRaj Chandel’s Security & Hacking Blog. \ud83d\udd38 OWASP<\/strong><\/a> – worldwide not-for-profit charitable organization focused on improving the security of software. \ud83d\udd38 LZone Cheat Sheets<\/strong><\/a> – all cheat sheets. \ud83d\udd38 free-programming-books<\/strong><\/a> – list of free learning resources in many languages.<\/p>\n\n\n\n \ud83d\udd38 CTF Series : Vulnerable Machines<\/strong><\/a> – the steps below could be followed to find vulnerabilities and exploits.
\ud83d\udd38 pure-sh-bible<\/strong><\/a> – is a collection of pure POSIX sh alternatives to external processes.
\ud83d\udd38 bash-guide<\/strong><\/a> – is a guide to learn bash.
\ud83d\udd38 bash-handbook<\/strong><\/a> – for those who wanna learn Bash.
\ud83d\udd38 The Bash Hackers Wiki<\/strong><\/a> – hold documentation of any kind about GNU Bash.
\ud83d\udd38 Shell & Utilities<\/strong><\/a> – describes the commands offered to application programs by POSIX-conformant systems.
\ud83d\udd38 the-art-of-command-line<\/strong><\/a> – master the command line, in one page.
\ud83d\udd38 Shell Style Guide<\/strong><\/a> – a shell style guide for Google-originated open-source projects.<\/p>\n\n\n\n<\/a>\u25aa\ufe0f Text Editors<\/h5>\n\n\n\n
<\/a>\u25aa\ufe0f Python<\/h5>\n\n\n\n
\ud83d\udd38 python-cheatsheet<\/strong><\/a> – comprehensive Python cheatsheet.
\ud83d\udd38 pythoncheatsheet.org<\/strong><\/a> – basic reference for beginner and advanced developers.<\/p>\n\n\n\n<\/a>\u25aa\ufe0f Sed & Awk & Other<\/h5>\n\n\n\n
<\/a>\u25aa\ufe0f *nix & Network<\/h5>\n\n\n\n
\ud83d\udd38 TecMint<\/strong><\/a> – the ideal Linux blog for Sysadmins & Geeks.
\ud83d\udd38 Omnisecu<\/strong><\/a> – free Networking, System Administration and Security tutorials.
\ud83d\udd38 linux-cheat<\/strong><\/a> – Linux tutorials and cheatsheets. Minimal examples. Mostly user-land CLI utilities.
\ud83d\udd38 linuxupskillchallenge<\/strong><\/a> – learn the skills required to sysadmin.
\ud83d\udd38 Unix Toolbox<\/strong><\/a> – Unix\/Linux\/BSD commands and tasks which are useful for IT work or for advanced users.
\ud83d\udd38 Linux Kernel Teaching<\/strong><\/a> – is a collection of lectures and labs Linux kernel topics.
\ud83d\udd38 htop explained<\/strong><\/a> – explanation of everything you can see in htop\/top on Linux.
\ud83d\udd38 Linux Guide and Hints<\/strong><\/a> – tutorials on system administration in Fedora and CentOS.
\ud83d\udd38 strace-little-book<\/strong><\/a> – a little book which introduces strace.
\ud83d\udd38 linux-tracing-workshop<\/strong><\/a> – examples and hands-on labs for Linux tracing tools workshops.
\ud83d\udd38 http2-explained<\/strong><\/a> – a detailed document explaining and documenting HTTP\/2.
\ud83d\udd38 http3-explained<\/strong><\/a> – a document describing the HTTP\/3 and QUIC protocols.
\ud83d\udd38 HTTP\/2 in Action<\/strong><\/a> – an excellent introduction to the new HTTP\/2 standard.
\ud83d\udd38 Let’s code a TCP\/IP stack<\/strong><\/a> – great stuff to learn network and system programming at a deeper level.
\ud83d\udd38 Nginx Admin’s Handbook<\/strong><\/a> – how to improve NGINX performance, security and other important things.
\ud83d\udd38 nginxconfig.io<\/strong><\/a> – NGINX config generator on steroids.
\ud83d\udd38 openssh guideline<\/strong><\/a> – is to help operational teams with the configuration of OpenSSH server and client.
\ud83d\udd38 SSH Handshake Explained<\/strong><\/a> – is a relatively brief description of the SSH handshake.
\ud83d\udd38 ISC’s Knowledgebase<\/strong><\/a> – you’ll find some general information about BIND 9, ISC DHCP, and Kea DHCP.
\ud83d\udd38 PacketLife.net<\/strong><\/a> – a place to record notes while studying for Cisco’s CCNP certification.<\/p>\n\n\n\n<\/a>\u25aa\ufe0f Microsoft<\/h5>\n\n\n\n
<\/a>\u25aa\ufe0f Large-scale systems<\/h5>\n\n\n\n
\ud83d\udd38 Awesome Scalability<\/strong><\/a> – best practices in building High Scalability, High Availability, High Stability, and more.
\ud83d\udd38 Web Architecture 101<\/strong><\/a> – the basic architecture concepts.<\/p>\n\n\n\n<\/a>\u25aa\ufe0f System hardening<\/h5>\n\n\n\n
\ud83d\udd38 Security Harden CentOS 7<\/strong><\/a> – this walks you through the steps required to security harden CentOS.
\ud83d\udd38 CentOS 7 Server Hardening Guide<\/strong><\/a> – great guide for hardening CentOS; familiar with OpenSCAP.
\ud83d\udd38 awesome-security-hardening<\/strong><\/a> – is a collection of security hardening guides, tools and other resources.
\ud83d\udd38 The Practical Linux Hardening Guide<\/strong><\/a> – provides a high-level overview of hardening GNU\/Linux systems.
\ud83d\udd38 Linux Hardening Guide<\/strong><\/a> – how to harden Linux as much as possible for security and privacy.<\/p>\n\n\n\n<\/a>\u25aa\ufe0f Security & Privacy<\/h5>\n\n\n\n
\ud83d\udd38 AWS security tools<\/strong><\/a> – make your AWS cloud environment more secure.
\ud83d\udd38 Rawsec’s CyberSecurity Inventory<\/strong><\/a> – an inventory of tools and resources about CyberSecurity.
\ud83d\udd38 The Illustrated TLS Connection<\/strong><\/a> – every byte of a TLS connection explained and reproduced.
\ud83d\udd38 SSL Research<\/strong><\/a> – SSL and TLS Deployment Best Practices by SSL Labs.
\ud83d\udd38 SELinux Game<\/strong><\/a> – learn SELinux by doing. Solve Puzzles, show skillz.
\ud83d\udd38 Certificates and PKI<\/strong><\/a> – everything you should know about certificates and PKI but are too afraid to ask.
\ud83d\udd38 The Art of Subdomain Enumeration<\/strong><\/a> – a reference for subdomain enumeration techniques.
\ud83d\udd38 Quitting Google<\/strong><\/a> – the comprehensive guide to quitting Google.<\/p>\n\n\n\n<\/a>\u25aa\ufe0f Web Apps<\/h5>\n\n\n\n
\ud83d\udd38 OWASP ASVS 3.0.1<\/strong><\/a> – OWASP Application Security Verification Standard Project.
\ud83d\udd38 OWASP ASVS 3.0.1 Web App<\/strong><\/a> – simple web app that helps developers understand the ASVS requirements.
\ud83d\udd38 OWASP ASVS 4.0<\/strong><\/a> – is a list of application security requirements or tests.
\ud83d\udd38 OWASP Testing Guide v4<\/strong><\/a> – includes a “best practice” penetration testing framework.
\ud83d\udd38 OWASP Dev Guide<\/strong><\/a> – this is the development version of the OWASP Developer Guide.
\ud83d\udd38 OWASP WSTG<\/strong><\/a> – is a comprehensive open source guide to testing the security of web apps.
\ud83d\udd38 OWASP API Security Project<\/strong><\/a> – focuses specifically on the top ten vulnerabilities in API security.
\ud83d\udd38 Mozilla Web Security<\/strong><\/a> – help operational teams with creating secure web applications.
\ud83d\udd38 security-bulletins<\/strong><\/a> – security bulletins that relate to Netflix Open Source.
\ud83d\udd38 API-Security-Checklist<\/strong><\/a> – security countermeasures when designing, testing, and releasing your API.
\ud83d\udd38 Enable CORS<\/strong><\/a> – enable cross-origin resource sharing.
\ud83d\udd38 Application Security Wiki<\/strong><\/a> – is an initiative to provide all application security related resources at one place.
\ud83d\udd38 Weird Proxies<\/strong><\/a> – reverse proxy related attacks; it is a result of analysis of various proxies.
\ud83d\udd38 Webshells<\/strong><\/a> – great series about malicious payloads.
\ud83d\udd38 Practical Web Cache Poisoning<\/strong><\/a> – show you how to compromise websites by using esoteric web features.
\ud83d\udd38 Hidden directories and files<\/strong><\/a> – as a source of sensitive information about web application.
\ud83d\udd38 Explosive blog<\/strong><\/a> – great blog about cybersec and pentests.
\ud83d\udd38 Security Cookies<\/strong><\/a> – this paper will take a close look at cookie security.
\ud83d\udd38 APISecurityBestPractices<\/strong><\/a> – help you keep secrets (API keys, db credentials, certificates) out of source code.<\/p>\n\n\n\n<\/a>\u25aa\ufe0f All-in-one<\/h5>\n\n\n\n
\ud83d\udd38 Dan\u2019s Cheat Sheets\u2019s<\/strong><\/a> – massive cheat sheets documentation.
\ud83d\udd38 Rico’s cheatsheets<\/strong><\/a> – this is a modest collection of cheatsheets.
\ud83d\udd38 DevDocs API<\/strong><\/a> – combines multiple API documentations in a fast, organized, and searchable interface.
\ud83d\udd38 cheat.sh<\/strong><\/a> – the only cheat sheet you need.
\ud83d\udd38 gnulinux.guru<\/strong><\/a> – collection of cheat sheets about bash, vim and networking.<\/p>\n\n\n\n<\/a>\u25aa\ufe0f Ebooks<\/h5>\n\n\n\n
<\/a>\u25aa\ufe0f Other<\/h5>\n\n\n\n
\ud83d\udd38 50M_CTF_Writeup<\/strong><\/a> – $50 million CTF from Hackerone – writeup.
\ud83d\udd38 ctf-tasks<\/strong><\/a> – an archive of low-level CTF challenges developed over the years.
\ud83d\udd38 How to start RE\/malware analysis?<\/strong><\/a> – collection of some hints and useful links for the beginners.
\ud83d\udd38 The C10K problem<\/strong><\/a> – it’s time for web servers to handle ten thousand clients simultaneously, don’t you think?
\ud83d\udd38 How 1500 bytes became the MTU of the internet<\/strong><\/a> – great story about the Maximum Transmission Unit.
\ud83d\udd38 poor man’s profiler<\/strong><\/a> – like dtrace’s don’t really provide methods to see what programs are blocking on.
\ud83d\udd38 HTTPS on Stack Overflow<\/strong><\/a> – this is the story of a long journey regarding the implementation of SSL.
\ud83d\udd38 Julia’s Drawings<\/strong><\/a> – some drawings about programming and unix world, zines about systems & debugging tools.
\ud83d\udd38 Hash collisions<\/strong><\/a> – this great repository is focused on hash collisions exploitation.
\ud83d\udd38 sha256-animation<\/strong><\/a> – animation of the SHA-256 hash function in your terminal.
\ud83d\udd38 BGP Meets Cat<\/strong><\/a> – after 3072 hours of manipulating BGP, Job Snijders has succeeded in drawing a Nyancat.
\ud83d\udd38 bgp-battleships<\/strong><\/a> – playing battleships over BGP.
\ud83d\udd38 What happens when…<\/strong><\/a> – you type google.com into your browser and press enter?
\ud83d\udd38 how-web-works<\/strong><\/a> – based on the ‘What happens when…’ repository.
\ud83d\udd38 HTTPS in the real world<\/strong><\/a> – great tutorial explain how HTTPS works in the real world.
\ud83d\udd38 Gitlab and NFS bug<\/strong><\/a> – how we spent two weeks hunting an NFS bug in the Linux kernel.
\ud83d\udd38 Gitlab melts down<\/strong><\/a> – postmortem on the database outage of January 31 2017 with the lessons we learned.
\ud83d\udd38 How To Become A Hacker<\/strong><\/a> – if you want to be a hacker, keep reading.
\ud83d\udd38 Operation Costs in CPU<\/strong><\/a> – should help to estimate costs of certain operations in CPU clocks.
\ud83d\udd38 Let’s Build a Simple Database<\/strong><\/a> – writing a sqlite clone from scratch in C.
\ud83d\udd38 simple-computer<\/strong><\/a> – great resource to understand how computers work under the hood.
\ud83d\udd38 The story of “Have I been pwned?”<\/strong><\/a> – working with 154 million records on Azure Table Storage.
\ud83d\udd38 TOP500 Supercomputers<\/strong><\/a> – shows the 500 most powerful commercially available computer systems known to us.
\ud83d\udd38 How to build a 8 GPU password cracker<\/strong><\/a> – any “black magic” or hours of frustration like desktop components do.
\ud83d\udd38 CERN Data Centre<\/strong><\/a> – 3D visualizations of the CERN computing environments (and more).
\ud83d\udd38 How fucked is my database<\/strong><\/a> – evaluate how fucked your database is with this handy website.
\ud83d\udd38 Linux Troubleshooting 101 , 2016 Edition<\/strong><\/a> – everything is a DNS Problem…
\ud83d\udd38