A list of useful payloads and bypass for Web Application Security and Pentest/CTF

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

Deduplicating archiver with compression and authenticated encryption.

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWA…

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

Install and Run Python Applications in Isolated Environments

CTFs as you need them

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Reverse engineering and pentesting for Android applications

SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

Adaptive Lighting custom component for Home Assistant

A 👶 buddy to help caregivers track sleep, feedings, diaper changes, tummy time and more to learn about and predict baby's needs without (as much) guess work.

Syncs YouTube channels and playlists to a locally hosted media server

NixOps is a tool for deploying to NixOS machines in a network or cloud.

Implement your own USB device in Python, supported by a hardware peripheral such as Cynthion or GreatFET

Output management utility for sway and Hyprland.

GTK3-based panel for sway and Hyprland Wayland compositors

ZFS autobackup is used to periodicly backup ZFS filesystems to other locations. Easy to use and very reliable.

Telegram bot for adding series/movies to Sonarr/Radarr or for changing the download speed of Transmission/Sabnzbd

ctfcli is a tool to manage Capture The Flag events and challenges

OpenVAS Reporting: Convert OpenVAS XML report files to reports

A Waybar module for displaying cryptocurrency market information