Repository Index

Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.

• yubikey
• gpg
• gnupg
• ssh

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

• nodejs
• owasp-top-ten
• javascript
• docker

Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything that modify attributes. This all includes tools to work with anything in general that makes changes to a system for the purposes of hiding information.

• awesome-list
• awesome
• anti-forensic
• anti-forensics

The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups

• active-directory
• cheatsheet
• ctf
• cybersecurity

OpenID Connect, the authentication protocol and identity layer on top of OAuth 2.0 used in many SSO and adopted in many social logins (Apple, Facebook, Google, ...etc). Find this curated list of providers, services, libraries, and resources to adopt it and know more about existing specs.

• awesome-list
• oauth
• oauth2
• openid-connect

TranslatedA guide to avoiding scams in the human world: 373 scam breakdowns covering 16 categories, including fake-order task scams (刷单), pig-butchering scams (杀猪盘), AI face-swapping, and scams targeting the elderly; includes real case reports, everyday self-check lists, PDF/EPUB/Anki downloads, and a scam-avoidance mini-game with 12 rounds

• anti-fraud
• anti-scam
• chinese
• scam-awareness

Curated list of Cyber Security acronyms & abbreviations