Set up your own OpenVPN server on Debian, Ubuntu, Fedora, CentOS or Arch Linux.

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

Supply-chain Levels for Software Artifacts

How GitHub Actions workflows can be hacked

Sample backend application to demonstrate a relying party that supports passkeys. This example includes examples of the java-webauthn-server library, helper classes, code examples, best practices, …