Set up your own OpenVPN server on Debian, Ubuntu, Fedora, CentOS, Arch Linux and more

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

Supply-chain Levels for Software Artifacts

Advisory database for Python packages published on pypi.org

How GitHub Actions workflows can be hacked

Sample backend application to demonstrate a relying party that supports passkeys. This example includes examples of the java-webauthn-server library, helper classes, code examples, best practices, …