Open-source alternatives to Hacktricks

GTFOBins is a curated knowledge base documenting security-related techniques for Unix-based system binaries. It serves as a reference for offensive security research, detailing how standard, pre-installed system utilities can be repurposed to facilitate privilege escalation, restricted environment escapes, and post-exploitation workflows. The project distinguishes itself by cataloging insecure execution paths and misconfigured permissions inherent in common system tools. By identifying legitimate binary functions that can be leveraged to bypass security controls, the repository provides a str

This project is a whistleblower evidence archive and static website designed to document misconduct in the development of large language models. It serves as a digital repository for storing internal documents, firsthand testimonies, and research records to expose technical fabrication, plagiarism, and corporate fraud. The archive focuses on the preservation of digital evidence and the tracking of corporate accountability. It provides detailed documentation of development histories, including architectural changes and training processes, while maintaining personnel lists to verify the identit

This project serves as a comprehensive reference tool for prompt engineering within generative image models. It provides a structured guide for exploring artistic styles, technical parameters, and keyword combinations to assist in achieving specific aesthetic outcomes and consistent visual themes. The resource distinguishes itself by enabling direct comparisons between different model versions, allowing users to observe how specific keywords and settings influence output quality over time. By organizing visual examples and technical data into a hierarchical taxonomy, it facilitates the iterat

This repository is a curated study guide and knowledge base designed to assist developers in preparing for software engineering job interviews within the Android ecosystem. It organizes essential programming topics, language-specific features, and mobile architecture patterns into a structured format for professional review and skill assessment. The collection covers a broad range of technical domains, including system design principles, performance optimization, and core development concepts. By categorizing these topics, the resource provides a systematic way for users to practice and impro

This project is a comprehensive, community-curated directory of cybersecurity resources, tools, and educational materials. It functions as a centralized index for researchers and students to discover frameworks and utilities across the entire security lifecycle, ranging from initial vulnerability assessment to post-exploitation analysis. The repository distinguishes itself through a hierarchical taxonomy that organizes diverse security disciplines into a searchable, version-controlled knowledge base. Rather than hosting software directly, it utilizes a decentralized aggregation model that lin

This project is a web application security guide and developer training resource. It serves as a secure coding framework and vulnerability remediation manual, providing software engineers with the tools to identify, prioritize, and fix common security holes across different application layers. The resource utilizes a structured verification framework and security audit checklists to systematically find vulnerabilities. It features a technical reference that maps specific security flaws to step-by-step instructions for remediation, supported by vulnerability statistics to help determine which

Micro8 is a security auditing knowledge base and penetration testing resource library. It serves as a curated collection of guides and documentation focused on vulnerability assessment. The project provides educational content and study guides for manual source code review, domain escalation, and internal network auditing. It includes a toolkit of reference materials for analyzing network traffic logs and identifying brute-force patterns. The library covers technical domains including web penetration testing and privilege escalation. It organizes these materials through PDF-based knowledge r

This project is a comprehensive web application penetration testing guide and vulnerability research framework. It provides a structured methodology for identifying and exploiting security flaws through a phased approach involving reconnaissance, analysis, and exploitation. The resource is distinguished by its use of a curated methodology framework that links theoretical vulnerability patterns to real-world bug bounty reports and historical exploit examples. It includes a payload-based testing library and a reference system that maps specific vulnerability categories to recommended third-part

The Mobile Application Security Testing Guide is a comprehensive framework and technical resource designed for the assessment of mobile software security. It provides a structured collection of requirements and methodologies to identify vulnerabilities and security flaws in mobile applications prior to their deployment. The project distinguishes itself by integrating reverse engineering techniques with standardized testing procedures to evaluate application logic and binary structures. It supports both Android and iOS platforms, utilizing threat-model-driven methodologies to ensure that secur

This project is a public exploit code archive and vulnerability database. It serves as a collection of documented software exploits and vulnerability data, providing a reference library of exploit scripts and payloads used to validate security flaws in target environments. The archive supports security threat intelligence, vulnerability research, and penetration testing workflows. It functions as a historical record of software vulnerabilities and the proof-of-concept code used to trigger them. The codebase is organized through directory-based categorization and flat-file data storage, utili

Mindmap is a cybersecurity knowledge base and reference library that organizes security tools, frameworks, and methodologies into a visual knowledge map. It functions as a curated directory of cheat sheets and command guides for offensive and defensive security operations, presented as a hierarchical interface with collapsible nodes. The project converts structured markdown files into navigable visual trees to facilitate the study of penetration testing workflows and DevOps learning roadmaps. It also serves as a security compliance framework, providing structured mappings of NIST and ISO 2700

This project is a comprehensive, community-sourced knowledge base designed for security professionals and researchers. It functions as a centralized repository of offensive security techniques, providing a structured collection of exploit payloads, attack vectors, and methodologies for conducting vulnerability assessments and penetration testing. The repository distinguishes itself through a cross-platform payload taxonomy that categorizes exploitation methods by vulnerability type and target environment, enabling rapid lookup during security assessments. It maintains high standards of data i

This project is a comprehensive collection of web development reference guides and technical cheat sheets. It provides a curated set of markdown-based documentation designed to help developers quickly locate syntax patterns and API examples for common web technologies and programming languages. The repository serves as a specialized reference library covering several distinct technical domains. It includes extensive guides for CSS, focusing on selectors, Flexbox, Grid, and responsive layout properties, as well as a DevOps command reference for Docker, Kubernetes, AWS, Ansible, and general she

backend-cheats is a comprehensive backend engineering reference guide and a collection of technical cheatsheets. It serves as a knowledge base for server-side development, networking, and computer science fundamentals, delivered as a markdown-based static site. The project provides detailed handbooks for API design, specifically covering REST and GraphQL interfaces, and software architecture patterns such as Monolithic, Microservices, and MVC. It includes a database architecture overview comparing relational and NoSQL paradigms, as well as a web security reference for identifying vulnerabilit

Slate is a static API documentation generator and reference website builder. It transforms API specifications and Markdown files into a professional, hosted static site used for developer portals and REST API referencing. The tool creates a single-page API reference guide that integrates code samples and request-response examples. It utilizes a two-pane layout architecture to separate navigation from detailed endpoint descriptions. The system includes a Markdown-based content pipeline and static site generation to produce flat HTML files. It provides client-side search indexing and a respons

Zola is a static site generator that compiles Markdown and templates into a standalone website. It is distributed as a single binary, removing the need for external runtimes or package managers to build the final site. The project includes a built-in Sass compiler to transform styles into compressed CSS and a dedicated Markdown rendering engine that supports task lists and footnotes. It also features a client-side search indexer, enabling full-text site search without a backend server, and a multilingual content manager for organizing translated content. Additional capabilities cover asset o

This is the official website and documentation hub for the Ethereum blockchain ecosystem. It serves as a comprehensive educational resource and community portal, providing plain-language guides on blockchain fundamentals, wallet usage, and concepts like DeFi and NFTs, alongside technical documentation for developers building decentralized applications. The site offers detailed walkthroughs for creating dapps that interact with the Ethereum blockchain, covering accounts, transactions, and development frameworks. It also provides extensive guidance for node operators, including step-by-step ins

This project is a centralized knowledge base and documentation platform designed to organize programming syntax, configuration options, and technical reference guides. It functions as a static site generator that converts markdown files into interlinked HTML pages, providing a structured environment for managing and retrieving technical information. The platform distinguishes itself by utilizing client-side search indexing and a component-driven interface, which allows for instant information retrieval without the need for a backend server. By relying on static asset hosting, the system ensur

This repository is a technical documentation site and a collection of guides and references for implementing networking, security, and cloud infrastructure services. It functions as a static-site generated portal and a headless content platform, separating source files from the presentation layer to enable flexible rendering. The project utilizes markdown-based documentation stored in a version-controlled Git repository. It provides specialized technical content including an AI platform documentation for building agents and managing inference, a cloud infrastructure guide for DNS and CDN conf

Fumadocs is a documentation framework designed for building content-heavy technical websites using MDX. It functions as a static site generator that transforms structured text files into optimized, interactive web pages, providing a comprehensive toolset for managing technical content, API references, and versioned guides. The platform distinguishes itself through a deep integration of interactive components and AI-ready features. It includes a library of pre-built interface elements that allow developers to embed live API playgrounds, request snippets, and schema-based documentation directly

This project contains the official technical manuals and guides for the Godot game engine. It serves as a multi-language technical manual delivered as searchable HTML and ePub documentation for both online and offline use. The repository implements an open source documentation workflow for managing collaborative technical content. It utilizes a localization-aware build pipeline to translate and maintain manuals across multiple international locales. The project employs a custom static site generation process that transforms markdown-based source files into structured HTML and ePub formats. T

This project serves as a centralized platform for the delivery of a structured machine learning curriculum. It provides a framework for distributing academic materials, including lecture notes, lab exercises, and code templates, while facilitating instruction on methodologies ranging from fundamental techniques to advanced topics like neural networks and unsupervised learning. The platform distinguishes itself by integrating collaborative research management directly into the educational workflow. It organizes students into teams to apply machine learning techniques to real-world scientific d

This project is a technical knowledge base and learning resource providing concise, step-by-step guides and summaries designed for rapid technical onboarding. It functions as a repository of curated notes covering programming languages, development tools, and general technical principles. The collection includes specific instructional content such as shell scripting guides for system automation and text processing, as well as Objective-C development tutorials covering application logic, class interfaces, and protocol implementation. The resource also covers a broad range of non-programming d

VitePress is a static site generator designed for building documentation-focused websites. It functions as a framework that transforms markdown source files into pre-rendered HTML, utilizing file-based routing to map document paths directly to site URLs. By leveraging the Vue ecosystem, it enables the creation of content-heavy sites that combine static delivery with dynamic interactivity. The framework distinguishes itself by allowing developers to embed interactive components directly into markdown files, which are then transpiled into executable code modules. It optimizes the user experienc

SurviveSJTUManual is a university student guide and documentation website designed to provide academic planning and resource navigation for higher education. It serves as a student wellness resource and a comprehensive guide for meeting degree requirements and course selection. The project functions as a higher education career coach and international education planner, offering strategic advice on researching global degree programs, applying for international studies, and finding professional mentors. It also provides guidance on managing academic pressure and avoiding toxic environments to

This project is a software engineering playbook providing a collection of standardized guidelines and processes for managing the full software development lifecycle and team operations. It serves as a high-level framework for organizing agile project management, API design, containerized development standards, and markdown documentation workflows. The framework establishes a system for language-agnostic API design to automate client library generation and documentation. It also defines standards for providing uniform contributor environments and toolchains through virtualized containers. The

This project is a centralized repository and research database dedicated to the collection of technical documentation and source code concerning offensive security, malware development, and system exploitation. It serves as an archive for security professionals and researchers to study threat actor methodologies and historical security research. The repository functions as a static, version-controlled archive that organizes research papers and code samples into a flat-file directory structure. This approach ensures long-term availability and offline access to the materials, while a decentrali