Open-source alternatives to Hacker101

This project is a programming learning roadmap and interactive coding exercise platform. It functions as a markdown-based content site that uses a static site generator to compile instructional guides and technical challenges into a structured interface. The platform provides a client-side progress tracker that utilizes local browser storage to monitor the completion of challenges without requiring a backend database. It organizes educational content through a sequence of coding exercises and instructional videos designed to guide developers through specific technical domains. The system cov

This project serves as a centralized, community-driven repository of technical knowledge and administrative resources. It provides a structured taxonomy that aggregates disparate information into a searchable framework, supporting continuous learning and rapid problem-solving for system administrators and cybersecurity practitioners. By mapping resources across offensive security, infrastructure management, and software development, it offers a unified path for skill acquisition and professional reference. The project is defined by a command-line-first design philosophy, prioritizing terminal

This project is a community-curated directory of open-source software designed for deployment in private server environments and home labs. It serves as a comprehensive resource for discovering independent, self-hosted alternatives to mainstream cloud services, enabling users to maintain full data ownership and control over their digital infrastructure. The directory is structured through a hierarchical taxonomy that organizes a vast collection of applications into logical categories, ranging from media management and data analytics to private communication and team productivity tools. It dis

This project is a structured knowledge base and educational resource designed to organize fundamental network security principles and academic concepts. It functions as a collection of visual mind maps and study notes, providing a hierarchical framework for mastering complex information security topics and preparing for professional certifications. The repository utilizes a markdown-based authoring system, allowing for the management of technical information through plain text files. By leveraging a git-based version control system, the project enables collaborative updates and systematic tra

This project is an educational resource for functional programming education, focused on teaching core concepts and terminology through simple definitions and practical code examples. It provides a way to study fundamental vocabulary and illustrative examples to assist with the transition from imperative to functional programming. The resource serves as a reference for building a professional software engineering vocabulary, enabling more effective communication of technical terms used within the functional paradigm. The site is implemented using static site generation, utilizing markdown co

This repository serves as a comprehensive educational guide and curriculum for individuals beginning their journey in web security and bug bounty hunting. It functions as a centralized hub that aggregates foundational knowledge, technical guides, and practical resources to assist newcomers in mastering the core principles of vulnerability research and ethical hacking. The project distinguishes itself through a community-driven curation model, where educational materials such as books, blogs, and labs are organized into structured learning paths. By leveraging a version-controlled, markdown-ba

backend-cheats is a comprehensive backend engineering reference guide and a collection of technical cheatsheets. It serves as a knowledge base for server-side development, networking, and computer science fundamentals, delivered as a markdown-based static site. The project provides detailed handbooks for API design, specifically covering REST and GraphQL interfaces, and software architecture patterns such as Monolithic, Microservices, and MVC. It includes a database architecture overview comparing relational and NoSQL paradigms, as well as a web security reference for identifying vulnerabilit

Eleventy is a JavaScript-based static site generator designed to transform templates, data files, and markdown into optimized HTML. It functions as a versatile template rendering engine and content management framework, allowing developers to aggregate data from diverse sources—including local files, databases, and external APIs—to populate structured web content. The project is distinguished by its template-engine-agnostic pipeline, which decouples the build process from specific rendering languages. This allows users to integrate multiple template formats, such as Liquid, Nunjucks, Handleba

This project is a static site generator and documentation publishing tool designed to transform raw markdown files into structured, professional web content. It functions as a technical writing framework that standardizes text-based documentation into pre-rendered HTML pages suitable for public-facing knowledge bases and project guides. The system utilizes file-system-based routing to map directory structures directly to URL paths, ensuring that documentation organization is reflected in the final website navigation. It incorporates component-based layout injection to apply consistent styling

MkDocs is a static site generator designed specifically for creating project documentation. It functions as a command-line utility that transforms structured Markdown files into professional, searchable websites. By utilizing a centralized configuration file, it manages site metadata, navigation hierarchies, and build settings to ensure consistent output across documentation projects. The platform distinguishes itself through a highly extensible architecture that separates content from presentation. Users can apply visual themes to control the site's appearance, while a plugin-based build sys

Lektor is a Python-based static site generator and flat-file content management system. It transforms raw content and data models into static HTML pages, storing all website data in a hierarchical file system rather than a relational database. The system operates as a model-driven CMS, utilizing blueprints and schemas to control data capture and validation. It provides a browser-based administrative interface that allows users to visually edit and organize site content without modifying source code directly. The platform manages the full site lifecycle, covering static site generation, multi

This project is a technical interview study guide and a markdown-driven static site designed to help developers prepare for coding screenings. It serves as a curated collection of common technical questions and expert answers, functioning as a comprehensive educational resource. The platform provides a structured curriculum and reference materials across several key domains. This includes a JavaScript language reference covering programming fundamentals, a frontend engineering curriculum focused on UI patterns and responsive design, and a web security knowledge base detailing attack vectors a

Fumadocs is a documentation framework designed for building content-heavy technical websites using MDX. It functions as a static site generator that transforms structured text files into optimized, interactive web pages, providing a comprehensive toolset for managing technical content, API references, and versioned guides. The platform distinguishes itself through a deep integration of interactive components and AI-ready features. It includes a library of pre-built interface elements that allow developers to embed live API playgrounds, request snippets, and schema-based documentation directly

CrowdSec is a collaborative, distributed security engine designed for threat detection and infrastructure protection. It functions as an intrusion detection system that parses logs and network traffic to identify malicious patterns, utilizing a bucket-based threshold detection model to aggregate events and trigger alerts. The platform is built on a modular architecture that includes a centralized local API server for managing security signals and a relational database for persistent storage of remediation decisions. What distinguishes the project is its decoupled enforcement model, which offl

English-note is a structured English grammar course and learning resource designed to teach sentence structure and parts of speech. It serves as a language learning guide for students to understand the fundamental rules of the English language. The project is implemented as a markdown-based educational site that utilizes static site generation to convert pre-defined text files into optimized HTML pages. It features a responsive layout that adjusts to different screen sizes and devices. The resource supports self-paced language study and English language acquisition through a collection of le

Tsunami Security Scanner is a network vulnerability scanner and security auditor designed to identify high-severity flaws across network assets. It functions as an asynchronous security probe engine that utilizes automated probes and specialized detection logic to find critical weaknesses and prioritize remediation efforts. The project is distinguished by a plugin-based scanning engine, which uses a modular architecture of interchangeable detection plugins to identify vulnerabilities. This extensibility allows for the development and integration of custom security plugins to expand the variet

Automatically audit your Mac for basic security hygiene.

Security auditing tool for AWS environments

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

Brakeman is a static analysis security tool and scanner specifically designed for Ruby on Rails source code. It identifies common security vulnerabilities, such as injection and cross-site scripting, by analyzing the application codebase without executing the application. The tool functions as a security auditor that detects mass assignment risks and template vulnerabilities. It evaluates the final output of rendered views and identifies unrestricted assignment patterns that could allow unauthorized modification of model attributes. The system provides vulnerability management through the us

In this workshop, you will learn techniques to secure a serverless application built with AWS Lambda, Amazon API Gateway and RDS Aurora. We will cover AWS services and features you can leverage to improve the security of a serverless applications in 5 domains:

A curated list of annual cyber security reports

Amass is an attack surface management tool designed to identify, map, and inventory an organization's internet-facing digital assets. It functions as a security asset discovery engine that systematically expands an organization's known infrastructure footprint through recursive domain name resolution and the collection of intelligence from diverse public data sources. The platform distinguishes itself by utilizing a graph-based modeling approach to organize discovered resources. By maintaining a persistent graph database, it tracks the relationships between infrastructure components and norma

The OWASP Cheat Sheet Series is a comprehensive, community-driven repository of concise security best practices and defensive coding patterns. It serves as a centralized knowledge base for developers and security professionals, providing actionable guidance to secure applications across the entire software development lifecycle. The project covers a vast array of security domains, ranging from fundamental web application hardening and authentication protocols to specialized controls for modern infrastructure and artificial intelligence systems. What distinguishes this project is its decentral

Ghidra is a software reverse engineering suite designed to analyze compiled binaries and reconstruct program logic without access to original source code. It provides an interactive environment for disassembly and decompilation, utilizing a platform-independent intermediate representation to maintain consistency across diverse hardware architectures. The framework supports automated binary analysis through programmatic routines, enabling the investigation of complex code patterns and security indicators. The platform distinguishes itself through a modular architecture that allows for extensiv

:link: Link-Layer MAC spoofing GUI for macOS

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server