A list of useful payloads and bypass for Web Application Security and Pentest/CTF

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

The uncompromising Python code formatter

Python Development Workflow for Humans.

🗃 Open source self-hosted web archiving. Takes URLs/browser history/bookmarks/Pocket/Pinboard/etc., saves HTML, JS, PDFs, media, and more...

Run macOS on QEMU/KVM. With OpenCore + Monterey + Ventura + Sonoma support now! Only commercial (paid) support is available now to avoid spammy issues. No Mac system is required.

The Inter font family

🕵️‍♂️ Offensive Google framework.

Count the number of people around you 👨‍👨‍👦 by monitoring wifi signals 📡

A free, online learning platform to make quality education accessible for all.

Hash collisions and exploitations

OSINT tool for finding profiles by username

The Etebase server (so you can run your own)

Forget the past. Social Amnesia makes sure your social media accounts only show your posts from recent history, not from "that phase" 5 years ago.

Bake — the strangely familiar workflow utility.

Exposing problems in json parsers of several programming languages.

nFreezer is an encrypted-at-rest backup tool.

Changelog management tool

Continuous distribution of funding to your project contributors and dependencies. Integrated into GitHub Actions