bookmarks

This commit is contained in:
Julien Palard 2021-12-02 13:16:09 +01:00
parent ee5f4a72cb
commit 0783d6a49f
1 changed files with 46 additions and 68 deletions

View File

@ -48,7 +48,6 @@ Date: 2021-05-05 15:21:00
### GraphQL
- 🔧 [GraphQL IDE for better development workflows (GraphQL Subscriptions, interactive docs & collaboration)](https://github.com/graphql/graphql-playground)
- 🔧 [django-restql: Turn your API made with Django REST Framework(DRF) into a GraphQL like API.](https://github.com/yezyilomo/django-restql)
- 🔧 [GraphQL Doctor: Prevent Breaking Changes in a GraphQL API with GitHub Checks](https://github.com/cap-collectif/graphql-doctor)
- 📑 [GitHub GraphQL API](https://docs.github.com/en/graphql)
- 🔧 [Graphene: GraphQL in Python Made Easy](https://graphene-python.org/)
@ -69,74 +68,44 @@ Date: 2021-05-05 15:21:00
# Cybersecurity
- - 🔧 [PDF Tools](https://blog.didierstevens.com/programs/pdf-tools/)
- [Yes We Hack — bug bounty](https://www.yeswehack.com)
- 🎮 [IRC Puzzles](https://blog.ircpuzzles.org/)
- 🎮 [learn about common mistakes and gotchas when using Amazon Web Services](http://flaws.cloud/)
- 📑 [ANSSI](https://www.ssi.gouv.fr/)
- 📑 [Auditing Algorithms](https://auditingalgorithms.science/)
- 📑 [BeEF - The Browser Exploitation Framework Project](https://beefproject.com/)
- 📑 [Five Minute Guide to Software Security](https://oneupsecurity.com/research/five-minute-guide-to-software-security)
- 📑 [GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems.](https://gtfobins.github.io/)
- 📑 [Hacking Tools Cheat Sheet](https://i.redd.it/fviaw8s43q851.jpg)
- 📑 [List of the most common french passwords](https://github.com/tarraschk/richelieu)
- 📑 [Livre Blanc sur la Défense et la Sécurité Nationale](http://www.defense.gouv.fr/content/download/206186/2286591/Livre-blanc-sur-la-Defense-et-la-Securite-nationale%202013.pdf)
- 📑 [Référentiel général de sécurité](https://www.ssi.gouv.fr/entreprise/reglementation/confiance-numerique/le-referentiel-general-de-securite-rgs/)
- 📑 [SSRF Cheat Sheet & Bypass Techniques](https://highon.coffee/blog/ssrf-cheat-sheet/)
- 📑 [The history of Lets'Encrypt](https://blog.acolyer.org/2020/02/12/lets-encrypt-an-automated-certificate-authority-to-encrypt-the-entire-web/)
- 📑 [Zero trust security model](https://en.wikipedia.org/wiki/Zero_Trust_Networks)
- 📑 [haveibeenpwned.com pwned our helpdesk!](https://fyr.io/2020/05/30/haveibeenpwned-com-pwned-our-helpdesk-glpi-9-4-5-sql-injection/)
- 📑 [nmap cheat sheet](https://docs.google.com/document/d/1ekOUND30jr4RmD-QzL5XQUPPoZkbQwJgvuZ7BwlicIE/mobilebasic)
- 📘 [Security books](https://opsecx.com/index.php/security-books/)
- 📘 [This page lists books that I have found to be highly relevant and useful for learning topics within computer security, digital forensics, incident response, malware analysis, and reverse engineering](http://dfir.org/?q=node/8)
- 📚 [Collection of articles](http://rafale.org/)
- 📚 [Collection of links](http://www.wawaseb.com/lutile/wsl212.php)
- 📚 [Linux Security Tools](https://linuxsecurity.expert/tools/)
- 📚 [Network Cheat Sheets (BGP, EIGRP, IPsec, ...)](https://packetlife.net/library/cheat-sheets/)
- 📚 [Password lists](https://github.com/lavalamp-/password-lists.git)
- 📚 [PortSwigger blog](https://portswigger.net/research)
- 📚 [Reddit hacking Wiki (podcasts, osint, scanning, cracking, sqli, awesome, red team, phishing)](https://old.reddit.com/r/hacking/wiki/index)
- 📚 [SecLists — List of usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.](https://github.com/danielmiessler/SecLists.git)
- 📚 [hackingthe.cloud — Knowledge about cloud, enumeration, exploitation, avoid detection, AWS, azure, GCP...](https://hackingthe.cloud/aws/)
- 📼 [MOOC de l'ANSSI](https://secnumacademie.gouv.fr/)
- 📼 [Root KSK ceremony](https://www.youtube.com/watch?v=erfsFJsapAs)
- 🔧 [ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.](https://github.com/michelin/ChopChop)
- 🔧 [Inject javascript into a PDF file](https://github.com/cornerpirate/JS2PDFInjector)
- 🔧 [JSFuck is an esoteric and educational programming style based on the atomic parts of JavaScript.](http://www.jsfuck.com/)
- 🔧 [PDF Tools](https://blog.didierstevens.com/programs/pdf-tools/)
- 🔧 [Search numbers in a database of 290,695,246 primes and 2,050,312,768 known compisite numbers with known factors](http://factordb.com/)
- 🔧 [Temporary email address redirection](jetable.org)
- 🔧 [fsociety — A Modular Penetration Testing Framework](https://github.com/fsociety-team/fsociety)
- 📚 [hackingthe.cloud — Knowledge about cloud, enumeration, exploitation, avoid detection, AWS, azure, GCP...](https://hackingthe.cloud/aws/)
- 🔧 [PDF Tools](https://blog.didierstevens.com/programs/pdf-tools/)
- 📘 [Security books](https://opsecx.com/index.php/security-books/)
- 📚 [Linux Security Tools](https://linuxsecurity.expert/tools/)
- 📚 [Reddit hacking Wiki (podcasts, osint, scanning, cracking, sqli, awesome, red team, phishing)](https://old.reddit.com/r/hacking/wiki/index)
- 📚 [PortSwigger blog](https://portswigger.net/research)
- 📑 [Hacking Tools Cheat Sheet](https://i.redd.it/fviaw8s43q851.jpg)
- 🔧 [ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.](https://github.com/michelin/ChopChop)
- 📑 [The history of Lets'Encrypt](https://blog.acolyer.org/2020/02/12/lets-encrypt-an-automated-certificate-authority-to-encrypt-the-entire-web/)
- 📼 [Root KSK ceremony](https://www.youtube.com/watch?v=erfsFJsapAs)
- 📚 [Network Cheat Sheets (BGP, EIGRP, IPsec, ...)](https://packetlife.net/library/cheat-sheets/)
- 📑 [nmap cheat sheet](https://docs.google.com/document/d/1ekOUND30jr4RmD-QzL5XQUPPoZkbQwJgvuZ7BwlicIE/mobilebasic)
- 📑 [BeEF - The Browser Exploitation Framework Project](https://beefproject.com/)
- 📚 [Password lists](https://github.com/lavalamp-/password-lists.git)
- 📑 [List of the most common french passwords](https://github.com/tarraschk/richelieu)
- 📚 [SecLists — List of usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.](https://github.com/danielmiessler/SecLists.git)
- 📼 [MOOC de l'ANSSI](https://secnumacademie.gouv.fr/)
- 📘 [This page lists books that I have found to be highly relevant and useful for learning topics within computer security, digital forensics, incident response, malware analysis, and reverse engineering](http://dfir.org/?q=node/8)
- 📑 [Five Minute Guide to Software Security](https://oneupsecurity.com/research/five-minute-guide-to-software-security)
- 🔧 [Search numbers in a database of 290,695,246 primes and 2,050,312,768 known compisite numbers with known factors](http://factordb.com/)
- 📚 [Collection of articles](http://rafale.org/)
- 📚 [Collection of links](http://www.wawaseb.com/lutile/wsl212.php)
- 🎮 [learn about common mistakes and gotchas when using Amazon Web Services](http://flaws.cloud/)
- [Yes We Hack — bug bounty](https://www.yeswehack.com)
- 🎮 [IRC Puzzles](https://blog.ircpuzzles.org/)
- 📑 [Référentiel général de sécurité](https://www.ssi.gouv.fr/entreprise/reglementation/confiance-numerique/le-referentiel-general-de-securite-rgs/)
- 📑 [Livre Blanc sur la Défense et la Sécurité Nationale](http://www.defense.gouv.fr/content/download/206186/2286591/Livre-blanc-sur-la-Defense-et-la-Securite-nationale%202013.pdf)
- 📑 [haveibeenpwned.com pwned our helpdesk!](https://fyr.io/2020/05/30/haveibeenpwned-com-pwned-our-helpdesk-glpi-9-4-5-sql-injection/)
- 🔧 [JSFuck is an esoteric and educational programming style based on the atomic parts of JavaScript.](http://www.jsfuck.com/)
- 🔧 [Inject javascript into a PDF file](https://github.com/cornerpirate/JS2PDFInjector)
- 📑 [ANSSI](https://www.ssi.gouv.fr/)
- 📑 [Zero trust security model](https://en.wikipedia.org/wiki/Zero_Trust_Networks)
- 📑 [Auditing Algorithms](https://auditingalgorithms.science/)
- - 🔧 [PDF Tools](https://blog.didierstevens.com/programs/pdf-tools/)
- 📘 [Security books](https://opsecx.com/index.php/security-books/)
- 📚 [Linux Security Tools](https://linuxsecurity.expert/tools/)
- 📚 [Reddit hacking Wiki (podcasts, osint, scanning, cracking, sqli, awesome, red team, phishing)](https://old.reddit.com/r/hacking/wiki/index)
- 📚 [PortSwigger blog](https://portswigger.net/research)
- 📑 [Hacking Tools Cheat Sheet](https://i.redd.it/fviaw8s43q851.jpg)
- 🔧 [ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.](https://github.com/michelin/ChopChop)
- 📑 [The history of Lets'Encrypt](https://blog.acolyer.org/2020/02/12/lets-encrypt-an-automated-certificate-authority-to-encrypt-the-entire-web/)
- 📼 [Root KSK ceremony](https://www.youtube.com/watch?v=erfsFJsapAs)
- 📚 [Network Cheat Sheets (BGP, EIGRP, IPsec, ...)](https://packetlife.net/library/cheat-sheets/)
- 📑 [nmap cheat sheet](https://docs.google.com/document/d/1ekOUND30jr4RmD-QzL5XQUPPoZkbQwJgvuZ7BwlicIE/mobilebasic)
- 📑 [BeEF - The Browser Exploitation Framework Project](https://beefproject.com/)
- 📚 [Password lists](https://github.com/lavalamp-/password-lists.git)
- 📑 [List of the most common french passwords](https://github.com/tarraschk/richelieu)
- 📚 [SecLists — List of usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.](https://github.com/danielmiessler/SecLists.git)
- 📼 [MOOC de l'ANSSI](https://secnumacademie.gouv.fr/)
- 📘 [This page lists books that I have found to be highly relevant and useful for learning topics within computer security, digital forensics, incident response, malware analysis, and reverse engineering](http://dfir.org/?q=node/8)
- 📑 [Five Minute Guide to Software Security](https://oneupsecurity.com/research/five-minute-guide-to-software-security)
- 🔧 [Search numbers in a database of 290,695,246 primes and 2,050,312,768 known compisite numbers with known factors](http://factordb.com/)
- 📚 [Collection of articles](http://rafale.org/)
- 📚 [Collection of links](http://www.wawaseb.com/lutile/wsl212.php)
- 🎮 [learn about common mistakes and gotchas when using Amazon Web Services](http://flaws.cloud/)
- [Yes We Hack — bug bounty](https://www.yeswehack.com)
- 🎮 [IRC Puzzles](https://blog.ircpuzzles.org/)
- 📑 [Référentiel général de sécurité](https://www.ssi.gouv.fr/entreprise/reglementation/confiance-numerique/le-referentiel-general-de-securite-rgs/)
- 📑 [Livre Blanc sur la Défense et la Sécurité Nationale](http://www.defense.gouv.fr/content/download/206186/2286591/Livre-blanc-sur-la-Defense-et-la-Securite-nationale%202013.pdf)
- 📑 [haveibeenpwned.com pwned our helpdesk!](https://fyr.io/2020/05/30/haveibeenpwned-com-pwned-our-helpdesk-glpi-9-4-5-sql-injection/)
- 🔧 [JSFuck is an esoteric and educational programming style based on the atomic parts of JavaScript.](http://www.jsfuck.com/)
- 🔧 [Inject javascript into a PDF file](https://github.com/cornerpirate/JS2PDFInjector)
- 📑 [ANSSI](https://www.ssi.gouv.fr/)
- 📑 [Zero trust security model](https://en.wikipedia.org/wiki/Zero_Trust_Networks)
- 📑 [SSRF Cheat Sheet & Bypass Techniques](https://highon.coffee/blog/ssrf-cheat-sheet/)
- 📑 [GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems.](https://gtfobins.github.io/)
## Cybersecurity/Cryptography
@ -166,6 +135,7 @@ Date: 2021-05-05 15:21:00
## Cybersecurity/OSINT
- 🔧 [theHarvester — E-mails, subdomains and names Harvester](https://github.com/laramies/theHarvester)
- 🧰 [OSINT4ALL](https://start.me/p/L1rEYQ/osint4all)
- 🔧 [FinalRecon — An automatic web reconnaissance tool written in Python](https://github.com/thewhiteh4t/FinalRecon/)
- 📊 [shodan](www.shodan.io), [censys](censys.io), [netcraft](sitereport.netcraft.com)
@ -259,6 +229,7 @@ Or from command line with a postgresql client:
# Programming
- 📘 [The modern documentation website Emacs deserves](https://www.emacsdocs.org/)
- 📘 [What are reddit's favorite books to learn about programming?](https://redditfavorites.com/books/programming/)
- 🔧 [Find interesting unanswered question on stackoverflow](https://data.stackexchange.com/stackoverflow/query/4038/find-interesting-unanswered-questions)
- 🔧 [AdminLTE — Bootstrap admin dashboard template](https://adminlte.io/) used by PiHole and [hermes](https://github.com/Ousret/hermes)
@ -325,12 +296,19 @@ Or from command line with a postgresql client:
- 🔧 [Pex — Python EXecutable](https://pex.readthedocs.io/)
- 📑 [Les secrets d'un code pythonique](https://zestedesavoir.com/articles/1079/les-secrets-dun-code-pythonique/)
- 📑 [These series of posts are an accompaniment to a couple of talks given: Advanced asyncio: Solving Real-world Production Problems](https://www.roguelynn.com/words/asyncio-we-did-it-wrong/)
- 🔧 [Rich — Python library for rich text and beautiful formatting in the terminal](https://pypi.org/project/rich/)
### Programming/Python/Django
- 📑 [Django Classy Class Based Views](http://ccbv.co.uk/]
- 🔧 [Django load settings from env: from djenv.settings import *](https://pypi.org/project/djenv/)
- 📑 [Classy Django REST Framework](http://www.cdrf.co/)
- 🔧 [Wagtail — A Django CMS](https://wagtail.io/)
- 🔧 [Rich — Python library for rich text and beautiful formatting in the terminal](https://pypi.org/project/rich/)
- 🔧 [Grappelli (Django Admin) — A beautiful content management interface](https://grappelliproject.com/)
- 🔧 [Alpine and HTMX in Django](https://www.saaspegasus.com/guides/modern-javascript-for-django-developers/htmx-alpine/)
- 🔧 [django-restql: Turn your API made with Django REST Framework(DRF) into a GraphQL like API.](https://github.com/yezyilomo/django-restql)
- 🔧 [Turbo — The speed of a single-page web application without having to write any JavaScript.](https://turbo.hotwired.dev/)
### Programming/Python/Teaching