4.12 Security
Every entry filed under Security and its subtopics.
Level
- Beginner 13
- Intermediate 6
- Advanced 0
What kind of help
- Guided project 0
- Explains an idea 9
- Step by step 7
- Cheat sheet 1
- Fixes an error 2
Works on
What do these mean?
- Beginner
- You are new to this topic.
- Intermediate
- You use it, and want to get better.
- Advanced
- You know it well and need the details.
- Guided project
- Build something small from start to finish, step by step.
- Explains an idea
- Plain words on how something works and why.
- Step by step
- Numbered steps to get one task done.
- Cheat sheet
- Commands and options in a table, to look up fast.
- Fixes an error
- An error message, what it means, and how to solve it.
46 entries
- 0455 Which security tool does what? A map for beginners A beginner's map of open source security tool families: vulnerability scanners, secret detection, static analysis, host audits, web application testing, network inventory… Beginner · Explains an idea · Any system Article Security resources & detection · Server hardening 15 Oct 2026
- 0438 Falco: runtime security for Linux and Kubernetes Falco watches system calls on Linux hosts and in containers and raises an alert when a process does something a rule flags… Linux Repo Concepts · Detection & threat hunting 15 Oct 2026
- 0445 Gitleaks: find secrets that were committed to a Git repository Gitleaks scans Git history, working trees and arbitrary files for passwords, API keys, tokens and private keys using a library of patterns,… Linux, macOS, Windows Repo Pipelines, runners & hooks · Secrets & access 15 Oct 2026
- 0439 osquery: query your endpoints like a SQL database osquery exposes the state of a Linux, macOS or Windows machine as SQL tables, so you can ask which processes are listening,… Linux, macOS, Windows Repo Detection & threat hunting · Prometheus & Grafana 15 Oct 2026
- 0441 Atomic Red Team: small tests that check whether your detections fire Atomic Red Team is a library of tiny, documented tests, each reproducing one attacker technique from MITRE ATT&CK, that defenders run in… Linux, macOS, Windows Repo Detection & threat hunting · Server hardening 15 Oct 2026
- 0452 age: a small, modern tool for encrypting files age is a simple file encryption tool and Go library with short public keys, SSH key support and no configuration options, designed… Linux, macOS, Windows Repo Secrets & access 15 Oct 2026
- 0440 pySigma: the Python library that converts Sigma rules into queries pySigma parses Sigma detection rules and, with backend plugins, converts them into native queries for Splunk, Elastic, Loki, Sentinel and other log… Any system Repo Detection & threat hunting · Logs 15 Oct 2026
- 0447 Lynis: a security audit of a Linux or Unix host with hardening suggestions Lynis is a shell script that inspects a Linux, BSD or macOS system you administer, tests hundreds of settings and services, and… Linux, macOS Repo Linux administration · Server hardening 15 Oct 2026
- 0442 Security Onion: a Linux distribution for security monitoring Security Onion packages Suricata, Zeek, the Elastic stack, host agents and investigation tools into one installable Linux platform, so a team can… Linux Repo Detection & threat hunting · Logs 15 Oct 2026
- 0451 awesome-security-hardening: a curated list of hardening guides, benchmarks and tools A maintained awesome list of security hardening guides, checklists, benchmarks and tools for operating systems, services, containers and cloud platforms, kept current… Any system Repo Security resources & detection · Server hardening 15 Oct 2026
- 0443 Security monitoring explained: IDS, SIEM, EDR and where the logs go A plain language map of the security monitoring tool families, what each one watches, how they feed one another, and where the… Beginner · Explains an idea · Any system Article Detection & threat hunting · Logs 15 Oct 2026
- 0444 Trivy: scan container images, file systems and infrastructure code for known problems Trivy is an open source scanner from Aqua Security that finds known vulnerabilities, misconfigurations and exposed secrets in container images, project directories,… Linux, macOS, Windows Repo Images & registries · Security testing & CTF 15 Oct 2026
- 0446 Semgrep: static analysis with rules you can read Semgrep is a fast static analysis tool whose rules look like the code they match, with a community registry of thousands of… Linux, macOS Repo Pipelines, runners & hooks · Security testing & CTF 15 Oct 2026
- 0448 OWASP ZAP: a web application security scanner for testing your own applications Zed Attack Proxy (ZAP) is a free web application security scanner and intercepting proxy maintained under the OWASP umbrella, used to find… Linux, macOS, Windows Repo Security testing & CTF 15 Oct 2026
- 0449 Nmap: the network mapper for inventorying your own network Nmap is the long-standing open source tool for discovering hosts, open ports, services and operating systems on a network you administer, used… Linux, macOS, Windows Repo DNS, IP addresses & ports · Security testing & CTF 15 Oct 2026
- 0450 OWASP Cheat Sheet Series: concise guides to building applications securely The OWASP Cheat Sheet Series is a set of short, topic-focused guides on secure development, from authentication and session management to input… Any system Repo Security resources & detection 15 Oct 2026
- 0454 Scan your own code and containers in CI: Gitleaks, Semgrep and Trivy Set up a GitHub Actions workflow that runs Gitleaks, Semgrep and Trivy on every push of your own project, learn what each… Intermediate · Step by step · Any system Article Pipelines, runners & hooks · Security testing & CTF 15 Oct 2026
- 0434 Wazuh: an open source security platform with agents, SIEM and XDR Wazuh installs a small agent on each server and sends its logs, file changes and package lists to a central manager that… Linux, macOS, Windows Repo Detection & threat hunting · Logs 15 Oct 2026
- 0453 step-ca: run your own certificate authority for internal TLS and SSH step-ca from Smallstep is an open source certificate authority that issues TLS and SSH certificates for your own infrastructure, with ACME support… Linux, macOS, Windows Repo Linux administration · TLS & certificates 15 Oct 2026
- 0435 CrowdSec: collaborative intrusion prevention that shares blocklists CrowdSec reads your logs, detects attacks such as brute force and scanning, blocks the source, and shares anonymised reports so that every… Linux, Windows Repo Detection & threat hunting · Firewalls 15 Oct 2026
- 0436 Suricata: a network intrusion detection and prevention engine Suricata inspects network traffic in real time, matches it against signature rules and protocol logic, and writes alerts and rich protocol logs.… Linux Repo Detection & threat hunting · Firewalls 15 Oct 2026
- 0437 Zeek: network security monitoring that turns traffic into logs Zeek, formerly Bro, watches network traffic and writes structured logs of every connection, DNS query, HTTP request and certificate it sees. Analysts… Linux, macOS Repo Detection & threat hunting · Logs 15 Oct 2026
- 0428 SecLists: wordlists for authorised security testing A large, maintained collection of wordlists (usernames, passwords, URLs, fuzzing strings, patterns) used in penetration tests with permission and in defensive checks… Linux, macOS Repo Security resources & detection · Security testing & CTF 15 Oct 2026
- 0429 PayloadsAllTheThings: a knowledge base organised by web vulnerability class A community-maintained reference that gives each class of web and application weakness its own section with background, detection notes and remediation references,… Any system Repo Security resources & detection · Security testing & CTF 15 Oct 2026
- 0430 HackTricks: a community wiki of security notes A large, continuously updated wiki of security study notes, organised like a textbook and published in GitBook style, used for learning, CTF… Any system Repo Security resources & detection · Security testing & CTF 15 Oct 2026
- 0427 awesome-security: a curated map of security tools and learning resources A long-running awesome list that groups security software, reading material, courses, conferences and communities by area, from network and endpoint defence to… Any system Repo Security resources & detection 15 Oct 2026
- 0431 What is a detection rule? Sigma explained for beginners A detection rule describes one kind of suspicious activity in logs. Sigma is the shared, tool-independent way to write such rules, so… Beginner · Explains an idea · Any system Article Alerting & dashboards · Security resources & detection 15 Oct 2026
- 0432 Try Sigma rules against your own logs Install the sigma-cli converter, take a rule from the public SigmaHQ library, convert it into a query for a log tool you… Intermediate · Step by step · Linux, macOS Article Logs · Security resources & detection 15 Oct 2026
- 0433 What is an awesome list? Awesome lists are hand-curated link collections on GitHub, one per subject, that follow a shared convention. How they work, how to tell… Beginner · Explains an idea · Any system Article Security resources & detection 15 Oct 2026
- 0426 Sigma: the open detection-rule format for log data The SigmaHQ repository holds the vendor-neutral Sigma rule specification and a community library of thousands of detection rules that converters translate into… Any system Repo Detection & threat hunting · Security resources & detection 15 Oct 2026
- 0359 fail2ban: ban hosts that fail to log in too often The standard intrusion-prevention daemon on Linux servers: it watches logs or the journal for repeated failures and adds temporary firewall rules against… Linux Repo Server hardening · SSH 15 Oct 2026
- 0357 Keep secrets out of git: .env files, gitignore and what to do after a leak Load passwords and API keys from an untracked .env file, commit a safe .env.example instead, catch mistakes before they are pushed, and… Beginner · Step by step · Any system Article Housekeeping · Secrets & access 15 Oct 2026
- 0361 dev-sec ansible-collection-hardening: tested hardening roles for Linux, SSH and nginx An Ansible collection that applies a well-documented hardening baseline to Linux hosts, the SSH server and client, nginx and MySQL, with every… Linux Repo Ansible · Server hardening 15 Oct 2026
- 0355 TLS certificates explained What a certificate proves, who signs it, what the chain and expiry mean, and how to read any site's certificate from the… Beginner · Explains an idea · Any system Article TLS & certificates 15 Oct 2026
- 0356 Free HTTPS with Let’s Encrypt and certbot Install certbot, get a trusted certificate for your domain and let it configure nginx or Apache, or just obtain the files for… Beginner · Step by step · Linux Article TLS & certificates 15 Oct 2026
- 0360 certbot: the Let’s Encrypt client The EFF's ACME client that obtains free TLS certificates from Let's Encrypt, can configure nginx and Apache for HTTPS automatically and renews… Linux Repo TLS & certificates 15 Oct 2026
- 0352 Harden a fresh Linux server in 30 minutes The baseline for any new Debian, Ubuntu or RHEL-family server: updates on, a non-root user with sudo, SSH keys only, a firewall… Beginner · Step by step · Linux Article Server hardening · Users, sudo & hardening 15 Oct 2026
- 0353 fail2ban: block repeated failed logins Install fail2ban, enable the sshd jail with sane ban times, whitelist your own address, read the ban list, unban someone, and add… Intermediate · Step by step · Linux Article Server hardening · SSH 15 Oct 2026
- 0358 SSH server audit script: print risky sshd settings A read-only bash script that asks sshd for its effective configuration, compares the important settings with safe values, flags config.d files that… Intermediate · Cheat sheet · Linux Script Server hardening · SSH 15 Oct 2026
- 0354 sudo rules: give a user exactly the rights they need Write sudoers rules with visudo: full admin for operators, a short list of commands for a deploy account, no-password rules for automation,… Intermediate · Step by step · Linux Article Secrets & access · Users, sudo & hardening 15 Oct 2026