4 Systems & infrastructure
Every entry filed under Systems & infrastructure and its subtopics.
What kind of help
What do these mean?
- Beginner
- You are new to this topic.
- Intermediate
- You use it, and want to get better.
- Advanced
- You know it well and need the details.
- Guided project
- Build something small from start to finish, step by step.
- Explains an idea
- Plain words on how something works and why.
- Step by step
- Numbered steps to get one task done.
- Cheat sheet
- Commands and options in a table, to look up fast.
- Fixes an error
- An error message, what it means, and how to solve it.
54 entries match these filters
- 0447 Lynis: a security audit of a Linux or Unix host with hardening suggestions Lynis is a shell script that inspects a Linux, BSD or macOS system you administer, tests hundreds of settings and services, and… Linux, macOS Repo Linux administration · Server hardening 15 Oct 2026
- 0448 OWASP ZAP: a web application security scanner for testing your own applications Zed Attack Proxy (ZAP) is a free web application security scanner and intercepting proxy maintained under the OWASP umbrella, used to find… Linux, macOS, Windows Repo Security testing & CTF 15 Oct 2026
- 0449 Nmap: the network mapper for inventorying your own network Nmap is the long-standing open source tool for discovering hosts, open ports, services and operating systems on a network you administer, used… Linux, macOS, Windows Repo DNS, IP addresses & ports · Security testing & CTF 15 Oct 2026
- 0450 OWASP Cheat Sheet Series: concise guides to building applications securely The OWASP Cheat Sheet Series is a set of short, topic-focused guides on secure development, from authentication and session management to input… Any system Repo Security resources & detection 15 Oct 2026
- 0434 Wazuh: an open source security platform with agents, SIEM and XDR Wazuh installs a small agent on each server and sends its logs, file changes and package lists to a central manager that… Linux, macOS, Windows Repo Detection & threat hunting · Logs 15 Oct 2026
- 0451 awesome-security-hardening: a curated list of hardening guides, benchmarks and tools A maintained awesome list of security hardening guides, checklists, benchmarks and tools for operating systems, services, containers and cloud platforms, kept current… Any system Repo Security resources & detection · Server hardening 15 Oct 2026
- 0435 CrowdSec: collaborative intrusion prevention that shares blocklists CrowdSec reads your logs, detects attacks such as brute force and scanning, blocks the source, and shares anonymised reports so that every… Linux, Windows Repo Detection & threat hunting · Firewalls 15 Oct 2026
- 0452 age: a small, modern tool for encrypting files age is a simple file encryption tool and Go library with short public keys, SSH key support and no configuration options, designed… Linux, macOS, Windows Repo Secrets & access 15 Oct 2026
- 0436 Suricata: a network intrusion detection and prevention engine Suricata inspects network traffic in real time, matches it against signature rules and protocol logic, and writes alerts and rich protocol logs.… Linux Repo Detection & threat hunting · Firewalls 15 Oct 2026
- 0453 step-ca: run your own certificate authority for internal TLS and SSH step-ca from Smallstep is an open source certificate authority that issues TLS and SSH certificates for your own infrastructure, with ACME support… Linux, macOS, Windows Repo Linux administration · TLS & certificates 15 Oct 2026
- 0437 Zeek: network security monitoring that turns traffic into logs Zeek, formerly Bro, watches network traffic and writes structured logs of every connection, DNS query, HTTP request and certificate it sees. Analysts… Linux, macOS Repo Detection & threat hunting · Logs 15 Oct 2026
- 0438 Falco: runtime security for Linux and Kubernetes Falco watches system calls on Linux hosts and in containers and raises an alert when a process does something a rule flags… Linux Repo Concepts · Detection & threat hunting 15 Oct 2026
- 0439 osquery: query your endpoints like a SQL database osquery exposes the state of a Linux, macOS or Windows machine as SQL tables, so you can ask which processes are listening,… Linux, macOS, Windows Repo Detection & threat hunting · Prometheus & Grafana 15 Oct 2026
- 0440 pySigma: the Python library that converts Sigma rules into queries pySigma parses Sigma detection rules and, with backend plugins, converts them into native queries for Splunk, Elastic, Loki, Sentinel and other log… Any system Repo Detection & threat hunting · Logs 15 Oct 2026
- 0441 Atomic Red Team: small tests that check whether your detections fire Atomic Red Team is a library of tiny, documented tests, each reproducing one attacker technique from MITRE ATT&CK, that defenders run in… Linux, macOS, Windows Repo Detection & threat hunting · Server hardening 15 Oct 2026
- 0442 Security Onion: a Linux distribution for security monitoring Security Onion packages Suricata, Zeek, the Elastic stack, host agents and investigation tools into one installable Linux platform, so a team can… Linux Repo Detection & threat hunting · Logs 15 Oct 2026
- 0444 Trivy: scan container images, file systems and infrastructure code for known problems Trivy is an open source scanner from Aqua Security that finds known vulnerabilities, misconfigurations and exposed secrets in container images, project directories,… Linux, macOS, Windows Repo Images & registries · Security testing & CTF 15 Oct 2026
- 0445 Gitleaks: find secrets that were committed to a Git repository Gitleaks scans Git history, working trees and arbitrary files for passwords, API keys, tokens and private keys using a library of patterns,… Linux, macOS, Windows Repo Pipelines, runners & hooks · Secrets & access 15 Oct 2026
- 0446 Semgrep: static analysis with rules you can read Semgrep is a fast static analysis tool whose rules look like the code they match, with a community registry of thousands of… Linux, macOS Repo Pipelines, runners & hooks · Security testing & CTF 15 Oct 2026
- 0427 awesome-security: a curated map of security tools and learning resources A long-running awesome list that groups security software, reading material, courses, conferences and communities by area, from network and endpoint defence to… Any system Repo Security resources & detection 15 Oct 2026
- 0428 SecLists: wordlists for authorised security testing A large, maintained collection of wordlists (usernames, passwords, URLs, fuzzing strings, patterns) used in penetration tests with permission and in defensive checks… Linux, macOS Repo Security resources & detection · Security testing & CTF 15 Oct 2026
- 0429 PayloadsAllTheThings: a knowledge base organised by web vulnerability class A community-maintained reference that gives each class of web and application weakness its own section with background, detection notes and remediation references,… Any system Repo Security resources & detection · Security testing & CTF 15 Oct 2026
- 0430 HackTricks: a community wiki of security notes A large, continuously updated wiki of security study notes, organised like a textbook and published in GitBook style, used for learning, CTF… Any system Repo Security resources & detection · Security testing & CTF 15 Oct 2026
- 0426 Sigma: the open detection-rule format for log data The SigmaHQ repository holds the vendor-neutral Sigma rule specification and a community library of thousands of detection rules that converters translate into… Any system Repo Detection & threat hunting · Security resources & detection 15 Oct 2026
- 0406 PowerShell: the cross-platform shell and scripting language The open-source PowerShell 7 project from Microsoft: an object-based shell and automation language that runs on Windows, Linux and macOS and is… Linux, macOS, Windows Repo PowerShell 15 Oct 2026
- 0417 Traefik: a reverse proxy that configures itself from Docker and Kubernetes Traefik is an open-source edge router that discovers services from Docker labels, Kubernetes resources and other providers and routes traffic to them,… Linux, macOS, Windows Repo Docker Compose · Web servers & reverse proxies 15 Oct 2026
- 0376 Loki: horizontally scalable log aggregation inspired by Prometheus The Grafana Loki repository: a log store that indexes labels instead of full text, queried with LogQL from Grafana or logcli, with… Linux, macOS Repo Logs 15 Oct 2026
- 0377 Netdata: real-time, per-second monitoring with zero configuration The Netdata repository: an agent that auto-discovers hundreds of metrics on Linux hosts, containers and common services, shows them per second in… Linux, macOS Repo Alerting & dashboards · Prometheus & Grafana 15 Oct 2026
- 0350 wg-easy: WireGuard VPN with a web admin interface A Docker image that runs a WireGuard server and a web page to create clients, show QR codes and watch traffic. The… Linux Repo VPN & tunnels 15 Oct 2026
- 0351 Pi-hole: network-wide ad blocking with your own DNS server A DNS server for your home or office network that answers queries for known advertising and tracking domains with nothing, so every… Linux Repo DNS, IP addresses & ports · VPN & tunnels 15 Oct 2026
- 0359 fail2ban: ban hosts that fail to log in too often The standard intrusion-prevention daemon on Linux servers: it watches logs or the journal for repeated failures and adds temporary firewall rules against… Linux Repo Server hardening · SSH 15 Oct 2026
- 0360 certbot: the Let’s Encrypt client The EFF's ACME client that obtains free TLS certificates from Let's Encrypt, can configure nginx and Apache for HTTPS automatically and renews… Linux Repo TLS & certificates 15 Oct 2026
- 0361 dev-sec ansible-collection-hardening: tested hardening roles for Linux, SSH and nginx An Ansible collection that applies a well-documented hardening baseline to Linux hosts, the SSH server and client, nginx and MySQL, with every… Linux Repo Ansible · Server hardening 15 Oct 2026
- 0368 restic: fast, encrypted, deduplicated backups to local disk, SFTP or cloud storage The restic repository: a single Go binary that backs up to local disks, SFTP, S3, Backblaze B2, Azure, Google Cloud and anything… Linux, macOS, Windows Repo Backup tools 15 Oct 2026
- 0369 BorgBackup: deduplicating archiver with compression and authenticated encryption The BorgBackup repository: a Python and C backup tool that stores deduplicated, compressed, encrypted archives on local disks or over SSH, with… Linux, macOS Repo Backup tools 15 Oct 2026
- 0370 rclone: rsync for cloud storage, with 70+ providers The rclone repository: a Go command-line tool that copies, syncs, mounts and checks files across local disks and more than 70 cloud… Linux, macOS, Windows Repo Backup tools 15 Oct 2026
- 0337 docker/compose The source of Docker Compose, the tool that defines and runs multi-container applications from a compose.yaml file. Useful for release notes, the… Linux, macOS, Windows Repo Docker Compose 15 Oct 2026
- 0338 Watchtower (maintained fork): automatic container image updates Watchtower watches your running containers, pulls newer versions of their images and restarts them with the same settings. This fork continues the… Linux Repo Docker basics · Images & registries 15 Oct 2026
- 0339 Uptime Kuma: self-hosted uptime monitoring Uptime Kuma is a self-hosted monitoring tool with a web UI that checks websites, TCP ports, DNS, Docker containers and more, draws… Linux, macOS, Windows Repo Alerting & dashboards · Docker basics 15 Oct 2026
- 0179 systemd: the Linux system and service manager The source of systemd, the init system and service manager on most Linux distributions, together with journald, networkd, resolved, timers and the… Linux Repo Services & systemd 15 Oct 2026