OverTheWire overthewire.org ↗

pwn.watch ↗Security & privacy

A vulnerability tracking site with an RSS feed.

Privacy Guides ↗Security & privacy

A community website recommending privacy tools, including VPN providers.

AWS WAF ↗Security & privacy

Amazon's managed web application firewall service.

smallwebwaf ↗Security & privacy

An alpha web application firewall reverse proxy aimed at small web and self-hosted sites.

Microcorruption Security & privacy

An embedded-security CTF focused on exploiting a simulated microcontroller.

sandbox-runtime ↗Security & privacy

Anthropic's lightweight sandbox for restricting filesystem and network access of processes.

OWASP WebGoat ↗Security & privacy

A deliberately insecure web application for learning web security.

Google Safe Browsing ↗Security & privacy

Google's service that flags malicious and phishing sites in browsers and search.

1Password ↗

A commercial password manager with a built-in SSH agent that can be unlocked with Touch ID.

YubiKey ↗

A hardware security key supporting FIDO2, PIV and OpenPGP.

NoScript ↗

A browser extension that blocks JavaScript and other active content by default.

Secretive ↗

A macOS app that stores SSH keys in the Secure Enclave and acts as an SSH agent.

Signal

An end-to-end encrypted messaging app.

Tor

An anonymity network that routes traffic through volunteer relays.

Bubblewrap ↗

An unprivileged Linux sandboxing tool built on namespaces.

Canarytokens ↗

Free service for planting tripwire tokens that alert you when they are accessed.

Cloudflare Turnstile ↗

A CAPTCHA alternative from Cloudflare that checks whether a visitor is human.

Cloudflare WAF ↗

Cloudflare's managed web application firewall.

Convergence ↗

Moxie Marlinspike's 2011 proposal for client-chosen notary-based TLS certificate verification.

Darknet Diaries ↗

A podcast covering true stories from the dark side of the internet, including hacking and cyber heists.