OpenSnitch - is the small firewall utility for Linux, that intercepts any outgoing traffic, asking your permission to allow or deny it. The project is on alpha, but it looks promising.

#security #firewall #linux

https://github.com/evilsocket/opensnitch

Restic is a program that does backups right.

#backup #security #go

https://restic.github.io/

​​SafeSecret is a simple service made for a single purpose: sharing confidential information in an easy, quick and secure way. Think of it as writing a paper note, letting someone read it, then burning it.

#security #secret

Observatory by Mozilla is utterly useful tool from Mozilla to scan yor website for security vulnerabilities.

#security #tool

​​​​Haven - is the open source mobile app that helps you to protect your personal spaces and possessions without compromising your own privacy, through an Android app and on-device sensors. It is created by Edward Snowden and his friends. Snowden announced this project on his twitter. There is the nice article reviewing this app.

#security #privacy #paranoia

​​The SAFE Network is a decentralized peer-to-peer data storage and communications network that provides a secure, efficient
and low-cost infrastructure for everyone.

#p2p #security #data

​​GitLeaks (★ 1746) is a tool that searches repositories for sensitive information 🔑

#leaks #security #scanner #go

​​Because of Telegram blockage in some countries, VPN and proxy servers are utterly useful these days. Here is the list of the most popular tools and scripts helping to install all the necessary software for your privacy.

● StreisandEffect (★ 14,297) - the collection of Ansible cookbooks, that helps you to install a new server running your choice of WireGuard, OpenConnect, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, and a Tor bridge. It also generates custom instructions for all of these services. At the end of the run, you are given an HTML file with instructions that can be shared with friends, family members, and fellow activists. The very good choice you can start with.

● Algo VPN (★ 8,277) - is a set of Ansible scripts that simplify the setup of a personal IPSEC VPN. It uses the most secure defaults available, works with common cloud providers, and does not require client software on most devices.

● openvpn-install (★ 6,602) - OpenVPN road warrior installer for Debian, Ubuntu, and CentOS. This Shell script will let you set up your own VPN server in no more than a minute, even if you haven't used OpenVPN before. It has been designed to be as unobtrusive and universal as possible.

● sovereign (★ 6,921) - is a set of Ansible playbooks that you can use to build and maintain your own personal cloud-based entirely on open source software, so you’re in control. This script helps you to install: IMAP over SSL with full-text search, POP3 over SSL, SMTP over SSL, Spam fighting, Mobile push notifications, Jabber/XMPP, RSS Reader, CalDAV and CardDAV, your own private storage, VPN, IRC, Git hosting, Web hosting and many more...

And there are few SOCKS5 links for your Telegram

● SS5 - is a socks server that implements the SOCKS v4 and v5 protocol.

● Dante - A free SOCKS server

● 3proxy - tiny free proxy server

● ShadowSocks - A secure socks5 proxy, designed to protect your Internet traffic.

● go-socks5 library (★ 485) - golang package that implements SOCKS5 protocol.

If you think I should add some another stuff that I missed, please email to me, and I will update this post. Let's keep it up to date together. Thanks!

#privacy #censorship #proxy #security #vpn

​​Bitwarden - the open source password management solutions for individuals, teams, and business organizations.

The tool provides everything you need for everyday use: browser plugins, mobile app, desktop app, CLI tool and even ready server (with docker) for secure sync. Enterprise solutions are also avaiable.

#password #manager #security #bobukrecommends

Big List of Naughty Strings (★ 31,819) is a list of strings which have a high probability of causing issues when used as user-input data. This is intended for use in helping both automated and manual QA testing.

#validation #UTF #security #vulnerability #char #testing #QA

​​Firefox Lockwise - password manager from Mozilla

#password #manager #security

​​DSVPN - (★ 866) is a Dead Simple VPN, designed to address the most common use case for using a VPN. Written in pure C.

Features:

● Runs on TCP. Works pretty much everywhere, including on public WiFi where only TCP/443 is open or reliable.
● Uses only modern cryptography, with formally verified implementations.
● Low and constant memory footprint. Doesn't perform any heap memory allocations.
● Small (~25 KB), with an equally small and readable code base. No external dependencies.
● Works out of the box. No lousy documentation to read. No configuration file. No post-configuration. Run a single-line command on the server, a similar one on the client and you're done. No firewall and routing rules to manually mess with.
● Works with Linux (client, server) and MacOS/OpenBSD (client). Adding support for other operating systems is trivial.
● Doesn't leak between reconnects if the network doesn't change. Blocks IPv6 on the client to prevent IPv6 leaks.

#vpn #c #security #privacy

​​Hubble - (★ 82) is a Network, Service & Security Observability for Kubernetes

Hubble is a fully distributed networking and security observability platform for cloud native workloads. It is built on top of Cilium and eBPF to enable deep visibility into the communication and behavior of services as well as the networking infrastructure in a completely transparent manner.

#cloud #kubernetes #security

​​Infisical - (★8.4k on GitHub) is an open-source, end-to-end encrypted platform for secret management: sync secrets across your team/infrastructure and prevent secret leaks.

features:

● User-friendly dashboard to manage secrets across projects and environments (e.g. development, production, etc.)
● Client SDKs to fetch secrets for your apps and infrastructure on demand
● Infisical CLI to fetch and inject secrets into any framework in local development
● Native integrations with platforms like GitHub, Vercel, Netlify, and more
● Automatic Kubernetes deployment secret reloads
● Complete control over your data - host it yourself on any infrastructure
● Secret versioning and Point-in-Time Recovery to version every secret and project state
● Audit logs to record every action taken in a project
● Role-based Access Controls per environment
● Simple on-premise deployments to AWS, Digital Ocean, and more
● Secret Scanning and Leak Prevention

#vault #secrets #security #devops

​​Amnezia VPN - (★1.9k at GitHub) is an open-source VPN client, with a key feature that enables you to deploy your own VPN server on your server.

#vpn #privacy #security