Resources
dumb-password-rules
duffn/dumb-password-rules
A curated compilation of websites with absurd password rules, documented with screenshots and descriptions, plus a companion site and bots that showcase the worst offenders.
Topics
Related projects
InternalAllTheThings2.5kA collection of Active Directory and internal penetration testing cheatsheets covering attack techniques, payloads and bypasses for red teamers and security learners.
DevSecOps2.2kDevSecOps is a curated roadmap and resource collection that organizes tools, articles and guidance across the design, develop, build, test, deploy and operate phases.
osquery23.8kA SQL-powered operating system instrumentation framework that exposes processes, network connections, and other host state as queryable tables for security monitoring.
zaproxy16.2kZAP (Zed Attack Proxy) is a widely used open-source web application security scanner. It automatically finds vulnerabilities and supports manual penetration testing, offering a desktop GUI, headless automation and Docker deployment for developers and security testers.
falco9.6kFalco is a CNCF cloud-native runtime security tool that monitors kernel and container events against custom rules to detect and alert on threats in real time.- dalfox5.4kDalfox is a fast, open-source XSS scanner written in Rust. It automates parameter analysis, reflected, stored and DOM-based XSS detection, WAF fingerprinting and reporting, with a CLI, REST API and MCP server for security testing workflows.