VirtualTam's bookmarks

1. AFL++ - American Fuzzy Lop Fuzzing Framework 2025-02-15

   tags: compiler/llvm, genetic-algorithm, programming/c++, programming/fuzzing, programming/rust, research, security, virtualization/qemu

   [ permalink ]

   • AFLplusplus/AFLplusplus
   • AFLplusplus/LibAFL - A collection of reusable pieces of fuzzers
   • rc0r/afl-utils - Utilities for automated crash sample processing/analysis, job management and corpus optimization
   • 0xricksanchez/AFL_Runner - Scaling best-practice AFLPlusPlus fuzzing campaigns made easy
   • AFL++ Papers
   • Sister Projects
   • The LibAFL Book
   • Fuzzing projects with american fuzzy lop (AFL)
   • afl - american fuzzy lop
2. badkeys - Checking cryptographic public keys for known vulnerabilities 2025-01-18

   tags: cryptography/elliptic-curve, cryptography/rsa, leak, programming/python, security, security/password

   [ permalink ]

   • badkeys/badkeys
   • Private Keys in the Fortigate Leak
3. oha - HTTP load generator 2025-01-08

   tags: command-line, network/http, network/transport-layer-security, programming/rust

   [ permalink ]
4. Arti - An implementation of the the Tor anonymity protocols in Rust 2025-01-03

   tags: network/tor, privacy, programming/rust, security

   [ permalink ]

   • tpo/core/arti
5. zxcvbn - Low-Budget Password Strength Estimation 2024-12-20

   tags: programming/javascript, programming/python, security/password

   [ permalink ]
6. The CLIP OS Project - A hardened, multi-level operating system [archived] 2024-12-10

   tags: france, linux, linux/gentoo, security, virtualization/hypervisor

   [ permalink ]

   The CLIP OS project is an open-source project designed by the National Cybersecurity Agency of France (ANSSI) that aims to build a hardened, multi-level operating system, based on the Linux kernel and a lot of free and open source software.

   [...]

   The project is based on Gentoo Hardened and has many similarities with Chromium OS or the Yocto project.

   • CLIPOS on Github
7. Qubes OS - A reasonably secure operating system 2024-11-28

   tags: linux, security, virtualization/xen

   [ permalink ]

   • Introduction
   • Certified Hardware
   • Why would one use Qubes OS?
8. DNS over HTTPS 2024-11-25

   tags: cryptography/encryption, ietf/rfc, internet/browser/chrome, internet/browser/firefox, network/dns, network/http, network/transport-layer-security

   [ permalink ]

   RFCs:

   • RFC 7858 - Specification for DNS over Transport Layer Security (TLS)
   • RFC 8484 - DNS Queries over HTTPS (DoH)

   Resources:

   • Carsten Strotmann - doh.defaultroutes.de DNS-over-TLS/HTTPS Server
   • DNS over HTTPS - Cloudflare 1.1.1.1 Documentation

   Setting up a DNS-over-HTTPS server:

   • DNS over HTTPS - ArchWiki
   • DNS-over-TLS almost working - Træfik Forum
   • Using Google’s dns.google.com with CoreDNS

   Browser configuration:

   • Configure DoH on your browser - Cloudflare Documentation
   • Using custom DNS-over-HTTPS with CoreDNS and Google Chrome
   • Firefox DNS-over-HTTPS - Firefox Help
9. go-safeweb - Secure-by-default HTTP servers in Go 2024-11-23

   tags: network/http, programming/go, security, security/authentication

   [ permalink ]
10. The Illustrated QUIC Connection - Every byte explained and reproduced 2024-11-19

    tags: network/http, network/quic, network/transport-layer-security, network/udp

    [ permalink ]
11. Recovering passwords from pixelized screenshots 2024-11-18

    tags: image/optical-character-recognition, programming/python, programming/typescript, security/obfuscation, security/password

    [ permalink ]

    • On the (In)effectiveness of Mosaicing and Blurring as Tools for Document Redaction
    • Never, Ever, Ever Use Pixelation for Redacting Text
    • spipm/Depix
    • JonasSchatz/DepixHMM
    • BishopFox/unredacter
12. h2c Smuggling: Request Smuggling Via HTTP/2 Cleartext (h2c) 2024-11-04

    tags: network/http, network/reverse-proxy, network/websocket, programming/go, security

    [ permalink ]

    • BishopFox/h2csmuggler
13. SSHFP - Secure SHell FingerPrint DNS Records 2024-10-27

    tags: cryptography/elliptic-curve, network/dns, network/dnssec, network/ssh

    [ permalink ]

    • IANA - DNS SSHFP Resource Record Parameters
    • ssh - How do I generate SSHFP records?
    • Oh SSH-it, What’s My Fingerprint? A Large-Scale Analysis of SSH Host Key Fingerprint Verification Records in the DNS
      • gehaxelt/sshfp-dns-measurement
      • APNIC - Improving SSH’s security with SSHFP DNS records

    RFCs:

    • RFC 4251 - The Secure Shell (SSH) Protocol Architecture
    • RFC 4255 - Using DNS to Securely Publish Secure Shell (SSH) Key Fingerprints
14. smallstep/certificates - A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management 2024-05-27

    tags: cryptography/certificate, cryptography/certificate-authority, network/http, network/http-server/traefik, network/reverse-proxy, network/transport-layer-security, programming/go

    [ permalink ]

    • Run a private online TLS certificate authority in a Docker container
    • Configure popular ACME clients to use a private CA with the ACME protocol
    • Run your own private CA & ACME server using step-ca
    • Build a Tiny Certificate Authority For Your Homelab
15. PostgreSQL Anonymizer 2024-05-23

    tags: database/postgresql, privacy/gdpr, programming/rust, security/anonymization

    [ permalink ]

    • dalibo/postgresql_anonymizer
    • Introducing PostgreSQL Anonymizer
    • 8 Anonymization Strategies with PostgreSQL
    • Data anonymization with Postgres
16. gittuf - A security layer for Git, with key management and permissions for branches and tags 2024-05-13

    tags: automotive, embedded, security, source-code-management/git, trust

    [ permalink ]

    • gittuf/gittuf
    • ossf/wg-supply-chain-integrity
    • OpenSSF - Introducing gittuf: A Security Layer for Git Repositories
    • LWN - Securing Git repositories with gittuf
    • TUF - The Update Framework
    • Uptane - A Secure Software Update Framework for Automobiles
17. stalwartlabs/mail-server - Secure & Modern All-in-One Mail Server (IMAP, JMAP, SMTP) 2024-04-26

    tags: email, email/dkim, email/spf, network/imap, network/jmap, network/smtp, programming/rust

    [ permalink ]

    • Stalwart Mail Server
    • NLNet Foundation - Stalwart Mail Server
    • /r/selfhosted - Announcement: All-in-one JMAP, IMAP and SMTP server
    • /r/selfhosted - Announcement: Open source JMAP / IMAP server written in Rust
18. The Copenhagen Book - General guidelines on implementing authentication and authorization in web applications 2024-04-05

    tags: cryptography/hash, memory/cache, network/http, network/http/cookie, programming/go, security/authentication, security/authorization, security/oauth, security/password

    [ permalink ]

    • pilcrowOnPaper/copenhagen
19. OWASP CycloneDX - A full-stack Bill of Materials (BOM) standard 2024-04-02

    tags: programming/go, programming/python, programming/rust, security, software-engineering/bill-of-materials

    [ permalink ]

    • CycloneDX
    • CycloneDX/cyclonedx-gomod
    • CycloneDX/cyclonedx-python
    • cyclonedx-rust-cargo
20. facebookexperimental/kperf - TCP and TLS performance testing tool 2024-03-31

    tags: network/tcp, network/transport-layer-security, performance/benchmark, programming/c

    [ permalink ]