Here we collect and discuss the best DeFi, Blockchain and crypto-related OpSec researches and data terminals - contributions are welcome.
This page lists names, links and short descriptions. The original list on GitHub is the source and belongs to its authors.
The principle which holds that a cryptosystem should be secure, even if everything about the system, except the key, is public knowledge. This concept is widely embraced by cryptographers, in contrast to security through obscurity, which is not.
a file-sharing tool that allows you to find the responsible person in case of a leakage
or Keepassx or KeePassDX or KeePassXC or BitWarden are good options. I also found this tutorial for integrity check (and other checks) very helpful, be sure to check it out as well: link.
Sparrow is a Bitcoin wallet for those who value financial self-sovereignty. Sparrow’s emphasis is on security, privacy, and usability. Sparrow does not hide information from you - on the contrary, it…
Mobile-friendly Ethereum wallet
Multi-asset cryptocurrency wallet. Desktop and mobile apps both were built with Vue.
Online wallet service that interacts with the blockchain and performs several other useful functions.
A MenuBar app to automatically audit your Mac for basic security hygiene.
, Tresorit and Resilio are good enterprise solutions, all with solid encryption baked-in
is a Cloud Storage for Offsite Backup that give you an empty UNIX filesystem to access with any SSH tool. Built on ZFS for data security and fault tolerance with support for rsync/sftp/scp/borg/rclone/restic/git-annex.
An ad-blocking, privacy-protecting, censorship-bypassing DNS. Also comes with analytics, and the ability to shield kids from adult content.
check malware for free. With our online malware analysis tools you can research malicious files and URLs and get result with incredible
Vanilla OS is a Debian Sid Linux-based Point Release distribution that receives updates at the right time without sacrificing security and functionality.
Open source, system-wide network that routes each app connection through its own path across multiple nodes, giving per-connection IP separation instead of a single shared exit. Built into the Safing Portmaster firewall for Windows and Linux.
a fast socks5 proxy that encrypts traffic
Open source, feature rich, powerful type 2 hypervisor for Mac, can emulate x86-64 OSes on Apple Silicon Macs. There's also an iOS version (so you can run Windows on your iPhone!)…
HTTP cache, RFC compliant, alternative to Varnish available as a middleware.
Simple tool, that compares SHA-1 fingerprints of the the SSL certificates seen from your device, and the certificate seen from an external network. If they do not match, this may indicate a man-in-the…
Prevent background processes gaining unauthorized access to your devices camera. Better still, use a webcam sticker.
Prevent background processes taking unauthorized screenshots, which could expose sensitive data.
An open-source, no-root firewall and DNS changer, with anti-censorship capabilities for Android 6+.
Certificate manager and a universal crypto GUI. It supports managing X.509 and OpenPGP certificates in the GpgSM keybox and retrieving certificates from LDAP servers.
Passive Deep Packet Inspection blocker and Active DPI circumvention utility (for Windows)
Set up a DIY/personal VPN in the cloud. It is a set of Ansible scripts that simplify the setup of a personal WireGuard and IPsec VPN, open-sourced by Trail of Bits. :green_circle:
Take potentially dangerous PDFs, office documents, or images and convert them to a safe PDF.
Get maximum information about potentially malicious files and links from: Virus Total, Hybrid Analysis, URLHaus, PolySwarm, Mal Share, Alien Vault, Malpedia, ThreatFox, Triage, InQuest
urlscan.io is a free service to scan and analyse websites. When a URL is submitted to urlscan.io, an automated process will browse to the URL like a regular user and record the activity that this page navigation creates.
Guidance to creating (truly) anonymous identities.
were created at that time. There, their authors gathered a variety of resources that were related by a common subject to make someone’s life easier! In some ways, the creators of Awesome Lists and start.me continue this idea now. And it's fantastically amazing!
Steganography is a process which can encode message in image. In this site just upload a image then enter a text and hit encode to encode message.
Reproduce DeFi hack incidents using Foundry.
Discover the tracking dots on a scanned document. Upload an image (600 dpi) of your print out. Dottspotter will try to detect the yellow dot code (MIC)
digital security tools and tactics
Tips, Tools, and Tutorials for privacy and online self-defense
Opinionated recommendations that the team at Nascent find to be appropriate, particularly for teams developing and managing early versions of a protocol.
is acurated list of privacy & security-focused software and services.
Guidance to creating (truly) anonymous identities.
Privacy-focused messenger using the Matrix protocol. The Element client allows for group chat rooms, media sharing, voice and video group calls. End-to-end encryption by default for message content, b…
Encrypted, free and open source video calling app, which does not require creating an account/ providing any personal details. Available as a web app, and native app for Windows, MacOS, Linux, Android…
is an open source virtual/remote desktop infrastructure for everyone. Display and control your PC (Windows, macOS, and Linux) and Android devices.
I2P is an anonymous overlay network - a network within a network. It is intended to protect communication from dragnet surveillance and monitoring by third parties such as ISPs.
& example
Online steganography tool: PngCheck,Strings,Foremost,Binwalk,ExifTool,Outguess,Steghide,Zsteg,Blue/Green/Red/Superimposed
does a few things differently than most other VPNs, such as allowing cash payments and not requiring an email address to create an account. One may also wonder: Isn't WireGuard less safe than OpenVPN, since logs are kept for WireGuard (at least temporary? Well, If you have multiple users you have…
One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password
The Hitchhiker’s Guide to Online Anonymity
Information security resources for pentesting, forensics, and more.
Guidance to creating (truly) anonymous identities.
and Cryptography can also be combined for this purpose. After all, cryptography hides information, whereas steganography masks the fact that it was transmitted. For example, if you stenographically double-encrypt your passwords and store them in a cloud-based password manager, hackers (even if the…
and Cryptography can also be combined for this purpose. After all, cryptography hides information, whereas steganography masks the fact that it was transmitted. For example, if you stenographically double-encrypt your passwords and store them in a cloud-based password manager, hackers (even if the…
Steganography is a process which can encode message in image. In this site just upload a image then enter a text and hit encode to encode message.
A web-based, enhanced and open-source port of StegSolve. Upload any image file, and the relevant options will be displayed.
Censorship-resistant mobile browser that shares and retrieves web content through the Ouinet peer-to-peer cache.
Search email addresses and discover all known breaches that this email has been seen in, and download the breached database if it is publicly available.
+ websdr.org + try 😅
Gentoo is a Linux distribution built using the Portage package management system. Unlike a binary software distribution, the source code is compiled locally at the time of installation. Gentoo is known for its speed.
Whonix is an anonymous operating system, which can run in a VM, inside your current OS. It is the best way to use Tor, and provides very strong protection for your IP address. It comes bundled with ot…
A very polished application firewall, allowing you to easily manage internet connections on a per-app basis. (Mac OS)
Let's respect the true Pioneers in this industry!
A sandbox environment, allowing you to clone selected apps and run them in an isolated box, preventing it from accessing your personal data, or device information.
(source code) - Best DeFi data source: TVL, yields, stablecoins, unlocks across all chains
JSON-RPC Ethereum API (Mainnet, Rinkeby, Front-running Mainnet)
awesome-selfhosted/awesome-selfhosted
A list of Free Software network services and web applications which can be hosted on your own servers
edoardottt/awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
lissy93/awesome-privacy
🦄 A curated list of privacy & security-focused software and services
vavkamil/awesome-bugbounty-tools
A curated list of various bug bounty tools
ashishb/android-security-awesome
A collection of android security related resources
qazbnm456/awesome-web-security
🐶 A curated list of Web Security materials and resources.