31 KiB

Raw Blame History

Awesome Privacy & Securty

A curated list of useful tools and resources online, that help protect your privacy and keep you safe.

Information and Guides
Media
- Books
- Podcasts
- Videos
Websites & Services
Research
- Data and API's
- Academic
Organisations
- Foundations
- Government Organisations
More Lists
- Mega Guides
- Other GitHub Security Lists

Getting Started Guides

EFF SSD - Tips for safer online communications
PrivacyTools.io - Tools to protect against mass surveillance
PrismBreak - Secure app alternatives
The VERGE guide to privacy - Guides for securing mobile, web and home tech
Email Self-Defense - Complete guide to secure email
Security Planner - Great advise for beginners
My Shaddow - Resources and guides, to help you take controll of your data
TwoFactorAuth.org - A direcory of websites, apps and services supporting 2FA
Just Delete Me - A directory of direct links to delete your account from web services

How-To Guides

Threat Protection
- Protect against SIM-swap scam: via wired
- How to spot a phishing attack: via EFF
- Protection from Identity Theft: via Restore Privacy
Netowkring
- How to enable DNS over HTTPS: via geekwire
- How to resolve DNS leak issue: via DNSLeakTest
- Protect against WebRTC Leaks: via Restore Privacy
- ISP and DNS privacy tips: via bluz71
- Complete guide to configureing Firefox for Privacy + Speed: via 12bytes
- Beginners guide on getting started with Tor: via ProPrivacy
- Beginners guide to I2P: via The Tin Hat
- How to Use a VPN and Tor together: via ProPrivacy
Communication
- Configure your email client securly, from scratch - via FSF
- Overview of projects working on next-generation secure email: via OpenTechFund
Devices
- Layers of Personal Tech Security: via The Wire Cutter
- Improving security on iPhone: via lifehacker
- Guide to scrubbing Windows OSs from forensic investigation: by u/moschles, via Reddit
- A curated list of Windows Domain Hardening techniques: by @PaulSec, via: GitHub
Software
- How to use Vera Crypt: via howtogeek
Physical Security
- Hiding from Physical Surveillance: via Snallabolaget
- Guide to opting-out of public data listings and marketing lists: via World Privacy Forum

Notable Articles

Twelve Million Phones, One Dataset, Zero Privacy: via NY Times
Windows data sending: via The Hacker News
Is your Anti-Virus spying on you: via Restore Privacy
What does your car know about you?: via Washington Post
Turns Out Police Stingray Spy Tools Can Indeed Record Calls: via Wired
UK Police Accessing Private Phone Data Without Warrant: via Restore Privacy

Blogs

Spread Privacy - Raising the standard of trust online, by DuckDuckGo
Restore Privacy - Tools and guides about privacy and security
That One Privacy Site - impartial comparisons and discussions
The Hated One - Privacy and security videos
12Bytes - Opinion Articles about Tech, Privacy and more
BringBackPrivacy - Easy-reading, sharable privacy articles
Heimdal - Cyber Security Blog
Tech Crunch - Cyber Security 101
OONI, Internet freedom and analysis on blocked sites
Pixel Privacy - Online privacy guides
The Privacy Project - Articles and reporting on Privacy, by the NYT
The Tin Hat - Tutorials and Articles for Online Privacy
FOSS Bytes- Cyber Security - News about the latest exploits and hacks

Books

Permanent Record by Edward Snowden
Sandworm by Andy Greenberg: A New Era of Cyberwar and the Hunt for the Kremlin's Most Dangerous Hackers
Ghost in the Wires by Kevin Mitnick: Kevin tells his story of being the world's most wanted hacker

Podcasts

Darknet Diaries by Jack Rhysider: Stories from the dark sides of the internet. Listen on Stitcher
- Listen on Stitcher, iTunes, Spotify, PocketCasts
CYBER by Motherboard: News and analysis about the latest cyber threats
- Listen on Stitcher, SoundCloud, iTunes, Spotify, PocketCasts
The Privacy, Security, & OSINT Show by Michael Bazzell: Comprehensive guides on Privacy and OSINT
- Listen on Stitcher, SoundCloud, iTunes, Spotify, PocketCasts
Smashing Security by Graham Cluley and Carole Theriault: Casual, opinionated and humerous chat about current cybersecurity news
- Listen on Stitcher, iTunes, Spotify, PocketCasts

More Security Podcasts on player.fm

Videos

General
- You are being watched by The New York Times
- The Power of Privacy by The Guardian
- Why Privacy matters, even if you have nothing to hide by The Hated One
TED Talks
- How Online Trackers Track You, and What To Do About It by Luke Crouch
- Why you should switch off your home WiFi by Bram Bonné
- Why Privacy Matters, by Glenn Greenwald
- Fighting viruses, defending the net, by Mikko Hypponen
- The 1s and 0s behind cyber warfare, by Chris Domas
- State Sanctioned Hacking - The Elephant in the Room - Historic, economic and demographic overview of the growing threat to the U.S. from Chinese cyber invasions, by Frank Heidt
- How the IoT is Making Cybercrime Investigation Easier - How our data is changing the nature of "evidence" in digital forensics, by Jonathan Rajewski
- Online Privacy Doesn't Exist - The unexpected dangers our digital breadcrumbs can lead to, by Denelle Dixon
- Data is the new gold, who are the new thieves? - Introduction and demonstration of the power of data, by Tijmen Schep
Conferences
- DEF CON 27 - Collection of talks from DEF CON 2019, Vegas
- RSA Conference - Collection of security talks from the RSA conferences
- Administraitor.video - A regularly updated collection of new and interesting security confrence talks
Misc
- Through a PRISM, Darkly - Everything we know about NSA spying, by Kurt Opsahl

Online Tools

Check and Test
- εxodus - Check which trackers any app on the Play Store has
- Have I been Pwned and Dehashed - Check if your details have been compromised
- Redirect Detective - Check where a suspicious URL redirects to
Utilities
- ExifRemove - Remove Meta/ EXIF data online
- Secure Password Check - Fun little tool, to demonstrate how long it could take to crack a password
- 33Mail or Anonaddy or SimpleLogin Protect your email address, by auto-generating unique permeant aliases for each account, so all emails land in your primary inbox
- Deseat Me - Clean up your online presence
Anti-Tracking Analysis
- Panopticlick - Check if, and how your browser is tracking you
- Browser Leaks - Check which information is being leaked by your browser
- DNSLeakTest - Check for and fix a DNS leak
- IP Leak - IP Leak test
- Am I Unique? - If your fingerprint is unique, then websites can track you
Phishing, Hacking and Abuse
- VirusTotal - Analyse a suspicious web resource for malware
- ScamAdviser - Check if a website is a scam, before buying from it
- Abuse IP DB - Report an IP address for abuse, spam or attacks, and check the status of any IP
- Phish Tank - Check if a link is a known phishing URL, Submit a phishing URL, browse recent phishing URLs
- Is It Hacked? - Check if a website or page appears to be hacked, hijacked or generally suspicious
IP, Domain and Network Tools
- Qualys SSL Client Test - Check the SSL/TLS capabilities of your browser
- Qualys SSL Server Test - Perform a deep analysis of the configuration of any SSL web server on the public Internet
- Hetrix Tools - Blacklist Check - Check if your Domain or IP appears on any common blacklists
- RIPEstat - Detailed analysis of IP Addresses (Routing, DNS, Abuse History, Activity etc)
- Multirbl - Complete IP check for sending Mailservers
- IPVoid - Full suit of Domain, IP, and DNS tools for Tracing, Lookup, Checking and Pinging
Net Neutrality
- Blocked by ORG - Check if your website is blocked by certain ISPs
- Data Rights Finder - Find, understand and use information from privacy policies
Anonymous Services - The following sites host a veriety of anonymous online services
- NixNet
- Snopyta
- Disroot

Interesting Websites

The Intercept: Surveillance Catalogue - A database secret of government and military surveillance equpment, that was leaked in the Snowden files
- See also: The source code for these projects, on WikiLeaks Vault7 and Vault8, and the accompanying press release

Privacy-Respecting Software

This section has moved to here

Data, API's and Visualisations

Information Tables
- That One Privacy Site - Detailed VPN Comparison Data
- Hosts to block: someonewhocares/ hosts and StevenBlack/ hosts
- File Signature Table - An up-to-date list of magic numbers, used to identify / verify the content of a file to ensure it has not been tampered with
- Nirsoft - Country IP - List of IP address ranges per country
Databases
- Exploit Database - A database or Current software vulnerabilities
- Exodus - Trackers in Android Apps
- URLScan - Service scanning for malicious domains
- Dehashed - Data Breaches and Credentials
- VirusTotal - Detailed virus scans of software
- Abuse IP DB - Database of IPs reported for abuse
- SnusBase - Long standing database hosting breached data
- OpenPhish - A feed of current phishing endpoints
- Default Password - Database of default passwords for various devices by manufacturer and model
- HashToolkit - Database of 'cracked' hashes
- SecLists - Starter list of leaked databases, passwords, usernames etc (Great for programming)
- Qualys SSL Pulse - A continuous and global dashboard for monitoring the quality of SSL / TLS support over time across 150,000 SSL- and TLS-enabled websites, based on Alexa’s list of the most popular sites in the world
Fun with Live Data 🌠
- Tor Flow - Real-time data flow between Tor nodes
- Submarine Cable Map - An up-to-date map of major global internet cables (see also he.net globe and this map)
- Insecam - A directory and feed of insecure or public live webcams
- BGP Stream - Shows all current outages
- FlightRadar24 - World-wide map of live aircraft positions
- Airport WiFi Map - Shows WiFi networks and their passwords for airports around the world
- Wiggle - Worlds largest WiFi Map showing personal hotspot statistics geographically
- Threat Maps - Real-time hack attempts (malware, phishing, exploit and spam), visualised geographically
  - Checkpoint
  - FortiGuard
  - Fire Eye
  - Kaspersky
  - BitDefender
  - ESET
  - Threat But Map
  - Digital Attack Map
  - Kaspersky LogBook - Historic Threat Time Line

Academic

Journals
- Crypto Paper by Crypto Seb- Privacy, Security, and Anonymity For Every Internet User
Implementations and Standards
Nym - Next Generation of Privacy infrastructure

Foundations

Contract for the Web
Electronic Frountier Foundation - Defending digital privacy + more
OWASP Foundation
Freedom House - Fighting for freedom on the net
Privacy International
Open Tech Fund
Freedom of the Press Foundation
Open Rights Group
LEAP Encryption Access Project
The Guardian Project
Foundation for Applied Privacy
Safe + Secure - advise for journalists and film makers
Citizen Lab
Electronic Privacy Information Center
American Civil Liberties Union
Free Software Foundation
Courage Foundation - Supports those who risk life / liberty to make significant contributions to the historical record
Fight for the Future - Fighting for a future where technology liberates
Public Citizen - Standing up to corporate power and hold the government accountable

Government Organisations

Citizen/ Small business Advice and Infrormation
- UK National Cyber Security Center
- US Cybersecurity - NIST
- Stay Safe Online - US government-backed project, aimed to inform and educate individuals and small businesses about basic digital security
Cybercrime
- Consumer Fraud Reporting - US's Catalogue of online scams currently circulating, and a means to report cases
- Action Fraud - UK’s national reporting centre for fraud and cyber crime
CERT - Your local jurisdiction will likely have a Computer emergency response team (historically known as CERT). Who is in charge of handline handles domestic and international computer security incidents.
- Australia - auscert.org.au
- Austria - cert.at
- Bangladesh - cirt.gov.bd
- Bolivia - cgii.gob.bo
- Brazil - cert.br
- Canada - cyber.gc.ca
- China - cert.org.cn
- Columbia - colcert.gov.co
- Croatia - carnet.hr
- Czech Republic - csirt.cz
- Denmark - cert.dk
- Ecuador - ecucert.gob.ec
- Egypt - egcert.eg
- Estonia - ria.ee / CERT-EE
- Finland - kyberturvallisuuskeskus.fi
- France - cert.ssi.gouv.fr
- Germany - cert-bund.de
- Ghana - nca-cert.org.gh
- Hong Kong - hkcert.org
- Iceland - cert.is
- India - CERT-IN
- Indonesia - idsirtii.or.id
- Iran - cert.ir
- Italy - cert-pa.it
- Japan - JPCERT
- Kyrgyzstan - cert.gov.kg
- Luxembourg - circl.lu
- Macau - mocert.org
- Malaysia - mycert.org.my
- Morocco - educert.ma
- Netherlands - ncsc.nl
- New Zealand - cert.govt.nz
- Nigeria - cert.gov.ng
- Norway - norcert
- Pakistan - pakcert.org
- Papua New Guinea - pngcert.org.pg
- Philippines - cspcert.ph
- Poland - cert.pl
- Portugal - cncs.gov.pt/certpt
- Qatar - qcert.org
- Rep of Ireland - ncsc.gov.ie
- Romania - cert.ro
- Russia - gov-cert.ru / cert.ru
- Singapore - csa.gov.sg/singcert
- Slovenia - sk-cert.sk
- South Korea - krcert.or.kr
- Spain - incibe.es
- Sri Lanka - cert.gov.lk
- Sweden - cert.se
- Switzerland - govcert.ch
- Taiwan - twcert.org.tw
- Thailand - thaicert.or.th
- Tonga cert.to
- Ukraine - cert.gov.ua
- UAE - tra.gov.ae/aecert
- United Kingdom - ncsc.gov.uk
- United States - us-cert.gov

Mega Guides

More Awesome GitHub Lists

Awesome Open Source Apps
- awesome-windows-apps
- awesome-macOS-apps by @iCHAIT
- awesome-linux-software by @luong-komorebi
- open-source-ios-apps by @dkhamsing
- open-source-android-apps by @pcqpcq
- awesome-selfhosted
- privacy-respecting by @nikitavoloboev
- awesome-privacy by @KevinColemanInc
- security-checklist: privacy-respecting-software
Security (Hacking / Pen Testing / Threat Inteligence / CFTs)
- Security_list by @zbetcheckin
- awesome-security by @sbilly
- awesome-sec-talks by @PaulSec
- awesome-threat-intelligence by @hslatman
- awesome-incident-response by @meirwah
- awesome-anti-forensic by @remiflavien1
- awesome-malware-analysis by @rshipp
- awesome-honeypots by @paralax
- awesome-hacking by @carpedm20
- awesome-pentest by @enaqx
- awesome-ctf by @apsdehal
Misc
- awesome-crypto-papers by @pFarb
Awesome Lists of Awesome Lists
awesome by @sindresorhus
lists by @jnv

Thanks for visiting, hope you found something useful here :) Contributions are welcome, and much appreciated - to propose an edit raise an issue, or open a PR. See: CONTRIBUTING.md.

Found this helpful? Consider sharing it with others, to help them also improve their digital security 😇

31 KiB Raw Blame History Unescape Escape