A curated list of resources across Computer Science, Web Development, Security, and more. Maintained as a living document — updated as new links are added.
Computer Science & Development
- Systems & Low-Level
- Linux & Command Line
- Algorithms & Data Structures
- Web & Software Development
- Real-Time & Media
- 3D & Graphics
- AI & Machine Learning
- Security
- OSINT
- Architecture & Infrastructure
- UI & Design
- Open Source & Dev Practice
- Awesome Lists
- Community & Threads
- Education
Other Fields
- Beej's Guides — Practical, well-written guides covering network programming, C, and more. A classic.
- Write a Shell in C — Step-by-step tutorial by Stephen Brennan on building a Unix shell from scratch in C.
- Unicorn Engine — Lightweight, multi-architecture CPU emulator framework.
- Cloud Hypervisor — Open source VMM for running modern cloud workloads on KVM.
- 1xBTS — Open source CDMA2000 cellular network implementation.
- System Design Primer - Learn how to design large-scale systems.
- System Design Pattern - Resources related to distributed systems, system design, etc.
- OverTheWire Wargames — Browser-accessible security wargames for learning Linux and exploitation fundamentals hands-on.
- The Missing Semester of Your CS Education — MIT course covering the tools and workflows CS programs don't teach: shell, git, editors, and more.
- Sysinternals - Technical resources and utilities to manage, diagnose, troubleshoot, and monitor a Microsoft Windows environment.
- Operating Systems: Three Easy Parts - The book is centered around three conceptual pieces that are fundamental to operating systems: virtualization, concurrency, and persistence.
- Linuxize — Practical Linux tutorials and command references.
- GNU Bash Manual — Official reference for the Bash shell.
- Bash Guide - This is a practical guide which, while not always being too serious, tries to give real-life instead of theoretical examples.
- Linux Foundation Training — Official training and certification programs from the Linux Foundation.
- Bash Cheat Sheet — Comprehensive quick-reference for Bash scripting and command line usage.
- VisuAlgo — Interactive visualizations for sorting, graphs, trees, and other algorithms.
- Javascript Algorithms - Algorithms and data structures implemented in JavaScript with explanations.
Tooling that shapes how you build — editors, versioning, process management, observability.
- Zed — High-performance, multiplayer code editor built in Rust.
- Kakoune — Modal text editor with a focus on interactive, selection-first editing. An alternative take on vi-style editing.
- fnm — Fast Node.js version manager built in Rust.
- npq — Safely install npm packages by auditing them before install.
- Socket Optimize — Supply-chain security tool that flags and swaps out risky or malicious npm packages.
- PM2 — Production process manager for Node.js with built-in load balancing and monitoring.
- React Scan - Scan and fix React performance issues.
- ELK Stack - Elasticsearch and Kibana pave the way for diverse use cases that start with logging and span as far as your imagination takes you.
- Backstage.io - An open source framework for building developer portals.
What ships inside the app itself.
- Relay - Relay is a JavaScript framework for building data-driven React applications.
- Fate - Fate is a modern data client for React.
- React Bits — Collection of React patterns, techniques, and tips.
- Motion — Animation library for the web (formerly Framer Motion's standalone release).
- Anime.js — Lightweight JavaScript animation library with a simple but powerful API.
- React-Window - React components for efficiently rendering large lists and tabular data.
- pg-boss — Job queueing library for Node.js backed by PostgreSQL.
- Design Patterns PHP - This is a collection of known design patterns and some sample code how to implement them in PHP.
- LiveKit — Open source infrastructure for real-time audio, video, and data. WebRTC at scale.
- openWakeWord — Open-source wake word and phrase detection framework focused on performance and simplicity.
- Three.js — JavaScript library for creating 3D graphics in the browser using WebGL.
- SuperSplat — Browser-based 3D Gaussian splat editor by PlayCanvas.
- Gaussian Splatting — Official implementation of the SIGGRAPH 2023 paper on real-time 3D Gaussian splatting for novel view synthesis.
- RodinHD — High-fidelity 3D avatar generation using diffusion models. (ECCV 2024)
- glTF-Transform — Read, edit, and write 3D models in glTF/GLB format via Node.js or CLI.
- LlamaIndex — Data framework for connecting LLMs to external data sources and building RAG pipelines.
- LangChain — Framework for building LLM-powered applications with chains, agents, and memory.
- Weights & Biases — ML experiment tracking, model monitoring, and dataset versioning platform.
- Unsloth — Fine-tuning framework for LLMs, focused on speed and low memory usage.
- LM Studio JS — JavaScript SDK for interacting with LM Studio's local model runtime.
- OpenHands — Platform for AI-powered software development agents.
- opencode — Open source AI coding agent for the terminal.
- Pi — Personal AI development environment.
- Odysseus — Self-hosted AI workspace.
- Locally Uncensored — All-in-one local AI app for chat, image generation, and video creation. Powered by Ollama & ComfyUI.
- Voicebox — Open-source AI voice studio for cloning, dictation, and creation.
- Hermes Agent — Agentic framework by Nous Research built on the Hermes model series.
- LingBot World — Open-source world model research.
- Deep Live Cam — Real-time face swap and deepfake video tool.
- Niantic Spatial - Robots, agents, and autonomous systems need world models grounded in physics and geometry, not imagination.
- Artificial Analysis — Independent benchmarks comparing LLM quality, speed, and cost across providers.
- LLM Stats — Live stats and rankings across major language models.
- OSV Scanner — Google's open source vulnerability scanner for project dependencies.
- OWASP Cheatsheet - A concise collection of high value information on specific application security topics.
- CyberDefenders — Blue team training platform with real-world DFIR and SOC challenges.
- Wazuh — Open source SIEM and XDR platform for threat detection, monitoring, and response.
- Security Onion — Open source Linux distro for enterprise security monitoring, threat hunting, and log management.
- Splunk BOTS (Boss of the SOC) — Gamified blue team training environment and dataset for SOC skill-building.
- Splunk Attack Range v4 — Framework for emulating attacks and building/testing detections.
- Tesla XSS Bug Bounty Write-up — SecurityWeek coverage of a researcher-found XSS vulnerability in Tesla's infrastructure.
- Cloudflare July 2019 Outage — Regex Backtracking — Cloudflare's post-mortem on a global outage caused by catastrophic regex backtracking (ReDoS).
- PayloadsAllTheThings — Extensive list of payloads and bypass techniques for web application security testing.
- SecLists — Collection of wordlists for security testing: usernames, passwords, URLs, fuzzing data, and more.
- Pentest Book — Comprehensive pentesting methodology and notes.
- Pentest Wiki — Free online security knowledge base for pentesters and researchers.
- InternalAllTheThings — Active Directory and internal network attack techniques reference.
- sqlmap — Automatic SQL injection detection and exploitation tool.
- Shannon (Lite) — Autonomous AI-powered white-box pentester for web apps and APIs.
- Deep Eye — AI-driven vulnerability scanner integrating multiple LLM providers for automated bug hunting and payload generation.
- PANIX — Customizable Linux persistence tool for security research and detection engineering.
- BloodHound Legacy — Active Directory attack path analysis tool by SpecterOps.
- Seatbelt — C# situational awareness tool for Windows post-exploitation enumeration.
- JAWS — PowerShell-based Windows local privilege escalation enumeration script.
- Reconmap — Collaborative penetration testing and vulnerability management platform.
- OmniProx — IP rotation tool across GCP, Azure, Alibaba, and Cloudflare. Think FireProx but multi-provider.
- Impacket — Python library for working with network protocols; widely used in AD exploitation.
- Pwnagotchi — AI-powered Raspberry Pi tool for Wi-Fi handshake capture via passive monitoring.
- Bjorn — Network scanning and offensive security tool for Raspberry Pi with e-Paper display support.
- MSOLSpray — Password spraying tool targeting Microsoft Online (Azure AD / O365).
- EntraSpray — Password spraying tool targeting Microsoft Entra ID.
- TeamFiltration — Cross-platform framework for enumerating, spraying, and exfiltrating from Microsoft Teams and O365.
- Shodan Cheat Sheet — Quick reference for Shodan search operators and filters.
- BuiltWith - Find out what websites are Built With.
- WhatWeb - Scan your domain or IP address to identify content management systems, JavaScript libraries, web servers, and more.
- Wappalyzer - Find accounts by the technologies they use.
- OSINT Framework — Visual map of OSINT tools and techniques organized by category.
- Awesome OSINT — Curated list of OSINT tools, resources, and techniques.
- TCM OSINT Resources — Resource list from TCM Security's OSINT course.
- SpiderFoot — Automated OSINT and attack surface monitoring platform.
- Maltego — Link-analysis and data-gathering platform for OSINT investigations and threat intelligence.
- GhostTrack — OSINT tool for tracking and gathering intelligence on targets.
- The Map of System Topologies — Visual breakdown of system design patterns and topologies.
- Deployment Strategies: Types, Trade-offs, and How to Choose — CircleCI breakdown of blue/green, canary, rolling, and other deployment models.
- Shadcn — A set of beautifully designed components that you can customize, extend, and build on.
- Huemint — AI-powered color palette generator for branding and UI.
- Fluid Type Scale — Generate CSS clamp-based fluid typography scales.
- Nodejs Best Practices - The Node.js best practices list (July 2026).
- GitHub Open Source Guide — Best practices for launching and maintaining open source projects.
- Microsoft Engineering Playbook — Microsoft's internal engineering best practices: code reviews, CI/CD, testing, agile, and more.
- Awesome Algorithms — Curated resources for learning and practicing algorithms.
- Awesome Database Learning — Papers, books, and courses on database internals and theory.
- Awesome APIs — Collection of public APIs organized by category.
- Awesome Fuzzing — Curated list of fuzzing resources, tools, and tutorials.
- Awesome Node.js — Sindre Sorhus's curated list of Node.js packages and resources.
- Awesome React — Comprehensive collection of React ecosystem tools, libraries, and learning resources.
- Awesome Agent Skills — Skills, tools, and capabilities for AI coding agents (Claude, Codex, Copilot, VS Code).
- Awesome Software Engineering - A curated list of awesome software engineering resources.
- Repos for Software Engineering Study - Some of the top GitHub repositories that are absolute goldmines.
Certifications and structured learning materials, grouped by the topic they support.
- DevSecOps Professional - Certification teaches you to build automated security pipelines, manage vulnerabilities at scale, and drive the cultural change needed to make security everyone's responsibility.
- GIAC GWAPT Certification — Web Application Penetration Tester certification by GIAC.
- Real-World Bug Hunting (PDF) — Peter Yaworski's field guide to web hacking and bug bounty hunting.
- Metasploit Unleashed — Free, comprehensive guide to Metasploit from Offensive Security.
- ISC2 - A non-profit organization which specializes in training and professional certifications for cybersecurity professionals.
- Digital Skills & Job Platforms - The Cyber Skills Academy is an EU initiative aiming at addressing the growing cybersecurity skills and talent shortage in Europe.
- Kubernetes KCNA - Proving you understand cloud native ecosystems will help you land that dream job.
- Github Actions - This exam is designed for DevOps engineers, software developers, and IT professionals.
- Terraform Associate - Demonstrate your advanced Terraform production experience with the Terraform Authoring and Operations Professional certification.
- AWS AI Practicioner - Validates in-demand knowledge of artificial intelligence (AI), machine learning (ML), and generative AI concepts and use cases.
- AWS Cloud Practicioner - This is a good starting point on the AWS Certification journey for individuals with no prior IT or cloud experience switching to a cloud career or for line-of-business employees looking for foundational cloud literacy.
- Linux Foundation IT Associate - It is ideal for those getting started in an IT career as an administrator/engineer.
- Attention Is All You Need — The original transformer paper by Vaswani et al. (2017). Foundational reading for understanding modern LLMs.
- Prompt Injection Attacks - A Systematic Analysis of Vulnerabilities in Skills, Tools, and Protocol Ecosystems.
- Neural Networks: Zero to Hero — Karpathy — Andrej Karpathy's ground-up video series on building neural networks from scratch.
- AI Engineer Roadmap — Structured roadmap for becoming an AI engineer, from fundamentals to deployment.
- CS50 AI — Harvard's introduction to AI with Python. Covers search, knowledge, learning, neural networks, and language.
- Elements of AI - The Elements of AI is a series of free online courses created by MinnaLearn and the University of Helsinki.
- Microsoft AI For Beginners — Open-source curriculum from Microsoft covering AI fundamentals across 24 lessons.
- Prompt Engineering - Prompt engineering skills help to better understand the capabilities and limitations of large language models.
- Agents.md - A dedicated, predictable place to provide the context and instructions to help AI coding agents work on your project.
- Agent Skills — Learn how a standardized way to give AI agents new capabilities and expertise works.
- Skills.sh — Reusable capabilities for AI agents. Install them with a single command.
- Universidade Aberta - Established in 1988, Universidade Aberta (UAb) is the single public distance education university in Portugal.
- You Don't Know JavaScript - A book series (2 published editions) on the JS language.
- Structure and Interpretation of Computer Programs - It teaches fundamental principles of computer programming, including recursion, abstraction, modularity, etc...
- Software Engineering - A broad perspective on software processes, requirements, and design.
- Computer Networking A Top-Down Approach - Introduces this complex subject in a top-down manner, proceeding from the application layer toward the physical layer and familiarizing you with important concepts early in your study.
- Cracking the Code Interview - Gives you the interview preparation you need to get the top software developer jobs.
- Full Stack Open — Free deep-dive course from the University of Helsinki covering React, Node, GraphQL, TypeScript, and more.
- Vercel Academy — Structured learning resources from Vercel covering Next.js, deployment, and frontend infrastructure.
- Build Your Own X - Master programming by recreating your favorite technologies from scratch.
- Patterns.dev — React — In-depth guide to React design patterns and rendering strategies.
- RFC 9110 — HTTP Semantics — The current IETF standard defining HTTP semantics, shared across HTTP/1.1, HTTP/2, and HTTP/3.
- Encrypted DNS in Browsers — Cloudflare — Reference on DNS-over-HTTPS and how browsers implement encrypted DNS.
- How to Set Up a Raspberry Pi Email Server — SunFounder step-by-step guide for self-hosting an email server on a Pi.
- LoL Esports Broadcasting Guide — Practical tips for high-quality esports streams: OBS setup, audio management, and scene switching.
- Streams Charts — Live streaming analytics across Twitch, YouTube, Kick, and more.
- Twitch Tracker — Historical and current game viewership statistics on Twitch.
- Twitch Metrics — Game viewership trends and channel analytics for Twitch.
- Social Blade — Creator growth tracking across Twitch, YouTube, TikTok, and other platforms.
- KickStats — Viewer and streamer statistics for the Kick platform.
- Steam Charts — Concurrent player statistics for Steam games over time.
- SullyGnome — Detailed Twitch analytics: hours watched, peak viewers, and game trends.
- Psychology of Games — Applied psychology concepts through the lens of video games.
- The Psychological Appeal of Video Games (NIH) — Peer-reviewed paper on motivation, flow, and need satisfaction in gaming contexts.
- Exploring the Psychology of Gaming — Greater Manchester overview of cognitive and behavioral research around gaming habits.
Non-technical reading, and writing/music-adjacent tools — kept as one topic since it's not meant to expand.
- The Demon-Haunted World — Carl Sagan — Sagan's case for scientific thinking and skepticism. Free on the Internet Archive.
- Tolkien Gateway - The Tolkien Gateway is a fan wiki that documents J. R. R. Tolkien's fantasy world of Middle-earth.
- Psychological Types — C.G. Jung — Jung's foundational work on psychological typology and individuation. Free on the Internet Archive.
- Psychology and Alchemy — C.G. Jung — Volume 12 of Jung's Collected Works. Explores alchemical symbolism as a map of the unconscious.
- Beyond Music Theory — Cadences and Negative Harmony — Theory deep dive on cadences and the concept of negative harmony.
- Psychology of Intelligence Analysis - Interesting application of cognitive psychology and decision analysis in intelligence analysis.
- Information Theory — Britannica — Overview of information theory concepts, including their application to physiological/neural signaling.
- Pro Writing Aid - ProWritingAid helps you craft, polish, and elevate your writing.
Last updated: July 2026