twpayne/chezmoi

KeePassXC is a free, open-source, cross-platform password manager that stores credentials in a local encrypted KDBX file, with built-in TOTP codes, YubiKey authentication, and browser integration for autofill.

mkcert generates trusted localhost certificates by creating a local CA and installing it in the system trust store—no manual configuration required. It supports wildcards, IP addresses, and S/MIME, and works on macOS, Linux, Windows, Firefox, Chrome, and Java. Mobile devices and Node.js need extra steps: manually install the CA on iOS/Android, and set NODE_EXTRA_CA_CERTS for Node. Guard the rootCA-key.pem—anyone with it can intercept your traffic.

x64dbg is an open-source debugger for Windows built to inspect executables you don't have source code for, aimed squarely at reverse engineering and malware analysis. It ships as separate 32-bit and 64-bit builds, bundles disassembly, assembly patching, and import reconstruction into one download, and can be extended through a documented plugin system.

How To Secure A Linux Server is a free, GitHub-hosted guide that walks home-server owners through hardening steps in a specific order - SSH keys and root login first, then automatic updates, GRUB, and a firewall - using copy-paste apt commands and pointing to the CIS Benchmarks for anything more advanced.