#1Curricula, courses, and structured paths for learning cybersecurity, defensive security, and authorized testing.
Kitploit recommended
owasp/threat-modeling-playbookStructured playbook for integrating threat modeling into product security, covering stakeholder buy-in, organizational embedding, training, process…
owasp/secure-coding-practices-quick-reference-guideThe Secure Coding Practices Quick-reference Guide from OWASP
doretox/atomicvulnsAtomic web vulnerability labs. One OWASP flaw per app — minimal Flask + Docker, intentionally broken for hands-on study with Burp Suite.
g-les/100daysofyara100 Days of YARA to be updated with rules & ideas as the year progresses
owasp/security-championsOWASP guide for security champions, providing curated resources and learning paths to foster security culture and practices within development teams.
owasp/vulnerable-container-hubVULCONHUB provides access to files to build your own hands-on vulnerable container image to learn and practice security
mahmoudimus/static_asmHeader-only C++2x compile-time assembler for x86/x86-64 instruction encoding
sylwia-budzynska/codeql-workshopTake first steps in CodeQL for Python by writing a query to find CVE-2024-32022
owasp/fiasseA Framework for Integrating Application Security into Software Engineering (FIASSE) using the Securable Software Engineering Model (SSEM)
ransomleak/training-application-securityInteractive secure coding training with hands-on SCORM exercises covering OWASP Top 10 web and API vulnerabilities, Git/secrets exposure, and…
100daysofyara/2022Daily YARA rule challenge and community collection where malware analysts share detection patterns, tips, and unconventional YARA uses to advance…
anpa1200/aidebugEvidence-focused malware reverse engineering with deep PE/.NET inspection, Ghidra reconstruction, AI cross-checks, YARA, and ELF debugging
owasp/owasp-learning-gatewayOWASP Learning Gateway Project
parasimpaticki/awesome-appsec-interviewA curated list of resources, practice questions, and study materials to help you prepare for Application Security (AppSec) interviews
zilbonn/owasp-wstg-ragOWASP Web Security Testing Guide RAG system with ChromaDB, MCP for Claude Code
b4sith-sec/gu3ssweakDeliberately vulnerable Android app for mobile security research and bug bounty practice - OWASP Mobile Top 10
cliffe/breakescapeMountable Rails engine providing 24+ cybersecurity escape room scenarios with randomized passwords, JIT-compiled NPC dialogue, and RESTful API for…
