
Agentic-Evidence
OWASP reference project for agentic AI security evidence: correlates agent execution, identity, tool calls, and authorization decisions into…

OWASP reference project for agentic AI security evidence: correlates agent execution, identity, tool calls, and authorization decisions into…

Compiles EAC and EOC anti-cheat SDKs, reversing research, and code resources to study how game anti-cheat systems integrate and operate.

Curated OSINT compilation on Log4Shell (CVE-2021-44228) covering detection methods, attack surface, mitigation steps, and indicators of compromise…

A list of covert channels and steganography/steganalysis resources (books, papers & tools)

Summary of Cyber Security interview questions I have been through, hope this helps

This OSINT Notebook provides an overview of the tools, techniques, and resources that I use for a variety of situations when it comes to performing…

A curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices

Tips on how to write exploit scripts (faster!)

These templates are suggestions of how the Obsidian notetaking tool can be used during an OSINT investigation. The example data in those files should…

A list of edge cases that occur in bug bounty programs, conversations on how they should be handled. The goal is to standardise the way that specific…

This is a repo which documents real bugs in real software to illustrate trends, learn how to prevent or find them more quickly.

The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.

A curated list of awesome OSCP resources

Evilginx Phishing Infrastructure Setup Guide - Securing Evilginx and Gophish Infrastructure, Removing IOCs, Phishing TTPs

How CVE-2025-29774 Vulnerabilities and the SIGHASH_SINGLE Bug Threaten Multi-Signature Wallet Operational Methods with Fake RawTX

Artefacts for blog post on finding CVE-2025-37899 with o3

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

A curated list of Android Security materials and resources For Pentesters and Bug Hunters