
static-analysis
Curated directory of static analysis (SAST) tools and linters for programming languages, configs, build tools, and CI, focused on improving code…

Curated directory of static analysis (SAST) tools and linters for programming languages, configs, build tools, and CI, focused on improving code…

A curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices

Benchmark suite and code for detecting AI alignment failures, with 44 benchmarks across ten failure types and a zero-shot RLCD detector evaluated on…

Curated dashboard for browsing recent V8 vulnerability patterns, parsing regression test files with linked Chromium bug reports, code reviews, and…

Repository containing the DSpace 4.4 source code with a focus on CVE-2016-10726, providing a reference for vulnerability analysis and educational…

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

The community's most comprehensive, continuously-updated index of research on Large Language Models for software vulnerability detection — papers…

Technical dossier on the DPRK-linked PolinRider supply-chain attack, documenting obfuscated JS payload injection, git history manipulation, C2…

A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.

Trail of Bits Testing Handbook - appsec.guide

Awesome list of step by step techniques to achieve Remote Code Execution on various apps!

Technical webinars on reverse engineering, malware analysis, and software protection.

Homemade Pwnbox :rocket: / Rogue AP :satellite: based on Raspberry Pi — WiFi Hacking Cheatsheets + MindMap :bulb:

I Found a Zero-Day Vulnerability in OpenClaw — Here’s How It Went

Grand Theft Auto V for PC allows attackers to achieve partial remote code execution or modify files on a PC, as exploited in the wild in January…

A dope AF repo of all customized plugins & configurations I use as seen on my socials / YouTube. Helpful guides and troubleshooting too.

Collection of malware source code for a variety of platforms in an array of different programming languages.

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.