helixar-ai/mcp-security-checklistMCP is being adopted rapidly. Security guidance is lagging behind. This checklist gives security engineers, platform teams, and technical leaders a…
roxanne_ardary/quantumlockQuantumLock is an open-source, quantum-resistant Bitcoin protocol designed to protect digital assets from future quantum computing threats. Featuring…
microsoft/agent-governance-toolkitPolicy enforcement, zero-trust identity, execution sandboxing, and audit logging for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10 with…
daffainfo/allaboutbugbountyAll about bug bounty (bypasses, payloads, and etc)
shieldfy/api-security-checklistChecklist of the most important security countermeasures when designing, testing, and releasing your API
cloud-architekt/azuread-attack-defenseThis publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can…
ignitetechnologies/burpsuite-for-pentesterThis cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 solely and…
merill/awesome-entra😎 Awesome list of all things related to Microsoft Entra
harsh-bothra/securityexplainedSecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create…
nexaiceo/nexus-osThe Governed Agentic AI Operating System — Rust + Tauri 2.0 | 65 crates, 658 commands, 84 pages, 5,029 tests, 10/10 OWASP
chaitanyagarware/cve-2026-54519Public advisory landing page for CVE-2026-54519: missing ownership checks in ai-agent-automation memory APIs enabling cross-user memory read and…
shoucheng3/apache__jspwiki_cve-2019-10077_2_11_0_m4_fixedFixed version of Apache JSPWiki 2.11.0-M4 addressing CVE-2019-10077, a Java-based wiki with JAAS security integration and detailed access control.
bogdanrotariu/cve-2026-29204-whmcs-clientarea-addonidProvides community notes and an optional temporary hook to guard against CVE-2026-29204, a WHMCS client area addonId ownership vulnerability, with…
threedr3am/learnjavabugJava安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security…
0xmaximus/galaxy-bugbounty-checklistTips and Tutorials for Bug Bounty and also Penetration Tests.
elementalsouls/claude-bughunterA Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24…
taleliyahu/threat_model_examplesA collection of real-world threat model examples across various technologies, providing practical insights into identifying and mitigating security…
n3oari/bscp-exam-guide-by-n3oari-2026Burp Suite Certified Practitioner - Portswigger - My notes - Guide
