awesome-cybersec
dhotrey/awesome-cybersecA collection of awesome platforms, blogs, documents, books, resources and cool stuff about security
ctfcurated-resourceseducation+8
194
dhotrey/awesome-cybersecA collection of awesome platforms, blogs, documents, books, resources and cool stuff about security
bwasp/bwaspBoB Web Application Security Project
security-prince/resources-for-application-securitySome good resources for getting started with application security
xu-xiang/awesome-security-vul-llm本项目通过大模型联动爬虫，检索Github上所有存有有价值漏洞信息与漏洞POC或规则信息的项目，并自动识别项目的目录结构、Readme信息后进行总结分析并分类，所汇总的项目可以帮助安全行业从业者收集漏洞信息、POC信息、规则等。
moeinfatehi/xss_vulnerability_challengesDockerized PHP application providing hands-on XSS vulnerability challenges and bypass examples, including WAF, blacklist, and JavaScript validation…
crucible-security/cruciblepytest for AI agents - Autonomous red-teaming, behavioral monitoring & security testing for LLM agents
vhscom/private-landing🔐 Learn authentication by building it right. An extensible, standards-compliant reference implementation for Cloudflare Workers with Hono, Turso,…
kryptsec/oasisOpen-source AI security benchmarking CLI. Measure how AI models perform offensive security tasks with MITRE ATT&CK analysis and KSM scoring.
sonuoffsec/dvapAn OWASP-aligned intentionally vulnerable platform for learning and testing AI, LLM, RAG, MCP, and Agentic AI security.
pie-script/llm-agent-testbedAn empirical security testbed evaluating prompt injection, confused-deputy vulnerabilities, and tool-calling defenses in LLM agents.
fallen-angel-systems/fas-judgement-ossOpen-source prompt injection attack console. Test AI security by firing categorized attacks at any endpoint.
cyber-note/cve-2026-34835-black-box-analysisA black-box (DAST) security analysis of CVE-2026-34835 focusing on external validation methodology, observable behavior, security impact, and…
mickmicksh/chub-supply-chain-pocSilent dependency injection through AI documentation pipelines. 240 isolated Docker runs proving Context Hub's zero-sanitization MCP server lets…
owasp/mastgComprehensive OWASP guide for mobile app security testing, reverse engineering, and verifying MASVS/MASWE weaknesses through static, dynamic, and…
owasp/top10Official OWASP Top 10 Document Repository
owasp/nodegoatThe OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how…
owasp/railsgoatA vulnerable version of Rails that follows the OWASP Top 10
owasp/www-project-top-10-for-large-language-model-applicationsOWASP Top 10 for Large Language Model Apps (Part of the GenAI Security Project)