bb1nfosec/information-security-tasksCurated infosec knowledge base of practitioner notes, methodologies, and daily-updated CVE, news, and tool digests organized by offensive, defensive,…
nishikawaakira/waf-dojoHands-on AWS WAF training game with tutorials, scored labs, and exams where players write Web ACL rules to block real attack shapes while avoiding…
akil-x/r00tlib-catalogA community-curated knowledge hub and catalog for computer science, cybersecurity & software engineering books
simplerhacking/evilginx3-phishletsThis repository provides penetration testers and red teams with an extensive collection of dynamic phishing templates designed specifically for use…
firmianay/ctf-all-in-oneOpen-source CTF guidebook covering Pwn, reverse engineering, and web security, with structured chapters, worked examples, and tooling setup for…
mevislobo2006/threatripperOffline heuristic analyzer that scores suspicious SMS, chat messages and links for scam and phishing indicators, explaining each warning sign with…
genai-security-project/genai-llm-top10OWASP Top 10 for Large Language Model Applications
owasp/bltMonorepo of OWASP Bug Logging Tool projects: crowd-sourced vulnerability reporting, bug bounty workflows, CVE namespace, autopatching, and security…
rdelasierra-uy/portfolioVitrina profesional: writeups de Hack The Box, informes, casos de estudio GRC (ISO 27001/27002/27005/27035, ISO 31000 + MAGERIT), scripts de…
slowmist/knowledge-baseCurated knowledge base of blockchain security research, audit reports, guides, and translations covering smart contracts, cryptography, and AI…
cyber-courses/cyber-libraryCommunity-maintained Markdown knowledge base covering cybersecurity foundations, offensive and defensive practice, governance, threat intelligence,…
gmh5225/kernel-ctfCollection of Linux kernel exploitation CTF challenges covering buffer overflow, use-after-free, and race condition vulnerabilities for hands-on…
b4sith-sec/gu3ssweakDeliberately vulnerable Android app for mobile security research and bug bounty practice - OWASP Mobile Top 10
mister-iks/pcybox-attackgraphOpen source browser lab to build a simulated infrastructure, watch an attack move through it, and check whether your defense works.
owasp/android-security-masterclassOWASP hands-on Android security training lab with 78 MASVS/MASTG modules pairing vulnerable, secure, and attacker apps to demonstrate mobile…
doretox/atomicvulnsAtomic web vulnerability labs. One OWASP flaw per app — minimal Flask + Docker, intentionally broken for hands-on study with Burp Suite.
anpa1200/aidebugEvidence-focused malware reverse engineering with deep PE/.NET inspection, Ghidra reconstruction, AI cross-checks, YARA, and ELF debugging
fabacab/awesome-cybersecurity-blueteam:computer:🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.
