botesjuan/burp-suite-certified-practitioner-exam-studyPractical study notes and walkthroughs for PortSwigger Academy labs, covering web vulnerabilities, payloads, enumeration, and BSCP exam strategies.
iknowjason/awesome-cloudsec-labsAwesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.
xalgord/massive-web-application-penetration-testing-bug-bounty-notesA comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying…
netlas-io/netlas-cookbookThe goal of this guide is very simple - to teach anyone interested in cyber security, regardless of their knowledge level, how to make the most of…
gmh5225/awesome-ai-securityA curated list of AI Security materials and resources for Pentesters, Bug Hunters, and Security Researchers.
koadt/oss-oopssec-storeSecurity training for the apps you actually ship. Open your browser and start hacking.
security-prince/resources-for-application-securitySome good resources for getting started with application security
projectdiscovery/nuclei-templates-labsVulnerable environments paired with ready-to-use Nuclei templates for security testing and learning! 🚀
owasp/fiasseA Framework for Integrating Application Security into Software Engineering (FIASSE) using the Securable Software Engineering Model (SSEM)
parasimpaticki/awesome-appsec-interviewA curated list of resources, practice questions, and study materials to help you prepare for Application Security (AppSec) interviews
fallen-angel-systems/fas-judgement-ossOpen-source prompt injection attack console. Test AI security by firing categorized attacks at any endpoint.
viralmaniar/vulnvaultDeveloper-focused knowledge base of application security vulnerabilities with insecure vs secure code examples, prevention guidance, and OWASP/CWE…
hslatman/awesome-threat-intelligenceCurated directory of threat intelligence sources, feeds, frameworks, tools, and research for SOC/CTI teams—covering IOCs, STIX/TAXII formats, and…
hacktricks-wiki/hacktricksWelcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
daffainfo/allaboutbugbountyAll about bug bounty (bypasses, payloads, and etc)
bc-security/beginners-guide-to-obfuscationHands-on red-team obfuscation workshop teaching AMSI bypass, ETW evasion, and payload obfuscation with PowerShell, Visual Basic, and C# to evade…
nebulock-inc/agentic-threat-hunting-frameworkATHF is a framework for agentic threat hunting - building systems that can remember, learn, and act with increasing autonomy.
trailofbits/testing-handbookTrail of Bits Testing Handbook - appsec.guide
