
modo
Curated collection of cybersecurity learning resources, CTF writeups, research papers, and practical labs for hands-on skill development across web…

Curated collection of cybersecurity learning resources, CTF writeups, research papers, and practical labs for hands-on skill development across web…

Some good resources for getting started with application security

Security training for the apps you actually ship. Open your browser and start hacking.

Vulnerable environments paired with ready-to-use Nuclei templates for security testing and learning! 🚀

This guide describes a process for developing Cyber Threat Intelligence Priority Intelligence Requirements

OWASP guide for security champions, providing curated resources and learning paths to foster security culture and practices within development teams.

Learning and hunting SQL injection bugs for 50 continuous days

A curated list of Web3 Security materials and resources for Pentesters and Bug Hunters.

A collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about Interview for Security &…

Structured guide to threat hunting using Zeek logs, aligned with MITRE ATT&CK framework for proactive detection of adversary tactics and techniques.

Structured curriculum for learning application security, covering secure coding, threat modeling, and DevSecOps practices. Designed for self-paced…

Structured playbook for integrating threat modeling into product security, covering stakeholder buy-in, organizational embedding, training, process…

Atomic web vulnerability labs. One OWASP flaw per app — minimal Flask + Docker, intentionally broken for hands-on study with Burp Suite.

Header-only C++2x compile-time assembler for x86/x86-64 instruction encoding

A Framework for Integrating Application Security into Software Engineering (FIASSE) using the Securable Software Engineering Model (SSEM)

Take first steps in CodeQL for Python by writing a query to find CVE-2024-32022

Deliberately vulnerable Android app for mobile security research and bug bounty practice - OWASP Mobile Top 10

Mountable Rails engine providing 24+ cybersecurity escape room scenarios with randomized passwords, JIT-compiled NPC dialogue, and RESTful API for…