corelight/threat-hunting-guideStructured guide to threat hunting using Zeek logs, aligned with MITRE ATT&CK framework for proactive detection of adversary tactics and techniques.
paulveillard/cybersecurity-interview-questionsA collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about Interview for Security &…
owasp/security-championsOWASP guide for security champions, providing curated resources and learning paths to foster security culture and practices within development teams.
osxninja/cybersecurity-projectsThis repository contains the complete record of my three-year research journey, covering the project from foundational concepts to advanced-level…
owasp/threat-modeling-playbookStructured playbook for integrating threat modeling into product security, covering stakeholder buy-in, organizational embedding, training, process…
owasp/vulnerable-container-hubVULCONHUB provides access to files to build your own hands-on vulnerable container image to learn and practice security
owasp/application-security-curriculumStructured curriculum for learning application security, covering secure coding, threat modeling, and DevSecOps practices. Designed for self-paced…
ransomleak/training-application-securityInteractive secure coding training with hands-on SCORM exercises covering OWASP Top 10 web and API vulnerabilities, Git/secrets exposure, and…
excalibra/cybersecurity-interview-questionsCurated collection of 200+ cybersecurity interview questions and answers covering Red Team, Blue Team, Web Security, Incident Response, and network…
parasimpaticki/awesome-appsec-interviewA curated list of resources, practice questions, and study materials to help you prepare for Application Security (AppSec) interviews
100daysofyara/2022Daily YARA rule challenge and community collection where malware analysts share detection patterns, tips, and unconventional YARA uses to advance…
cliffe/breakescapeMountable Rails engine providing 24+ cybersecurity escape room scenarios with randomized passwords, JIT-compiled NPC dialogue, and RESTful API for…
tandasat/tandasat.github.ioRemote hypervisor development class for security researchers; covers virtualization internals, hypervisor security, and vulnerabilities in privileged…
bripwn/threathunting-jupyternotebooksA collection of threat hunting and detection engineering Jupyter notebooks accompanying the Weekly Purple Team YouTube channel. Each notebook…
royaleybovich/cve-2026-3854-labLocal intentionally vulnerable lab with a guided workshop and CTF challenges for practicing Git push-option RCE, unsafe deserialization,…
anthonydavidson189/free-interactive-ai-training-materialsCurated collection of free, interactive AI-powered training materials for security awareness education, with community contributions and practical…
erupmi/cve-2018-4416-exploitEducational walkthrough of CVE-2018-4416, a WebKit JavaScriptCore type confusion vulnerability, with PoC, debugging setup, and analysis of common…
anonymousplanetorg/thgtoaComprehensive, open-source guide teaching online anonymity, OpSec, and identity protection techniques for activists, journalists, and…
