
awesome-web3-security
A curated list of Web3 Security materials and resources for Pentesters and Bug Hunters.

A curated list of Web3 Security materials and resources for Pentesters and Bug Hunters.

Learning and hunting SQL injection bugs for 50 continuous days

Structured guide to threat hunting using Zeek logs, aligned with MITRE ATT&CK framework for proactive detection of adversary tactics and techniques.

A collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about Interview for Security &…

This repository contains the complete record of my three-year research journey, covering the project from foundational concepts to advanced-level…

Structured curriculum for learning application security, covering secure coding, threat modeling, and DevSecOps practices. Designed for self-paced…

Structured playbook for integrating threat modeling into product security, covering stakeholder buy-in, organizational embedding, training, process…

OWASP guide for security champions, providing curated resources and learning paths to foster security culture and practices within development teams.

VULCONHUB provides access to files to build your own hands-on vulnerable container image to learn and practice security

Interactive secure coding training with hands-on SCORM exercises covering OWASP Top 10 web and API vulnerabilities, Git/secrets exposure, and…

Daily YARA rule challenge and community collection where malware analysts share detection patterns, tips, and unconventional YARA uses to advance…

Evidence-focused malware reverse engineering with deep PE/.NET inspection, Ghidra reconstruction, AI cross-checks, YARA, and ELF debugging

A curated list of resources, practice questions, and study materials to help you prepare for Application Security (AppSec) interviews

Mountable Rails engine providing 24+ cybersecurity escape room scenarios with randomized passwords, JIT-compiled NPC dialogue, and RESTful API for…

Remote hypervisor development class for security researchers; covers virtualization internals, hypervisor security, and vulnerabilities in privileged…

Deliberately vulnerable Android app for mobile security research and bug bounty practice - OWASP Mobile Top 10

Educational walkthrough of CVE-2018-4416, a WebKit JavaScriptCore type confusion vulnerability, with PoC, debugging setup, and analysis of common…

A collection of threat hunting and detection engineering Jupyter notebooks accompanying the Weekly Purple Team YouTube channel. Each notebook…