hackerone-reports
reddelexc/hackerone-reportsCurated collection of top HackerOne bug bounty reports organized by vulnerability type and program, with scripts to fetch, deduplicate, and rank…
ctfcurated-resourceseducation+7
6.5k
reddelexc/hackerone-reportsCurated collection of top HackerOne bug bounty reports organized by vulnerability type and program, with scripts to fetch, deduplicate, and rank…
lylemi/learn-web-hackingStructured study notes covering web hacking fundamentals, common vulnerabilities, penetration testing techniques, and defensive security, with…
trimstray/test-your-sysadmin-skillsA collection of Linux Sysadmin Test Questions and Answers. Test your knowledge and skills in different fields with these Q/A.
devsecops/awesome-devsecopsAn authoritative list of awesome devsecops tools with the help from community experiments and contributions.
hamed233/cybersecurity-mastery-roadmapA comprehensive, step-by-step guide to mastering cybersecurity from beginner to expert level with curated resources, tools, and career guidance
realitynet/android-forensics-referencesCurated reference for Android forensic artifacts and log paths, with links to CTF writeups, research papers, and mobile device analysis tooling.
owasp/quantum-security-projectVendor-neutral OWASP project mapping quantum-era security risks with a Top 10 risk list, mitigation guidance, and threat models for post-quantum…
security-prince/resources-for-application-securitySome good resources for getting started with application security
projectdiscovery/nuclei-templates-labsVulnerable environments paired with ready-to-use Nuclei templates for security testing and learning! 🚀
justinltodd/security-interview-questionsCurated infosec interview prep with Q&As covering core principles, audits, access control, and security architecture, plus links to study resources.
priyanshu-rawa/cybersecurity-handbookOpen-source cybersecurity knowledge base with 400+ notes, labs, and cheat sheets covering offense, defense, cryptography, cloud, and forensics.
corelight/threat-hunting-guideStructured guide to threat hunting using Zeek logs, aligned with MITRE ATT&CK framework for proactive detection of adversary tactics and techniques.
g-les/100daysofyara100 Days of YARA to be updated with rules & ideas as the year progresses
darwinsec/defcon-kql-kung-fu-22DEF CON Cloud Village workshop slides teaching KQL for cloud security log analysis, with practical exercises in a shared Azure Log Analytics…
anthonydavidson189/free-interactive-ai-training-materialsCurated collection of free, interactive AI-powered training materials for security awareness education, with community contributions and practical…
wattocyber/bug-bounty-libraryCurated bug-bounty methodology library with runbooks, recon/fuzz playbooks, checklists, and CLI helpers for target scoping, cert enumeration, and…
owasp/osibCentralized YAML-based knowledge base linking MITRE CWE, OWASP Top10, ASVS, and other security standards with versioned references. Includes MkDocs…
toxicbishop/supply-chainA comprehensive guide to software supply chain security. This open-source manuscript provides security professionals and developers with practical…