
SecurityExplained
SecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create…

SecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create…

Community-maintained wiki cataloging XSS challenges and solutions, providing curated hands-on exercises for learning cross-site scripting…

Structured study notes covering web hacking fundamentals, common vulnerabilities, penetration testing techniques, and defensive security, with…

Hands-on AWS WAF training game with tutorials, scored labs, and exams where players write Web ACL rules to block real attack shapes while avoiding…


Curated collection of top HackerOne bug bounty reports organized by vulnerability type and program, with scripts to fetch, deduplicate, and rank…


Jekyll-based pentesting knowledge base with methodology guides, cheatsheets, tool indexes, certification roadmaps, and curated practice lab and CTF…

A list of resources for those interested in getting started in bug bounties

OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar

Intentionally vulnerable web application for security training, CTF competitions, and testing security tools. Covers OWASP Top Ten vulnerabilities…

🐶 A curated list of Web Security materials and resources.

Educational walkthrough of CVE-2018-4416, a WebKit JavaScriptCore type confusion vulnerability, with PoC, debugging setup, and analysis of common…

OWASP Web Security Testing Guide RAG system with ChromaDB, MCP for Claude Code

All about bug bounty (bypasses, payloads, and etc)

An interactive, self-hosted XSS training platform with 33 progressively harder challenges

The Web Application Hacker's Handbook - Extra Content

Burp Suite Certified Practitioner - Portswigger - My notes - Guide