`awesome-web3-security`

Une liste organisée de supports et de ressources sur la sécurité Web3 pour les pentesters et les chasseurs de bugs.

If you find that some links are not working, you can simply replace the username with gmh5225. 
Or you can send an issue for me.

Respectez tous les projets ci-dessous, de véritables œuvres d'art 🫡

Comment contribuer ?

Compétences pour les agents IA

Ce dépôt fournit des compétences qui peuvent être utilisées avec des agents IA et des assistants de codage tels que Cursor, OpenClaw, Claude Code, Codex CLI, et d'autres outils compatibles. Installez les compétences pour obtenir des connaissances spécialisées sur les sujets de sécurité Web3.

Voir sur learn-skills.dev

Installation :

npx skills add https://github.com/gmh5225/awesome-web3-security --skill <skill-name>

Compétences disponibles :

Compétence	Description
`mev-security`	Concepts MEV, attaques courantes et mesures d'atténuation
`awesome-web3-security-overview`	Comprendre et contribuer à cette liste de ressources
`smart-contract-security`	Sécurité des contrats intelligents EVM/Solidity
`solana-security`	Recherche en sécurité Solana/Sealevel
`web3-security-tooling`	Outils de sécurité (analyseurs, fuzzers, décompilateurs)
`wallet-security`	Sécurité des portefeuilles (MPC/TSS, gestion des clés, hameçonnage)

Exemple :

# Install smart contract security skill
npx skills add https://github.com/gmh5225/awesome-web3-security --skill smart-contract-security

# Install multiple skills
npx skills add https://github.com/gmh5225/awesome-web3-security --skill solana-security --skill wallet-security

Pack de démarrage Sécurité

CTFs / Entraînement
- https://capturetheether.com/ [Capture the Ether]
- https://ethernaut.openzeppelin.com/ [The Ethernaut]
- https://www.damnvulnerabledefi.xyz/ [Damn Vulnerable DeFi]
- https://blockchain-ctf.securityinnovation.com/#/ [Security Innovation Blockchain CTF]
- https://github.com/nccgroup/GOATCasino [GOAT Casino]
- https://github.com/paradigm-operations/paradigm-ctf-2021 [Paradigm CTF]
- https://github.com/blockthreat/blocksec-ctfs [Blocksec CTFs]
- https://ciphershastra.com/ [ciphershastra CTF]
- https://github.com/SunWeb3Sec/DeFiVulnLabs [DeFiVulnLabs]
- https://quillctf.super.site/ [QuillCTF]
- https://www.vulnmachines.com/ [Vulnmachines]
- https://www.web3pwn.com/ [Web3Pwn]
Testnets / Faucets
- https://sepolia.dev/ [Ressources Sepolia]
- https://faucet.circle.com/ [Circle Faucet (Sepolia USDC)]
Cartes mentales
- https://www.xmind.net/m/2zbPP7/ [Carte mentale des vulnérabilités courantes]
- https://coggle.it/diagram/YqLzaiSABzXD4UnZ/t/smart-contract-auditor [Carte mentale de l'auditeur]
- https://xmind.works/share/zfdeD07U [Carte mentale des outils]
Outils de démarrage
- https://github.com/Quillhash/Web3-Security-Tools [Web3-Security-Tools]
- https://remix-project.org/ [Remix]
Blogs / Postmortems
- https://medium.com/immunefi [Immunefi]
- https://blog.openzeppelin.com/security-audits/ [OpenZeppelin]
- https://quillaudits.medium.com/ [QuillAudits]
- https://blog.solidityscan.com/ [SolidityScan]
- https://medium.com/@Beosin_com [Beosin]
- https://neptunemutual.medium.com/ [Neptune Mutual]
- https://blocksecteam.medium.com/ [BlockSec]
- https://www.certik.com/resources/blog [CertiK]
- https://mouse-run.beehiiv.com [mouse-run]
Bug Bounties
- https://immunefi.com/ [Immunefi]
- https://hackenproof.com/programs [HackenProof]
- https://code4rena.com/ [Code4rena]
- https://gitcoin.co/explorer [Gitcoin]
- https://hackerone.com [HackerOne]
- https://spearbit.com/ [Spearbit]
- https://app.sherlock.xyz/ [Sherlock]
- https://audits.sherlock.xyz/contests [Sherlock Contests]
- https://saloon.finance/ [The Saloon]
- https://hats.finance/ [Hats Finance]
- https://secure3.io/ [Secure3]
- https://app.secure3.io/ [Secure3 Contests]
- https://securr.tech/ [Securr]
- https://r.xyz/ [Remedy]
- https://hunt.r.xyz/ [Remedy Hunt]
- https://www.vigilseek.com/bug-bounty [Vigilseek (Agrégateur de Bug Bounty)]
- https://cantina.xyz/ [Cantina]
Newsletters / Collections
- https://newsletter.blockthreat.io/ [BlockThreat]
- https://rekt.news/ [REKT]
- https://weekinethereumnews.com/ [Week in Ethereum News]
- https://quillaudits.substack.com/ [HashingBits]
- https://web3sec.news [Web3sec.news]
Conférences / Vidéos
- https://www.youtube.com/watch?v=lJQwuyW4t-k [IWCON-S22]
- http://www.youtube.com/watch?v=P8LXLoTUJ5g [LiveOverflow]
- https://www.youtube.com/watch?v=zcJmWr5_GOc [Web3 Security Mindset]
- https://www.youtube.com/watch?v=QSmtVR0aniI [Security and Vulnerabilities in Web3]
- https://www.youtube.com/playlist?list=PLox242_JhiuEe64LzW1M8XpiQ2-N5bZsX [Playlist]
- https://www.youtube.com/watch?v=A5s9aez43Co&list=PLO5VPQH6OWdXKPThrch6U0imGdD3pHLXi [Damn Vulnerable DeFi CTF]
- https://www.youtube.com/watch?v=cOP9z9XWjwc [Attacking Authorization]
- https://www.youtube.com/watch?v=TmZ8gH-toX0 [Audit a Smart Contract]
- https://www.youtube.com/watch?v=gyMwXuJrbJQ [32-Hour Course]
Apprendre Solidity
- https://cryptozombies.io/ [CryptoZombies]
- https://www.learnweb3.io/ [LearnWeb3]
- https://www.smartcontract.engineer/ [Smart Contract Engineer]
- https://solidity-by-example.org/ [Solidity by Example]
- https://www.web3.university/ [Web3 University]
- https://www.useweb3.xyz/ [useWeb3]
Rapports d'audit
- https://github.com/chainsulting/Smart-Contract-Security-Audits [Chainsulting]
- https://code4rena.com/reports [Code4rena Reports]
- https://consensys.net/diligence/audits/ [Consensys]
- https://github.com/Quillhash/QuillAudit_Reports [QuillAudits]
- https://github.com/spearbit/portfolio/tree/master/pdfs [Spearbit]
- https://github.com/sherlock-protocol/sherlock-reports [Sherlock]
- https://github.com/0xNazgul/Blockchain-Security-Audit-List [Audit List]
- https://github.com/shieldify-security/audits-portfolio [Shieldify]
Certifications
- https://secops.group/certified-blockchain-practitioner [CBP]
- https://blockchaintrainingalliance.com/products/cbsp [CBSP]

awesome-web3-security

Populaires

awesome-web3-security

Comment contribuer ?

Compétences pour les agents IA

Pack de démarrage Sécurité

`awesome-web3-security`