Just a part of my private notes

A collection of PDF/books about the modern web application security and bug bounty.

OAuth Security Cheatsheet

Source code for OAuth 2 in Action

Damn Vulnerable Kubernetes App (DVKA) is a series of apps deployed on Kubernetes that are damn vulnerable.

Unicode Security Guide

Spring Boot using OAuth2 and Facebook Login example

Whitebox source code review cheatsheet (Based on AWAE syllabus)

Collection of CTF Web challenges I made

AI-Powered Automated Penetration Testing Tool

Go-sec-code is a project for learning Go vulnerability code.

Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc

My web-300 learnings

This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

CTF chall write-ups, files, scripts etc (trying to be more organised LOL)

Opens the file from the attached process to be able to debug (might be usefull)

GPT-3 found hundreds of security vulnerabilities in this repo

AFL-based fuzz testing for .NET

Inference Llama 2 in one file of pure C

Send commands or data to other terminals

Security with Go, published by Packt

👀 A Kubernetes cluster resource sanitizer

A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Security vulnerabilities within your own API Security CTF.

🚀 现代化、开源的 K8s 面板，1Panel 官方出品。

Project for identifying executables and DLLs vulnerable to relative path DLL hijacking.

Twitter vulnerable snippets

Knowledge base of exploit mitigations available across numerous operating systems, architectures and applications and versions.