SitingWu
Follow
Stars
Welcome to the "Secure Pipeline" workshop! This hands-on workshop teaches you how to build a comprehensive security-focused CI/CD pipeline with multiple layers of security scanning and best practices.
A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
A minimal, responsive, and feature-rich Jekyll theme for technical writing.
A curated list of resources related to Industrial Control System (ICS) security.
Agent skill for producing threat models for open-source projects
Curated, community-vetted Claude Code plugin marketplace
Proof-of-concept for the paper "StackWarp: Breaking AMD SEV-SNP Integrity via Deterministic Stack-Pointer Manipulation through the CPU’s Stack Engine" (USENIX Security 2026)
The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
An step by step fuzzing tutorial. A GitHub Security Lab initiative
This repository contains the scanner component for Greenbone Community Edition.
Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read
Fuzzware's main repository. Start here to install.
CTF kernel exploitation notes, PoCs, exploits, and writeups.
Offensive Software Exploitation Course
This book on heap exploitation is a guide to understanding the internals of glibc's heap and various attacks possible on the heap structure.
Open source education content for the researcher community
Bootlin embedded Linux and kernel training materials
Course materials for Modern Binary Exploitation by RPISEC
Automotive Security Events Dataset
Automated Payload Reverse Engineering Pipeline for the Controller Area Network (CAN) protocol
🚛 Awesome CAN bus tools, hardware and resources for Cyber Security Researchers, Reverse Engineers, and Automotive Electronics Enthusiasts.
A curated list of resources for learning about application security