Global

818 production-grade cybersecurity skills · 34 security domains · 6 framework mappings · 26+ AI platforms

Built by Sachin Sharma — Bug Hunting & GenAI Security Research.

This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more.

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

This repository contains prompts adapted from a private hunting workflow. It does not contain the original helpers, browser fleet, proxy or email services, dashboard, proof-of-concept runtime, credentials, private operating rules, or reference corpus.

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

@openai/codex-security is a CLI and TypeScript SDK for defining security policy and finding, validating, and fixing security vulnerabilities in your code.

CAUTION] USE AT YOUR OWN RISK. BE EXTREMELY CAREFUL. This suite is > designed to generate and execute autonomously generated code that may be > unstable or perform unexpected actions.

A GitHub CLI extension to enable security features on repositories following best practices from GitHub Security Lab.

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

This open source repository contains the standard CodeQL libraries and queries that power GitHub Advanced Security and the other application security products that GitHub makes available to its customers worldwide.

Damn Vulnerable Web Application (DVWA) is a PHP/MariaDB web application that is damn vulnerable.

The open-source, self-evolving, multi-model harness for security research.

Checklist of the most important security countermeasures when designing, testing, and releasing your API

Secure Coding Guide by THL A29 Limited, a Tencent company, is licensed under CC BY 4.0.

scuttle is an open-source encryption layer for sensitive application logs.

Open-source AI agent framework for cloud security across AWS, Azure, GCP and Kubernetes: AI-powered cloud detection and response, and cloud security posture management findings triage.

Security testing that runs inside the coding agent you already use. Source-available, not open source.