materials we hand out
☆147Jul 17, 2025Updated last year
Alternatives and similar repositories for handouts
Users that are interested in handouts are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Security Payload Unit Test Repository (SPUTR)☆86Feb 18, 2026Updated 8 months ago
- Vulnerable Task Manager☆22Jun 12, 2026Updated 4 months ago
- Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki☆215Oct 31, 2024Updated 2 years ago
- A Continuous Threat Modeling methodology☆329Jun 24, 2022Updated 4 years ago
- ☆36Dec 10, 2020Updated 5 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- OSWE Preparation☆689Jul 25, 2022Updated 4 years ago
- A tool for analyzing the attack surface of an application☆19Mar 5, 2025Updated last year
- This repository stores content that can be used to design a Rapid Threat Model Prototyping process for a software development group.☆163Mar 14, 2023Updated 3 years ago
- Overview about existing tools that can be useful for AWS auditing purposes.☆15Sep 25, 2017Updated 9 years ago
- Claude Code plugin for code-anchored threat modeling and security architecture review. Note that the plugin is currently rebuild and the …☆18Updated this week
- Agentic SAMM - An OWASP SAMM Extension for AI-Driven Development☆19Jul 26, 2026Updated 3 months ago
- ☆41Mar 8, 2022Updated 4 years ago
- grep rough audit - source code auditing tool☆1,692Oct 13, 2026Updated 3 weeks ago
- A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for …☆1,834Aug 2, 2024Updated 2 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …☆73Jun 25, 2025Updated last year
- ☆10Mar 24, 2022Updated 4 years ago
- A tool that turns the authoritative nameservers of DNS providers to resolvers and resolves the target domain list. Please think of this a…☆24Sep 19, 2019Updated 7 years ago
- TUDO - A Vulnerable PHP Web App☆149Oct 19, 2026Updated 2 weeks ago
- Security Champions Playbook v 2.1☆398Sep 25, 2023Updated 3 years ago
- The Secure Coding Dojo is a platform for delivering secure coding knowledge.☆613Nov 23, 2025Updated 11 months ago
- This repository will contain all trainings and tutorials I have done/read to prepare for OSWE / AWAE.☆249Sep 2, 2019Updated 7 years ago
- Presentations, training modules, and other education materials from Duo Security's Application Security team.☆77Jul 15, 2021Updated 5 years ago
- Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands …☆952Nov 26, 2022Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆15Dec 3, 2022Updated 3 years ago
- Forensic auditor for local AI coding agents (Claude Code, Codex CLI, OpenClaw) and project-surface scanner for repos containing skills, p…☆17Jul 15, 2026Updated 3 months ago
- This repository will serve as the "master" repo containing all trainings and tutorials done in preperation for OSWE in conjunction with t…☆949Jan 6, 2025Updated last year
- Repo to hold mapping of user-security-stories☆120Nov 28, 2018Updated 7 years ago
- Segment's Threat Modeling training for our engineers☆243May 4, 2021Updated 5 years ago
- A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…☆282Feb 17, 2026Updated 8 months ago
- Collection of python helper API's for interacting with LGTM.com in ways the official API doesn't support.☆24Apr 8, 2022Updated 4 years ago
- ☆89Jul 28, 2021Updated 5 years ago
- Repository for public artifacts related to the practice of secure code review☆12Nov 13, 2019Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- The command-line client for Journal☆12Oct 26, 2024Updated 2 years ago
- Semgrep rules corresponding to the OWASP ASVS standard☆27Nov 2, 2020Updated 6 years ago
- xdebug reverse shell☆23Jan 18, 2018Updated 8 years ago
- Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exh…☆690Aug 7, 2020Updated 6 years ago
- ☆14Dec 12, 2022Updated 3 years ago
- Puma Prey contains vulnerable .NET target applications to test the Puma Scan rules against. This project contains Web Forms, MVC5, and Co…☆22Oct 5, 2026Updated 3 weeks ago
- ☆18Oct 30, 2022Updated 4 years ago