This repo contains the code for my secure code review challenges. People used this as the primary resource to pass FAANG AppSec interviews 😉
☆385Oct 7, 2026Updated this week
Alternatives and similar repositories for secure-code-review-challenges
Users that are interested in secure-code-review-challenges are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This repo contains a series of challenges that get harder and harder to exploit☆16Jun 16, 2025Updated last year
- Regex patterns for manual application source code review☆35Dec 14, 2020Updated 5 years ago
- Damn Vulnerable Restaurant is an intentionally vulnerable Web API game for learning and training purposes dedicated to developers, ethica…☆940Jul 9, 2026Updated 3 months ago
- Useful tips and resources for preparing for the AWAE exam.☆213Jul 30, 2021Updated 5 years ago
- A resources for who want to learn and get deep into client-side bugs☆560Dec 8, 2024Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆1,176Jan 28, 2026Updated 8 months ago
- ☆10Dec 8, 2022Updated 3 years ago
- ☆2,732Feb 2, 2026Updated 8 months ago
- OSWE, OSEP, OSED, OSEE☆3,898Jan 2, 2026Updated 9 months ago
- Security interview questions with possible explanation for roles in AppSec, Pentesting, Cloud Security, DevSecOps, Network Security and s…☆495Jul 4, 2026Updated 3 months ago
- This repository contains information on the CVEs I found.☆51Mar 10, 2024Updated 2 years ago
- Tips on how to write exploit scripts (faster!)☆608Jul 15, 2024Updated 2 years ago
- PoC for CVE-2021-45897☆18Jan 31, 2022Updated 4 years ago
- My personal collection of resources (mostly tools and training materials) for source code security audits.☆111Aug 20, 2024Updated 2 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Slides from various conferences and talks I've given☆15Oct 12, 2025Updated 11 months ago
- Ultimate Burp Suite Exam and PortSwigger Labs Guide.☆482Aug 20, 2025Updated last year
- The repository contains useful GitHub dorks for finding open-source vulnerabilities.☆97Feb 16, 2024Updated 2 years ago
- AI Native Bug Bounty Hunting Framework Designed to Help Beginners Compete w/ the Pros☆842Updated this week
- Twitter vulnerable snippets☆1,182Feb 11, 2026Updated 8 months ago
- ☆197Feb 26, 2023Updated 3 years ago
- Find CVEs associated to Linux and public exploits on github☆119Apr 10, 2025Updated last year
- ☆528Jun 25, 2025Updated last year
- AI for Ethical Hacking - Workshop☆298Nov 28, 2025Updated 10 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- AI Red Teaming playground labs to run AI Red Teaming trainings including infrastructure.☆2,093Feb 13, 2026Updated 7 months ago
- Burp Suite Certified Practitioner Exam Study☆1,489Aug 19, 2026Updated last month
- Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exh…☆688Aug 7, 2020Updated 6 years ago
- ☆24Dec 21, 2021Updated 4 years ago
- ☆16Oct 12, 2025Updated 11 months ago
- An agent that can help triage vulnerabilities across multiple codebases☆19Mar 14, 2026Updated 6 months ago
- Threat modeling playbook for cloud-native, AI (RAG, agents), and A2A systems with STRIDE, risk models, controls, and test plans.☆18Jul 3, 2026Updated 3 months ago
- Every Security Engineer Interview Question From Glassdoor.com☆1,268Mar 2, 2024Updated 2 years ago
- A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for …☆1,826Aug 2, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A collection of js analysis tools & scripts.☆19May 4, 2026Updated 5 months ago
- This Repo serves as a collection of shared security and penetration testing resources for the cloud.☆307Jul 21, 2024Updated 2 years ago
- A practical, community-driven checklist for pentesting MCP servers. Covers traffic analysis, tool-call behavior, namespace abuse, auth fl…☆41Apr 7, 2026Updated 6 months ago
- Whitebox source code review cheatsheet (Based on AWAE syllabus)☆174Feb 16, 2022Updated 4 years ago
- My cyber security notes.☆15Feb 22, 2025Updated last year
- A small collection of vulnerable code snippets☆801Sep 30, 2024Updated 2 years ago
- Top disclosed reports from HackerOne☆6,594Sep 12, 2026Updated 3 weeks ago