This repo contains the code for my secure code review challenges. People used this as the primary resource to pass FAANG AppSec interviews 😉
☆325Feb 3, 2026Updated 3 weeks ago
Alternatives and similar repositories for secure-code-review-challenges
Users that are interested in secure-code-review-challenges are comparing it to the libraries listed below
Sorting:
- ☆10Dec 8, 2022Updated 3 years ago
- A collection of js analysis tools & scripts.☆19Updated this week
- Regex patterns for manual application source code review☆33Dec 14, 2020Updated 5 years ago
- Damn Vulnerable Restaurant is an intentionally vulnerable Web API game for learning and training purposes dedicated to developers, ethica…☆896Jan 3, 2026Updated last month
- Collection of all the resources published by Payatu.☆11Aug 11, 2025Updated 6 months ago
- All the code snippets from my Secure Code Review series on youtube (youtube.com/@muqsitbaig)!☆25Jul 28, 2024Updated last year
- A simple web app to get the latest EPSS data for a CVE ID☆12Dec 14, 2025Updated 2 months ago
- Find CVEs associated to Linux and public exploits on github☆119Apr 10, 2025Updated 10 months ago
- Whitebox source code review cheatsheet (Based on AWAE syllabus)☆170Feb 16, 2022Updated 4 years ago
- ☆15Apr 13, 2021Updated 4 years ago
- OSWE, OSEP, OSED, OSEE☆3,767Jan 2, 2026Updated 2 months ago
- Comprehensive AWS cloud reconnaissance and privilege escalation toolkit written in Python. Features IAM, EC2, S3, Lambda, ECS, Secrets Ma…☆49Jul 8, 2025Updated 7 months ago
- Useful tips and resources for preparing for the AWAE exam.☆177Jul 30, 2021Updated 4 years ago
- TUDO — A Vulnerable PHP Web App☆129Dec 22, 2025Updated 2 months ago
- ☆196Feb 26, 2023Updated 3 years ago
- vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.☆328Mar 27, 2024Updated last year
- Tips on how to write exploit scripts (faster!)☆555Jul 15, 2024Updated last year
- An Automated Mass Network Vulnerability Scanner and Recon Tool☆32Aug 28, 2023Updated 2 years ago
- This repository contains 0 click exploits to some HackTheBox machines, I used it to study for OSWE☆41May 9, 2024Updated last year
- Building ActiveDirectory Lab for practicing various attack vectors used during Red Team engagement.☆38Feb 16, 2020Updated 6 years ago
- ☆2,442Feb 2, 2026Updated last month
- A resources for who want to learn and get deep into client-side bugs☆422Dec 8, 2024Updated last year
- An OSWE Guide☆124Feb 18, 2021Updated 5 years ago
- Mini recon script to identify the links and sensitive information from a particular link☆22Mar 9, 2021Updated 4 years ago
- Repo for OSWE related video content for @SecAura Youtube Channel☆37Feb 21, 2022Updated 4 years ago
- My OSWE Pre-preperation (i.e. before acutally buying the course) phase plan and notes!☆85Jul 22, 2025Updated 7 months ago
- Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exh…☆678Aug 7, 2020Updated 5 years ago
- Hands-on challenges for learning how to reverse engineer Flutter applications.☆39Jan 31, 2026Updated last month
- This JavaScript CLI "undeletes' packages that have been removed from the NPM registry☆29Dec 18, 2025Updated 2 months ago
- My personal collection of resources (mostly tools and training materials) for source code security audits.☆106Aug 20, 2024Updated last year
- Repro for Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!☆21Aug 25, 2024Updated last year
- Tooling for the OffSec Experienced Pentester (OSEP) and OffSec Exploit Developer (OSED) course☆28Mar 13, 2024Updated last year
- The Secure Coding Dojo is a platform for delivering secure coding knowledge.☆596Nov 23, 2025Updated 3 months ago
- Some Useful Tricks for Pentest Android and iOS Apps☆160Nov 10, 2025Updated 3 months ago
- Burp Suite Certified Practitioner Exam Study☆1,323Feb 5, 2026Updated 3 weeks ago
- Intentionally Vulnerable Nodejs Application & APIs☆21Apr 9, 2022Updated 3 years ago
- LogSnare: A playground for testing, preventing, and logging IDOR vulnerabilities.☆33Mar 4, 2024Updated last year
- BaldHead is a modular and interactive Active Directory (AD) attack framework built for red teamers and security testers. It automates enu…☆111Jun 20, 2025Updated 8 months ago
- Burp Enterprise Toolkit☆12Feb 25, 2022Updated 4 years ago