This repo contains the code for my secure code review challenges. People used this as the primary resource to pass FAANG AppSec interviews 😉
☆374Aug 4, 2026Updated last week
Alternatives and similar repositories for secure-code-review-challenges
Users that are interested in secure-code-review-challenges are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This repo contains a series of challenges that get harder and harder to exploit☆16Jun 16, 2025Updated last year
- Regex patterns for manual application source code review☆34Dec 14, 2020Updated 5 years ago
- Damn Vulnerable Restaurant is an intentionally vulnerable Web API game for learning and training purposes dedicated to developers, ethica…☆931Jul 9, 2026Updated last month
- Useful tips and resources for preparing for the AWAE exam.☆201Jul 30, 2021Updated 5 years ago
- A resources for who want to learn and get deep into client-side bugs☆554Dec 8, 2024Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆1,171Jan 28, 2026Updated 6 months ago
- ☆10Dec 8, 2022Updated 3 years ago
- ☆2,689Feb 2, 2026Updated 6 months ago
- OSWE, OSEP, OSED, OSEE☆3,887Jan 2, 2026Updated 7 months ago
- Security interview questions with possible explanation for roles in AppSec, Pentesting, Cloud Security, DevSecOps, Network Security and s…☆481Jul 4, 2026Updated last month
- This repository contains information on the CVEs I found.☆53Mar 10, 2024Updated 2 years ago
- Tips on how to write exploit scripts (faster!)☆596Jul 15, 2024Updated 2 years ago
- PoC for CVE-2021-45897☆18Jan 31, 2022Updated 4 years ago
- Ultimate Burp Suite Exam and PortSwigger Labs Guide.☆459Aug 20, 2025Updated 11 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Bug Bounty Hunting Framework Designed to Help Beginners Compete w/ the Pros☆695Aug 3, 2026Updated last week
- My personal collection of resources (mostly tools and training materials) for source code security audits.☆110Aug 20, 2024Updated last year
- Threat modeling playbook for cloud-native, AI (RAG, agents), and A2A systems with STRIDE, risk models, controls, and test plans.☆18Jul 3, 2026Updated last month
- Slides from various conferences and talks I've given☆15Oct 12, 2025Updated 9 months ago
- The repository contains useful GitHub dorks for finding open-source vulnerabilities.☆98Feb 16, 2024Updated 2 years ago
- Twitter vulnerable snippets☆1,172Feb 11, 2026Updated 6 months ago
- ☆502Jun 25, 2025Updated last year
- ☆195Feb 26, 2023Updated 3 years ago
- Find CVEs associated to Linux and public exploits on github☆120Apr 10, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- AI Red Teaming playground labs to run AI Red Teaming trainings including infrastructure.☆2,040Feb 13, 2026Updated 5 months ago
- AI for Ethical Hacking - Workshop☆293Nov 28, 2025Updated 8 months ago
- Burp Suite Certified Practitioner Exam Study☆1,455Mar 12, 2026Updated 4 months ago
- Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exh…☆690Aug 7, 2020Updated 6 years ago
- ☆23Dec 21, 2021Updated 4 years ago
- ☆16Oct 12, 2025Updated 9 months ago
- An agent that can help triage vulnerabilities across multiple codebases☆18Mar 14, 2026Updated 4 months ago
- A simple script that pushes a file to the Android device and hooks the relevant functions with Frida to override the application's behavi…☆15Oct 9, 2024Updated last year
- Every Security Engineer Interview Question From Glassdoor.com☆1,264Mar 2, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A collection of js analysis tools & scripts.☆19May 4, 2026Updated 3 months ago
- This Repo serves as a collection of shared security and penetration testing resources for the cloud.☆303Jul 21, 2024Updated 2 years ago
- A practical, community-driven checklist for pentesting MCP servers. Covers traffic analysis, tool-call behavior, namespace abuse, auth fl…☆40Apr 7, 2026Updated 4 months ago
- Whitebox source code review cheatsheet (Based on AWAE syllabus)☆175Feb 16, 2022Updated 4 years ago
- A visual reference of 118 essential red team tools, frameworks & standards, organized like a periodic table. Includes a printable PDF ver…☆139Nov 4, 2025Updated 9 months ago
- My cyber security notes.☆14Feb 22, 2025Updated last year
- Top disclosed reports from HackerOne☆6,435Jul 18, 2026Updated 3 weeks ago