This repo contains the code for my secure code review challenges. People used this as the primary resource to pass FAANG AppSec interviews 😉
☆382Aug 4, 2026Updated last month
Alternatives and similar repositories for secure-code-review-challenges
Users that are interested in secure-code-review-challenges are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This repo contains a series of challenges that get harder and harder to exploit☆16Jun 16, 2025Updated last year
- Regex patterns for manual application source code review☆34Dec 14, 2020Updated 5 years ago
- Damn Vulnerable Restaurant is an intentionally vulnerable Web API game for learning and training purposes dedicated to developers, ethica…☆936Jul 9, 2026Updated 2 months ago
- Useful tips and resources for preparing for the AWAE exam.☆210Jul 30, 2021Updated 5 years ago
- A resources for who want to learn and get deep into client-side bugs☆558Dec 8, 2024Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆1,177Jan 28, 2026Updated 7 months ago
- ☆10Dec 8, 2022Updated 3 years ago
- ☆2,722Feb 2, 2026Updated 7 months ago
- OSWE, OSEP, OSED, OSEE☆3,891Jan 2, 2026Updated 8 months ago
- Security interview questions with possible explanation for roles in AppSec, Pentesting, Cloud Security, DevSecOps, Network Security and s…☆489Jul 4, 2026Updated 2 months ago
- This repository contains information on the CVEs I found.☆51Mar 10, 2024Updated 2 years ago
- Tips on how to write exploit scripts (faster!)☆605Jul 15, 2024Updated 2 years ago
- PoC for CVE-2021-45897☆18Jan 31, 2022Updated 4 years ago
- My personal collection of resources (mostly tools and training materials) for source code security audits.☆110Aug 20, 2024Updated 2 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Slides from various conferences and talks I've given☆15Oct 12, 2025Updated 11 months ago
- Ultimate Burp Suite Exam and PortSwigger Labs Guide.☆478Aug 20, 2025Updated last year
- The repository contains useful GitHub dorks for finding open-source vulnerabilities.☆98Feb 16, 2024Updated 2 years ago
- AI Native Bug Bounty Hunting Framework Designed to Help Beginners Compete w/ the Pros☆820Updated this week
- Twitter vulnerable snippets☆1,177Feb 11, 2026Updated 7 months ago
- ☆196Feb 26, 2023Updated 3 years ago
- Find CVEs associated to Linux and public exploits on github☆119Apr 10, 2025Updated last year
- ☆521Jun 25, 2025Updated last year
- AI for Ethical Hacking - Workshop☆297Nov 28, 2025Updated 9 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- AI Red Teaming playground labs to run AI Red Teaming trainings including infrastructure.☆2,075Feb 13, 2026Updated 7 months ago
- Burp Suite Certified Practitioner Exam Study☆1,476Aug 19, 2026Updated last month
- Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exh…☆691Aug 7, 2020Updated 6 years ago
- ☆24Dec 21, 2021Updated 4 years ago
- ☆16Oct 12, 2025Updated 11 months ago
- An agent that can help triage vulnerabilities across multiple codebases☆19Mar 14, 2026Updated 6 months ago
- Threat modeling playbook for cloud-native, AI (RAG, agents), and A2A systems with STRIDE, risk models, controls, and test plans.☆18Jul 3, 2026Updated 2 months ago
- Every Security Engineer Interview Question From Glassdoor.com☆1,266Mar 2, 2024Updated 2 years ago
- A collection of js analysis tools & scripts.☆19May 4, 2026Updated 4 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This Repo serves as a collection of shared security and penetration testing resources for the cloud.☆305Jul 21, 2024Updated 2 years ago
- A practical, community-driven checklist for pentesting MCP servers. Covers traffic analysis, tool-call behavior, namespace abuse, auth fl…☆41Apr 7, 2026Updated 5 months ago
- Whitebox source code review cheatsheet (Based on AWAE syllabus)☆174Feb 16, 2022Updated 4 years ago
- My cyber security notes.☆14Feb 22, 2025Updated last year
- A small collection of vulnerable code snippets☆802Sep 30, 2024Updated last year
- A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for …☆1,813Aug 2, 2024Updated 2 years ago
- Top disclosed reports from HackerOne☆6,555Sep 12, 2026Updated last week