A biweekly secure code review challenge series, full working apps, based on real-world vulnerabilities.
☆13Oct 31, 2026Updated this week
Alternatives and similar repositories for the-secure-code-review-challenge
Users that are interested in the-secure-code-review-challenge are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- LLM Obfuscation Detection Framework for Android Apps☆22Oct 26, 2026Updated last week
- Android security and penetration testing, from first principles to senior practitioner. 81 chapters, ~327 labs, measured rather than reci…☆64Aug 18, 2026Updated 2 months ago
- Data Engineering Mentorship Program — A structured roadmap for SQL, Python, Data Warehousing, Data Modeling, and Cloud fundamentals.☆34Sep 17, 2026Updated last month
- A practical, beginner-first roadmap to Junior Cloud Engineer, DevOps Engineer, and Cloud Operations roles in 2026.☆33Sep 20, 2026Updated last month
- Fuzz every path with goky☆15Jan 4, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- I am trying to create a whatsapp bot to automatically forward messages from https://t.me/comm24 telegram channel to ECE24 announcement gr…☆21Apr 11, 2023Updated 3 years ago
- MCP server for Frida.☆62Updated this week
- This is a compiled cheatsheet from my experience of OSCP 2023 journey. Won't say it is all-rounded but a good starting point if you wanna…☆15Oct 17, 2024Updated 2 years ago
- MCP (Model Context Protocol) server as a jadx-gui plugin. Lets an AI client (Claude Code, Claude Desktop, or any MCP client) analyze the …☆17Sep 2, 2026Updated 2 months ago
- Mobile app security auditing tool focused on automating SAST analysis, identifying underlying technologies (React Native, Flutter, Xamari…☆16Sep 18, 2026Updated last month
- Vulnerability Assessment and Penetration Testing - Projects☆20Mar 7, 2025Updated last year
- Ghidra plugin to identify obfuscated code and other interesting code constructs☆19Jul 1, 2026Updated 4 months ago
- A script to root your Android Studio Virtual Device (AVD) with KernelSU | 用于在 Android Studio 虚拟设备 (AVD) 上安装 KernelSU 的自动化工具☆14Sep 30, 2026Updated last month
- LLM-driven reverse engineering knowledge base custodian — ingests blogs, pentest findings, and malware write-ups into a structured, anti-…☆15Updated this week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Differential fuzzer that finds HTTP parser discrepancies across 54 servers to uncover request-smuggling primitives.☆12Sep 12, 2026Updated last month
- Local-first AI project OS that turns coding models into reliable software agents with memory, sandboxed execution, verification, recovery…☆26Oct 2, 2026Updated last month
- Leveraging arbitrary file read to RCE on Oracle PeopleSoft☆12Apr 2, 2025Updated last year
- Tools, Resources, Guides, Infographics, etc☆11Aug 17, 2024Updated 2 years ago
- A DEX → Java decompiler in pure Rust.☆18Oct 25, 2026Updated last week
- Manage frida-server on iOS directly from Settings.☆14May 20, 2026Updated 5 months ago
- OSCP CheatSheet☆12Sep 27, 2026Updated last month
- Bruteweb is a Python script for web security testing. It conducts brute-force attacks to assess web application security. Customize your …☆13May 7, 2024Updated 2 years ago
- LSPosed module that makes an Android emulator look like a real phone. Hides emulator traces from the apps you pick.☆18Oct 21, 2026Updated last week
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- OWASP Foundation Web Respository☆11Oct 1, 2026Updated last month
- A talk about finding your own path to vulnerability research and your first CVE.☆16Apr 4, 2026Updated 6 months ago
- Amr's ATM Assessment - read-only PowerShell collector for authorised NCR Personas / APTRA ATM security assessments. 15 phases: XFS servic…☆15Oct 4, 2026Updated last month
- Pre-auth RCE PoC for WordPress core — chains CVE-2026-63030 (REST /batch/v1 route-confusion desync) with CVE-2026-60137 (author__not_in S…☆16Jul 22, 2026Updated 3 months ago
- Regex patterns for manual application source code review☆36Dec 14, 2020Updated 5 years ago
- Search Engine Dorks☆12Apr 2, 2024Updated 2 years ago
- BlackBox is a virtual engine, it can clone and run virtual application on Android, users don't have to install APK file to run the appli…☆12Nov 3, 2022Updated 4 years ago
- CVE-2021-41773 | CVE-2021-42013 Exploit Tool (Apache/2.4.49-2.4.50)☆10Apr 8, 2022Updated 4 years ago
- Reproduction lab + URL-list scanner + PoC for CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress get_page_template() unauthenticated LFI to…☆13Sep 23, 2026Updated last month
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- CVE-2026-97798 Windows Error Reporting - Command Injection TO SYSTEM☆41Updated this week
- 🦋 Glasswing — See through Flutter's TLS. Bypass BoringSSL SSL pinning on Android: static libflutter.so patching + Frida runtime hooks. N…☆21Oct 18, 2026Updated 2 weeks ago
- A simple script that pushes a file to the Android device and hooks the relevant functions with Frida to override the application's behavi…☆15Oct 9, 2024Updated 2 years ago
- This repository is for mobile app penetration testing checklist☆21Dec 7, 2021Updated 4 years ago
- ☆16Updated this week
- OSWE-cheat sheet module by module with updated syllabus☆13May 25, 2021Updated 5 years ago
- OSWE-like machines☆11Dec 28, 2020Updated 5 years ago