Security & Privacy

auth-implementation-patterns — detailed patterns and worked examples captures reusable agent playbook guidance for application security & threat modeling. Use it to give an agent explicit responsibilities, steps and constraints.

You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies. Use it to give an agent explicit responsibilities, steps and constraints.

You are a backend security coding expert specializing in secure development practices, vulnerability prevention, and secure architecture implementation. Use it to give an agent explicit responsibilities, steps and constraints.

This page lists "coding rules" for implementations of cryptographic operations, and more generally for operations involving secret or sensitive values. Use it to build a structured path from fundamentals to hands-on practice.

A curated list of resources about post-quantum cryptography. Use it to build a structured path from fundamentals to hands-on practice.

Of course, this is not awesome. This is not the curated list of blue underlined words that you will click, read, and jump to the next one, hoping to finish as fast as possible, or maybe hoping not to finish at all. You are going to become a security RESEARCHER . Yeah, RESEAR. Use it as a repeatable review, validation or hardening pass.

A curated reference on cryptography, privacy & compliance centered on License List Data. Use it to make implementation decisions and avoid common dead ends.

Hey Guys, here is a list of 350+ Free TryHackMe rooms to start learning hacking. I have arranged and compiled it according to different topics so that you can start hacking right away. Use it to make implementation decisions and avoid common dead ends.

Digital Forensics is the process of recovering and preserving material found on digital devices during the course of criminal investigations. Digital forensics tools include hardware and software tools used by law enforcement to collect and preserve digital evidence and support o. Use it to build a structured path from fundamentals to hands-on practice.

Nmap ("Network Mapper") is a free and open source utility for network discovery and security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. Nmap. Use it as a repeatable review, validation or hardening pass.

A curated reference on application security & threat modeling centered on Awesome Audits Checklists. Use it as a repeatable review, validation or hardening pass.

As a first main target, we are collecting C implementations that fulfill the requirements listed below. We also accept optimised implementations, but still requiring high-quality, tested code. Use it to navigate the topic and choose relevant methods, papers or tools.

A curated reference on forensics & reverse engineering centered on Awesome Threat Detection and Hunting. Use it as a repeatable review, validation or hardening pass.

Cairn is a general-purpose problem-solving engine. Given an origin and a goal, it searches for a path through an unknown state space.

Please don't hesitate to contribute to this repo! I am currently working as a Security Engineer and also a part time content creator.

The Ultimate Hands-On OWASP LLM Top 10 Training Platform Learn • Exploit • Defend A deliberately-vulnerable, CTF-style training range for the OWASP Top 10 for LLM Applications (2025) — WebGoat / KubeGoat, but for AI. 25 labs across three tiers: ten core one-per-category labs; ten advanced, multi-turn labs (jailbreaking, data poisoning, agent exploitation, model extraction); and five expert labs modelling real-world attack classes.

Vulnreport is a platform for managing penetration tests and generating well-formatted, actionable findings reports without the normal overhead that takes up security engineer's time. The platform is built to support automation at every stage of the process and allow customization for whatever other systems you use as part of your pentesting process.

By Nikhil Mittal Founder of Altered Security - Hands-on red team and enterprise security training! Import all the scripts in the current PowerShell session (PowerShell v3 onwards).

A small, friendly open-source detector for AI-generated images. It is designed in the yt-dlp / rembg spirit: install it, run one command, get a probability and a reproducible report.

Welcome to FLARE-VM - a collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a virtual machine (VM). FLARE-VM was designed to solve the problem of reverse engineering tool curation and relies on two main technologies: Chocolatey and Boxstarter.