Repositóriogithub.comRevisado pela curadoria do DevEducation
anmolksachan/AI-ML-Free-Resources-for-Security-and-Prompt-Injection
AI/ML Pentesting Roadmap for Beginners
Autenticação, criptografia, vulnerabilidades comuns e como não deixar portas abertas.
Materiais introdutórios para quem está chegando agora em Segurança.
AI/ML Pentesting Roadmap for Beginners
New - "Learn Spring Security OAuth":
🔓A Curated List Of Modern Android Exploitation Conference Talks
Example solutions demonstrating how to implement patterns within the AWS Security Reference Architecture guide using CloudFormation (including Customizations for AWS Control Tower) and Terraform.
Links importantes para você se desenvolver como dev👇
📌 TL;DR AI agents are becoming useful because we're giving them the ability to do more than just...
The canonical reference for Astrid: kernel, capsules, host ABI, IPC, and the security model.
Community guide to securing and improving privacy on macOS.
Mike North's Web Security Course
The ultimate, most advanced, security, DeFi, assembly, web3 auditor course ever created.
Android security guides, roadmap, docs, courses, write-ups, and teryaagh.
Typosquatting bets on your typo. Slopsquatting bets on your AI assistant. When a model invents a...
You’ve probably seen that little prompt that says “Sign in with Face ID” or “Use a passkey” instead...
Discutido no Hacker News com 1632 pontos e 1158 comentários.
I’m at the AI Engineer conference in San Francisco this week. The event has every major brand-name...
you probably didn't think about this when you signed up. you entered your card details, verified...
Discutido no Hacker News com 808 pontos e 356 comentários.
Curated list of classic fuzzing books, papers about fuzzing at information security top conferences over the years, commonly used fuzzing tools, and resources that can help us use fuzzer easily.
A collection of awesome resources related AI security
awesome game security [Welcome to PR]
🏆Open Source Security Foundation (OpenSSF) Best Practices Badge (formerly Core Infrastructure Initiative (CII) Best Practices Badge)
Continuous updates on how to stay safe from NPM supply chain attacks
Multiple samples showing the best practices in security APIs on Android.
This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.
Spring Security
A modular, skill-based autonomous Security Operations Center (SOC) agent that monitors OpenSearch/Elasticsearch data, builds RAG-based behavioral memory, and validates real-time anomalies using LLMs.
Terraform module to create AWS Security Group resources 🇺🇦
Self-hosted Information Security Management System — ISO 27001, NIS2, GDPR/DSGVO, BSI IT-Grundschutz
Build autonomous, resilient and observable AI agents with built-in workflow orchestration, security, statefulness and telemetry.
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
Collection of knowledge about information security
A best practices guide for day 2 operations, including operational excellence, security, reliability, performance efficiency, and cost optimization.
🐶 A curated list of Web Security materials and resources.
Kyverno policies for security and best practices
A collection of android security related resources
The free build of Claude Code. All telemetry removed, security-prompt guardrails stripped, all experimental features enabled.
macOS Security Compliance Project
Resources for improving Customer Experience with Azure Network Security
🔐 Tutorial of setting up Security for your API with one way authentication with TLS/SSL and mutual authentication for a java based web server and a client with both Spring Boot. Different clients are provided such as Apache HttpClient, OkHttp, Spring RestTemplate, Spring WebFlux WebClient Jetty…
A collection of various awesome lists for hackers, pentesters and security researchers
A list of web application security
Simple and rapid application development framework, built on top of Flask. includes detailed security, auto CRUD generation for your models, google charts and much more. Demo (login with guest/welcome) - http://flaskappbuilder.pythonanywhere.com/
Security interview questions with possible explanation for roles in AppSec, Pentesting, Cloud Security, DevSecOps, Network Security and so on
A curated list of Android Security materials and resources For Pentesters and Bug Hunters
An step by step fuzzing tutorial. A GitHub Security Lab initiative
Resources related to GitHub Security Lab
🚗 A curated list of resources for learning about vehicle security and car hacking.
Anything about kernel security. CTF kernel pwn, kernel exploit, kernel fuzz and kernel defense paper, kernel debugging technique, kernel CVE debug.
Collection of npm package manager Security Best Practices
Build Content-Security-Policy headers from a JSON file (or build them programmatically)
Skills and career roadmap for various security roles like application security, cloud security, DevSecOps, security engineer, security researchers, pentesting, api security, network security, mobile security and so on with helpful resources, guidelines
A collection of all my personal cheat sheets and guides as I progress through my career in offensive security.
Source code about machine learning and security.
Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure…
Buildware-Tools is an all-in-one multitool for security research and automation.
The best way to build Electron apps with security in mind.
Curated Web3 security learning hub for smart contract auditors and protocol teams: roadmaps, audit tools, public reports, fuzzing, formal verification, AI-assisted workflows, offchain security, incident response, and launch checklists.
