awesome-cve-poc
awesome-appsec
| awesome-cve-poc | awesome-appsec | |
|---|---|---|
| 2 | 6 | |
| 3,213 | 6,098 | |
| - | 0.6% | |
| 0.0 | 0.0 | |
| over 2 years ago | 8 months ago | |
| PHP | ||
| - | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
awesome-cve-poc
-
Can someone point me to a list of exploited vulnerabilities and the incident or breach that exploited them?
Exploit Database as some have recommended is a good place https://www.exploit-db.com/. Or just search for cve number + exploit, you should get decent github links. Awesome POC is another good list worth taking a look https://github.com/qazbnm456/awesome-cve-poc.
-
Cybersecurity Repositories
CVE PoC
awesome-appsec
-
Aside from OWASP, are there other relevant certs to get for App Sec?
For resources : https://github.com/paragonie/awesome-appsec
-
Cybersecurity Repositories
AppSec
-
Resources to learn secure coding? App Sec and Web Sec?
Here is a repo of some resources. You are going to need to learn to walk before you run so that at a concrete level you can articulate what secure vs insecure code is and why it matters, then dive into appsec. No disrespect intended but from the way this is written my suggestion would be to focus on computer science foundational concepts as well as spending significant time writing and reading code. This will likely be a several year journey if you are a total beginner but the best time to start is now :)
- Information and learning resources for cryptography newcomers
-
Anyone in AppSec (Application Security)?
Come over to /r/devsecops to get more information about the field. Also, there are lots of good sources, you can get some from my blog, or Awesome AppSec, or Security Prince and other places.
- I'm preparing for the interview and I've curated a list of resources that might be helpful for you also.
What are some alternatives?
attack-stix-data - STIX data representing MITRE ATT&CK
API-Security-Checklist - Checklist of the most important security countermeasures when designing, testing, and releasing your API
UnSAFE_Bank - Vulnerable Banking Suite
see awesome-security - A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
labs - This is a collection of tutorials for learning how to use Docker with various tools. Contributions welcome.
SecureCodingDojo - The Secure Coding Dojo is a platform for delivering secure coding knowledge.
Security_Engineer_Interview_Questions - Every Security Engineer Interview Question From Glassdoor.com
CheatSheetSeries - The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
awesome-web-hacking - A list of web application security
awesome-pentest - A collection of awesome penetration testing resources, tools and other shiny things
Application-Security-Engineer-Interview-Questions - Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer
awesome-hacking - A curated list of awesome Hacking tutorials, tools and resources