The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
Repository Index
47,133 repositories indexed
25–48 of 119 · Most stars
Community curated list of templates for the nuclei engine to find security vulnerabilities.
- nuclei-templates
- nuclei
- bugbounty
- security
Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.
- yubikey
- gpg
- gnupg
- ssh
A list of resources for those interested in getting started in bug bounties
- bug-bounty-hunters
- hackers
- xss
- bug-bounty
A curated list of CTF frameworks, libraries, resources and softwares
A collection of Linux Sysadmin Test Questions and Answers. Test your knowledge and skills in different fields with these Q/A.
- interview
- interview-questions
- exam
- answers
Translated404StarLink - Recommending high-quality, meaningful, interesting, and actively maintained open-source security projects
- opensource
- tools
- security
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.
A curated list of Awesome Threat Intelligence resources
- security
- awesome
- hacktoberfest
- awesome-list
How to systematically secure anything: a repository about security engineering
- security-engineering
- security-architecture
- secure-systems
- threat-modeling
🦄 A curated list of privacy & security-focused software and services
A collection of android security related resources
A curated list of tools for incident response
An awesome list of awesome YouTubers that teach about technology. Tutorials about web development, computer science, machine learning, game development, cybersecurity, and more.
- awesome
- awesome-list
- list
- youtubers
🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩💻
- shodan
- infosec
- pentesting
- iot
A list of web application security
- penetration-testing
- web-hacking
- vulnerabilities
- scanner
A curated list of resources for learning about application security
- security-experts
- reading-list
- curated
- application-security
A collection of awesome security hardening guides, tools and other resources
- awesome-list
- security
- security-hardening
- security-tools
A list of interesting payloads, tips and tricks for bug bounty hunters.
An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
- infosec
- infosec-reference
- reverse-engineering
- hacking
A curated list of awesome infosec courses and training resources.
✨ A curated list of awesome threat detection and hunting resources 🕵️♂️