Planet and terraforming simulation game written in Rust

A Python library and command line interface for CVE Services.

A book about compiling Racket and Python to x86-64 assembly

⚙️ A curated list of dynamic analysis tools and linters for all programming languages, binaries, and more.

Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifyin…

A curated list of security card games.

A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.

Curating the best DevSecOps resources and tooling.

A curated list of awesome Fuzzing(or Fuzz Testing) for software security

💻🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.

🐶 A curated list of Web Security materials and resources.

🎓 Because Education should be free. Contributions welcome! 🕵️

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

A curated list of resources for learning about application security

Defund the Police.

⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.

A curated list of awesome reversing resources

Open Adversarial Exposure Validation Platform

Keystone assembler framework: Core (Arm, Arm64, Hexagon, Mips, PowerPC, Sparc, SystemZ & X86) + bindings

A toolkit for making real world machine learning and data analysis applications in C++

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, T…

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

Open Security Controls Assessment Language (OSCAL)

FedRAMP Automation

Demangles C++ symbol names genarated by Microsoft Visual C++ in order to retrieve the original C++ declarations. This is a "mirror"; please file tickets, bug reports, or pull requests at the upstre…

Content for the CERT Guide to Coordinated Vulnerability Disclosure

Vultron is a protocol for Coordinated Vulnerability Disclosure

Examples and proof-of-concept for Software Bill of Materials (SBOM) code & data

Automated static analysis tools for binary programs. This is a "mirror"; please file tickets, bug reports, or pull requests at the upstream home in @cmu-sei: https://github.com/cmu-sei/pharos

RustSec API & Tooling