Awesome-Vulnerability-Research
🦄 A curated list of the awesome resources about the Vulnerability Research
AI summary
Vulnerability research resource
A curated list of resources to help researchers and developers discover and analyze vulnerabilities in software.
- stars
- 1.1K
- forks
- 160
- watching
- 51
- entries
- 91
What's in the list
91 links in 20 sections, with live GitHub stats.activeno commit in 2y
Contributing
Use the standard method of forking this repo, making your changes and to have your content added. Please check the for more details
Occasionally, if you just want to copy/paste your content, I'll take that too! with your suggestions and I will add it for you
Contents / Advisories
Contents
Advisories / Articles
- Super Awesome Fuzzing, Part One
by and Eero Kurimo, 2017
- From Fuzzing Apache httpd Server to CVE-2017-7668 and a $1500 Bounty
by Javier Jiménez, 2017
- Root cause analysis of integer flow
by , 2013
Advisories / Books
- The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities
🌟 - by Mark Dowd, John McDonald, Justin Schuh - published 2006, ISBN-13: 978-0321444424 / ISBN-10: 9780321444424
- The Shellcoder's Handbook: Discovering and Exploiting Security Holes
🌟 - by Chris Anley, John Heasman, Felix Lindner, Gerardo Richarte - published 2007, 2nd Edition, ISBN-13: 978-0470080238 / ISBN-10: 047008023X
Advisories / Classes
- Advanced Windows Exploitation (AWE)
by Offensive Security with complementary OSEE (Offensive Security Exploitation Expert) Certification
- Cracking The Perimeter (CTP)
by Offensive Security, with complementary OSCE (Offensive Security Certified Expert) Certification
Modern Binary Exploitation (CSCI 4968)
🎁 - by RPISEC at Rensselaer Polytechnic Institute in Spring 2015. This was a university course developed and run solely by students to teach skills in vulnerability research, reverse engineering, and binary exploitation
- Software Security Course on Coursera
by University of Maryland
- Offensive Computer Security
by W. Owen Redwood and Prof. Xiuwen Liu
Advisories / Conferences
- DEF CON
🌟 - Las Vegas, NV, USA
- Black Hat
Las Vegas, NV, USA
- Black Hat Europe
London, UK //🔥Join this year on !
- Black Hat Asia
Singapore
- BSides
🎁 - Worldwide
- BruCON
Brussels, Belgium
- Chaos Communication Congress (CCC)
🌟 - Hamburg, Germany
- Code Blue
Tokyo, Japan
- Nullcon
Goa, India
- 44CON
London, UK
- AppSecUSA
Washington DC
- OWASP AppSec EU
Europewide
- Positive Hack Days
Moscow, Russia
- ZeroNights
🌟 - Moscow, Russia
- WarCon
🌟 - Warsaw, Poland
Advisories / Conference talks
- Vulnerabilities 101: How to Launch or Improve Your Vulnerability Research Game
🌟 - by and at 24, 2016
- Writing Vulnerability Reports that Maximize Your Bounty Payouts
by , originally presented at , 2016
- Browser Bug Hunting: Memoirs of a Last Man Standing
, by , presented at , 2013
Advisories / Intentionally vulnerable packages
HackSys Extreme Vulnerable Windows DriverAdvisories / Presentations
- Vulnerabilities 101: How to Launch or Improve Your Vulnerability Research Game [PDF]
🌟 - by and at 24, 2016
- Effective File Format Fuzzing [PDF]
🌟 - by presented at , 2016
- Bootstrapping A Security Research Project [PDF]
or - by at SOURCE Boston, 2016
- Bug Hunting with Static Code Analysis [PDF]
by Nick Jones, MWR Labs, 2016
Advisories / Relevant Standards
- CVE
Common Vulnerabilities and Exposures, maintained by the
- CWE
Common Weakness Enumeration, maintained by the
- CVSS
Common Vulnerability Scoring System, maintained by
- ISO/IEC 29147:2014
💰 - Vulnerability Disclosure Standard
- RFPolicy 2.0
Full Disclosure Policy (RFPolicy) v2.0 by
Advisories / Research Papers
- TSIG Authentication Bypass Through Signature Forgery in ISC BIND [PDF]
🔥 - Clément BERTHAUX, Synacktiv,
Taking Windows 10 Kernel Exploitation to the Next Level – Leveraging WRITE-WHAT-WHERE Vulnerabilities in Creators Update [PDF]
🔥 - , originally presented at 2017
Advisories / Tools and Projects
- Windbg
The preferred debugger by exploit writers
- ltrace
Intercepts library calls
- ansvif
An advanced cross platform fuzzing framework designed to find vulnerabilities in C/C++ code
- Metasploit Framework
A framework which contains some fuzzing capabilities via Auxiliary modules
- Spike
A fuzzer development framework like sulley, a predecessor of sulley
Google Sanitizers
A repo with extended documentation, bugs and some helper code for the AddressSanitizer, MemorySanitizer, ThreadSanitizer, LeakSanitizer. The actual code resides in the repository
FLARE VM
🔥 - FLARE (FireEye Labs Advanced Reverse Engineering) a fully customizable, Windows-based security distribution for malware analysis, incident response, penetration testing, etc
hackers-grep
The hackers-grep is a tool that enables you to search for strings in PE files. The tool is capable of searching strings, imports, exports, and public symbols (like woah) using regular expressions
Grinder
Grinder is a system to automate the fuzzing of web browsers and the management of a large number of crashes
Choronzon
An evolutionary knowledge-based fuzzer
boofuzz
A fork and successor of Sulley framework
Advisories / Vendor’s bug databases
- Google Chrome issue tracker
The Chromium Project
Advisories / Websites
- Fuzzing Blogs
by fuzzing.info
- j00ru//vx tech blog
🌟 - Coding, reverse engineering, OS internals covered one more time
Advisories / Who to Follow
- (join now)
🌟Security Champions
- (@thegrugq)
the grugq
- (@jduck)
🌟Joshua Drake
- (@sushidude)
🌟Steve Christey Coley
- (@andrewsmhay)
Andrew M. Hay
- (@thegrugq)
the grugq
- (@FuzzySec)
b33f
- (@timstrazz)
Tim Strazzere
- (@wpawlikowski)
Wojciech Pawlikowski
- (@attekett)
Atte Kettunen
- (@h0wlu)
Pawel Wylecial
- (@antisnatchor)
Hooked Browser
- (@Kym_Possible)
Kymberlee Price
- (@MichalKoczwara)
Michael Koczwara
- (@j00ru)
Mateusz Jurczyk
- (@ProjectZeroBugs)
Project Zero Bugs - Cheks for new bug reports every 10 minutes. Not affiliated with Google
- (@HackwithGithub)
Hack with GitHub - Open source hacking tools for hackers and pentesters
Coordinated Disclosure
- SecuriTeam Secure Disclosure (SSD)
SSD provides the support you need to turn your experience uncovering security vulnerabilities into a highly paid career. SSD was designed by researchers, for researchers and will give you the fast response and great support you need to make top dollar for your discoveries
- The Zero Day Initiative (ZDI)
ZDI is originally founded by TippingPoint, is a program for rewarding security researchers for responsibly disclosing vulnerabilities. Currently managed by Trend Micro
Common Lists / Awesome Lists
Awesome AppSec
A curated list of resources for learning about application security. Contains books, websites, blog posts, and self-assessment quizzes
Awesome Web Security
A curated list of Web Security materials and resources
Awesome Fuzzing
A curated list of fuzzing resources for learning Fuzzing and initial phases of Exploit Development like root cause analysis
Common Lists / Other Lists
Hack with Github
Open source hacking tools for hackers and pentesters
Movies for Hackers
A list of movies every cyberpunk must watch
SecLists
SecLists is the security tester's companion
Thanks
- (@jduck)
Joshua Drake and Steve Christey Coley for the inspiration!
And sure everyone of or a link to add here!
Nothing in this list matches your filter.