Ishaq Mohammed

Application-Security-Engineer-Interview-Questions. Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer

PWK-OSCP-Preparation-Roadmap. Roadmap for preparing for OSCP, anyone is free to use this, and also feedback and contributions are welcome

Resources-for-Application-Security. Some good resources for getting started with application security

Browser-Security-Research. Resources for Browser Security Research

MavenDependencyCheck. An automation script to run OWASP Dependency-Check on multiple Maven Based projects.

security_whitepapers. Collection of misc IT Security related whitepapers, presentations, slides - hacking, bug bounty, web application security, XSS, CSRF, SQLi

companies-hiring-security-remote. This repo is meant to be a list of companies that hire security people full remote.

awesome-infosec. A curated list of awesome infosec courses and training resources.

computer-science. :mortar_board: Path to a free self-taught education in Computer Science!

security-1. A collection of software, libraries, documents, books, resources and cools stuffs about security.

awesome-internet-scanning. A curated list of awesome Internet port and host scanners, plus related components and much more, with a focus on free and open source projects.

A-Good-Cyber-Security-List. HTML

awesome-threat-modelling. A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.

InfoSec-Learning-Materials. Resource for developing infosec skills for OSCP

awesome-browser-exploit. awesome list of browser exploitation tutorials

OSCP-1. OSCP cheet sheet

Web-CTF-Cheatsheet. Web CTF CheatSheet 🐈

Red-Teaming-Toolkit. A collection of open source and commercial tools that aid in red team operations.

DevopsWiki. A wiki of Devops Tools, Tutorials and Scripts

quick-SQL-cheatsheet. A quick reminder of all SQL queries and examples on how to use them.

awesome-code-review. An "Awesome" list of code review resources - articles, papers, tools, etc

awesome-distributed-systems-1. Awesome list of distributed systems resources

OSCP-Archives. An archive of everything related to OSCP

exploit-database-bin-sploits. Exploit Database binary exploits located in the /sploits directory

Free-Security-eBooks. Free Security and Hacking eBooks

google-ctf. Google CTF challenges

Cheatsheet. Python

Library-Management-System. Library Management System

phpstan. PHP Static Analysis Tool - discover bugs in your code without running it!

developer-roadmap. Roadmap to becoming a web developer in 2018

Awesome-Red-Teaming. List of Awesome Red Teaming Resources

Mirai-Source-Code. Leaked Mirai Source Code for Research/IoC Development Purposes

H5SC. HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

OWASP-Web-Checklist. OWASP Web Application Security Testing Checklist

kurukshetra. Kurukshetra - A framework for teaching secure coding by means of interactive problem solving.

every-programmer-should-know. A collection of (mostly) technical things every software developer should know

PracticalMalwareLabs. Keep track of the labs from the book "Practical Malware Analysis"

Reconnoitre. A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results along with writing out recommendations for further testing.

IoTSecurity101. From IoT Pentesting to IoT Security

dirtycow.github.io. Dirty COW

pocs. Proof of Concepts (PE, PDF...)

ctf. Python

nullmumbai08-10-16. SQL injection, CSRF, brute force and image upload vulnerability hack scripts and safeguarding scripts

how2heap. A repository for learning various heap exploitation techniques.

MavenDependencyCheck-Golang. Go