Awesome-Vulnerability-Research - 🦄 A curated list of the awesome resources about th

项目说明

Awesome Research ![Awesome]()

🦄 A curated list of the awesome resources about the Research

> First things first:
> There are no exploits in this project. != Exploits A resides in the software itself, doing nothing on its own. If you are really curious about then you’ll find your own way to discover a flow, this list aimed to help you find it faster.

Maintained by Sergey Pronin with contributions from the community.
Become the next 🌟 stargazer or ✍️ contributor.

![Made With Passion]()
![GitHub Stars]()

Research is the process of analyzing a product, protocol, or algorithm - or set of related products - to find, understand or exploit one or more . research can but does not always invol engineering, code review, static and dynamic analysis, fuzzing and debugging.

Purpose

Currently, there is way more insecure code out there than researchers. Much more people looking at code that’s deployed in the real world are required by the market. This project exists to share a different awesome sources of information with you and encourage more people to get in. Here you will find books and articles, online classes, recommended tools, write-ups, methodologies and tutorials, people to follow, and more cool stuff about Research and tinkering with application execution flow in general.

Contributing

This List is published according to the *"Done is better than Perfect"* approach, so your contributions and suggestions are very and are always welcome! There are two options:
1. Use the standard method of forking this repo, making your changes and doing a pull request to have your content added. Please check the Contributing Guideline for more details.
2. Occasionally, if you just want to copy/paste your content, I'll take that too! Create an "Issue" with your suggestions and I will add it for you.

---
Legend:
* 🌟: Most Awesome
* 💰: Costs Money
* 🔥: Hot Stuff
* 🎁: For FREE
---

Contents

* Awesome Research
* Purpose
* Contributing
* Ad
- Articles
- Books
- Classes
- Conferences
- Conference talks
- Intentionally packages
- Mailing lists and Newsletters
- Presentations
- Podcasts and Episodes
- Relevant Standards
- Research Papers
+ Whitepapers
+ Indi researchers
- Tools and Projects
+ GitHub repos
- Tutorials
-
- ’s bug databases
- databases
- Wargames and CTFs
- Websites
+ Blogs
- Who to Follow
- Miscellaneous Ad
* Companies and Jobs
* Coordinated Disclosure
* Common Lists
- Awesome Lists
- Other Lists
* Thanks
* Glossary
* License

Ad

Back to Contents

Articles

* Super Awesome Fuzzing, Part One - by Atte Kettunen and Eero Kurimo, 2017
* From Fuzzing Apache httpd Server to C and a $1500 Bounty - by Javier Jiménez, 2017
* Root cause analysis of integer flow - by Corelan Team, 2013

Back to Contents

Books

* 🌟The Art of Software Security Assessment: Identifying and Pre Software - by Mark Dowd, John McDonald, Justin Schuh - published 2006, ISBN-13: 978-0321444424 / ISBN-10: 24
* 🌟The Shellcoder's Handbook: Disco and Exploiting Security Holes - by Chris Anley, John Heasman, Felix Lindner, Gerardo Richarte - published 2007, 2nd Edition, ISBN-13: 978-0470080238 / ISBN-10: 047008023X

Back to Contents

Classes

* Ad Windows Exploitation (AWE) - by Offensi with complementary OSEE (Offensi Exploitation Expert) Certification
* Cracking The Perimeter (CTP) - by Offensi, with complementary OSCE (Offensi Certified Expert) Certification
* 🎁Modern Binary Exploitation (CSCI 4968) - by RPISEC at Rensselaer Polytechnic Institute in Spring 2015. This was a uni course de and run solely by students to teach skills in research, reverse engineering, and binary exploitation.
* Software Security Course on Coursera - by Uni of Maryland.
* Offensi Security - by W. Owen Redwood and Prof. Xiuwen Liu.

Back to Contents

Conferences

* 🌟DEF CON - Las Vegas, NV, USA
* Black Hat - Las Vegas, NV, USA
* Black Hat Europe - London, UK //🔥Join me this year on Dec, 7-10, 2020!
* Black Hat Asia - Singapore
* 🎁BSides - Worldwide
* BruCON - Brussels, Belgium
* 🌟Chaos Communication Congress (CCC) - Hamburg, Germany
* Code Blue - Tokyo, Japan
* Nullcon - Goa, India
* 44CON - London, UK
* AppSecUSA - Washington DC
* OWASP AppSec EU - Europewide
* Positive Hack Days - Moscow, Russia
* 🌟ZeroNights - Moscow, Russia
* 🌟WarCon - Warsaw, Poland

Back to Contents

Conference talks

* 🌟 101: How to Launch or Improve Your Research Game - by Joshua Drake and Ste Coley at DEFCON 24, 2016
* Writing Reports that Maximize Your Bounty Payouts - by Kymberlee Price, originally presented at Nullcon, 2016
* Browser Bug Hunting: Memoirs of a Last Man Standing, by Atte Kettunen, presented at 44CON, 2013

Back to Contents

Intentionally packages

* HackSys Extreme Windows Driver

Back to Contents

Mailing lists and Newsletters

Back to Contents

Presentations

* 🌟[ 101: How to Launch or Improve Your Research Game [PDF]]() - by Joshua Drake and Ste Coley at DEFCON 24, 2016
* 🌟[Effective File Format Fuzzing [PDF]]() - by Mateusz “j00ru” Jurczyk presented at BlackHat EU, 2016
* [Bootstrapping A Security Research Project [PDF]]() or Speaker Deck - by Andrew M. Hay at SOURCE Boston, 2016
* [Bug Hunting with Static Code Analysis [PDF]]() - by Nick Jones, MWR Labs, 2016

Back to Contents

Podcasts and Episodes

#### Podcasts

Back to Contents

#### Episodes

Back to Contents

Relevant Standards

* CVE - Common and Exposures, maintained by the MITRE Corporation
* CWE - Common Weakness Enumeration, maintained by the MITRE Corporation
* CVSS - Common Scoring System, maintained by FIRST (Forum of Incident Response and Security Teams)

Back to Contents

#### Miscellaneous Documents

* 💰ISO/IEC 29147:2014 - Disclosure Standard
* RFPolicy 2.0 - Full Disclosure Policy (RFPolicy) v2.0 by Packet Storm

Back to Contents

Research Papers

#### Whitepapers

* 🔥[TSIG Authentication Bypass Through Signature Forgery in ISC BIND [PDF]]() - Clément BERTHAUX, Synacktiv, C

Back to Contents

#### Indi researchers

* 🔥[Taking Windows 10 Kernel Exploitation to the Next Level – Le WRITE-WHAT-WHERE
in Creators Update [PDF]]() - Morten Schenk, originally presented at Black Hat 2017

Back to Contents

Tools and Projects

* Windbg.aspxi) - The preferred debugger by exploit writers.
* ltrace - Intercepts library calls
* ansvif - An ad cross platform fuzzing framework designed to find in C/C++ code.
* Metasploit Framework - A framework which contains some fuzzing capabilities modules.
* Spike - A fuzzer de framework like sulley, a predecessor of sulley.

Back to Contents

#### GitHub repos

* Google Sanitizers - A repo with extended documentation, bugs and some helper code for the AddressSanitizer, MemorySanitizer, ThreadSanitizer, LeakSanitizer. The actual code resides in the LLVM repository.
* 🔥FLARE VM - FLARE (FireEye Labs Ad Reverse Engineering) a fully customizable, Windows-based security distribution for malware analysis, incident response, penetration testing, etc.
* hackers-grep - The hackers-grep is a tool that enables you to search for strings in PE files. The tool is capable of searching strings, imports, exports, and public symbols (like woah) using regular expressions.
* Grinder - Grinder is a system to automate the fuzzing of web browsers and the management of a large number of crashes.
* Choronzon - An e knowledge-based fuzzer
* boofuzz - A fork and successor of Sulley framework

Back to Contents

Tutorials

Back to Contents

Back to Contents

’s bug databases

* Google Chrome issue tracker - The Chromium Project. *Google Account Required*

Back to Contents

databases

Back to Contents

Wargames and CTFs

Back to Contents

Websites

* Corelan Team
* FuzzySecurity by b33f
* Fuzzing Blogs - by fuzzing.info

Back to Contents

#### Blogs

* 🌟j00ru//vx tech blog - Coding, reverse engineering, OS internals covered one more time

Back to Contents

Who to Follow

#### Discord

* 🌟Security Champions (join now)

Back to Contents

#### GitHub

* FuzzySecurity
* jksecurity
* MortenSchenk

Back to Contents

#### Medium

* the grugq ()

Back to Contents

#### Twitter

* 🌟Joshua Drake ()
* 🌟Ste Coley ()
* Andrew M. Hay ()
* the grugq ()
* b33f ()
* Tim Strazzere ()
* Wojciech Pawlikowski ()
* Atte Kettunen ()
* Pawel Wylecial ()
* Hooked Browser ()
* Kymberlee Price ()
* Michael Koczwara ()
* Mateusz Jurczyk ()
* Project Zero Bugs () - Cheks for new bug reports every 10 minutes. Not affiliated with Google.
* Hack with GitHub () - Open source hacking tools for hackers and pentesters.

Back to Contents

Miscellaneous Ad

Back to Contents

Companies and Jobs

Back to Contents

Coordinated Disclosure

* SecuriTeam Secure Disclosure (SSD) - SSD provides the support you need to turn your experience unco security into a highly paid career. SSD was designed by researchers, for researchers and will give you the fast response and great support you need to make top dollar for your disco.
* The Zero Day Initiative (ZDI) - ZDI is originally founded by TippingPoint, is a program for rewarding security researchers for responsibly disclosing . Currently managed by Trend Micro.

Back to Contents

Common Lists

Awesome Lists

* Awesome AppSec - A curated list of resources for learning about application security. Contains books, websites, blog posts, and self-assessment quizzes.
* Awesome Web Security - A curated list of Web Security materials and resources.
* Awesome Fuzzing - A curated list of fuzzing resources for learning Fuzzing and initial phases of Exploit De like root cause analysis.

Back to Contents

Other Lists

* Hack with Github - Open source hacking tools for hackers and pentesters.
* Movies for Hackers - A list of movies every cyberpunk must watch.
* SecLists - SecLists is the security tester's companion.

Back to Contents

Thanks

* Joshua Drake () and Ste Coley () for the inspiration!
* ** for the most awesome contributions
* And sure e of you, who has sent the pull requests or suggested a link to add here!

Thanks a lot!

Back to Contents

License

This work is licensed under a Creati Attribution Share-Alike 4.0 International License


Back to Contents

项目信息

开发语言：未知

Star 数：1373

技术要点

该项目属于漏洞知识库方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕🦄 A curated list of the awesome resources about the Vulnerability Research展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。