Vulnerabilities

Curated Resources (19)

Tools (4)

• OWASP ZAP zaproxy.orgfree

  World's most widely used open-source web application security scanner for finding vulnerabilities during development.

• sqlmap sqlmap.orgfree

  Open-source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws.

• Nmap nmap.orgfree

  Free and open-source utility for network discovery and vulnerability scanning across target hosts and ports.

• Wireshark wireshark.orgfree

  Widely-used network protocol analyzer enabling deep packet inspection and network vulnerability diagnostics.

Databases (4)

• National Vulnerability Database (NVD) nvd.nist.govfree

  U.S. government repository of standards-based vulnerability management data mapped to Common Vulnerabilities and Exposures.

• CVE Program cve.orgfree

  International dictionary and standard database identifying publicly disclosed cybersecurity vulnerabilities.

• Common Weakness Enumeration (CWE) cwe.mitre.orgfree

  Community-developed taxonomy database of software and hardware weaknesses and architectural security flaws.

• Exploit Database exploit-db.comfree

  Non-profit CVE-compliant database archiving public exploits and software vulnerability research papers.

Learn (3)

• OWASP Top Ten owasp.orgfree

  Standard awareness document representing broad consensus on the most critical security risks to web applications.

• PortSwigger Web Security Academy portswigger.netfree

  Free online interactive training platform covering SQL injection, XSS, CSRF, and modern web application security vulnerabilities.

• Common Weakness Enumeration Learning Guides cwe.mitre.orgfree

  Educational guidelines and architectural mitigation patterns for preventing recurring software security vulnerabilities.

Publications (3)

• ACM Transactions on Privacy and Security (TOPS) dl.acm.orgpaid

  Peer-reviewed scientific journal publishing research on vulnerability discovery, cryptanalysis, and system security.

• IEEE Security & Privacy computer.orgpaid

  Bimonthly magazine featuring articles, case studies, and surveys on security flaws, privacy vulnerabilities, and countermeasures.

• Communications of the ACM cacm.acm.orgfreemium

  Authoritative publication featuring reviews on vulnerability research, cryptographic flaws, and software exploitation.

Blogs and sites (3)

• Krebs on Security krebsonsecurity.comfree

  Investigative cybersecurity journalism blog uncovering zero-day vulnerabilities, data breaches, and cybercrime operations.

• Schneier on Security schneier.comfree

  Influential security blog by Bruce Schneier covering cryptanalysis, vulnerability management, and policy.

• OWASP Community owasp.orgfree

  Open community platform producing methodologies, tools, and vulnerability discussion forums for software security.

Events and conferences (2)

• Black Hat USA blackhat.compaid

  Internationally renowned technical information security conference presenting the latest in vulnerability research and exploitation.

• DEF CON defcon.orgpaid

  One of the world's longest-running and largest hacker conventions focused on vulnerability research and security testing.

Other subcategories

Agile Project Management · Backend Development · Databases · Development Environment · Development Tools · E-commerce · Frontend Development · Game Development · Miscellaneous · Platforms · Programming Languages · Software Engineering · Software Testing ·

Part of Development