El Mehdi myuyu

AvasDream / oscp_prep.md

Last active February 22, 2026 21:07

Resource for OSCP like HTB Boxes with Ippsec Videos and Writeups.

Sources

SwitHak / 20211210-TLP-WHITE_LOG4J.md

Last active September 14, 2026 17:39

BlueTeam CheatSheet * Log4Shell* | Last updated: 2021-12-20 2238 UTC

Security Advisories / Bulletins / vendors Responses linked to Log4Shell (CVE-2021-44228)

If you want to add a link, comment or send it to me
Feel free to report any mistake directly below in the comment or in DM on Twitter @SwitHak

Royce Williams list sorted by vendors responses Royce List
Very detailed list NCSC-NL
The list maintained by U.S. Cybersecurity and Infrastructure Security Agency: CISA List

0xdevalias / _deobfuscating-unminifying-obfuscated-web-app-code.md

Last active October 3, 2026 04:02

Some notes and tools for reverse engineering / deobfuscating / unminifying obfuscated web app code

Some notes and tools for reverse engineering / deobfuscating / unminifying obfuscated web app code.

msrkp / review.md

Last active February 6, 2024 20:30

The criteria I used to rank:

The level of complexity of the research. (How hard for me to do the same research?)
The usefulness of the research to other security researchers.
Novelty, scale of exploitation and impact

Top candidates

Exploiting Hardened .NET Deserialization: New Exploitation Ideas and Abuse of Insecure Serialization
https://github.com/thezdi/presentations/blob/main/2023_Hexacon/whitepaper-net-deser.pdf

tin-z / VR_roadmap.md

Last active October 6, 2026 14:53

Becoming a (pre-AI) Vulnerability Researcher roadmap: my personal experience

#prereqs
#roadmap
- #iot
- #chrome-and-friends: Chrome, V8, Blink, Mojo, etc.
- Linux kernel #todo
- expdev #todo