Resources

Meethack

• N-day Analysis:
  • “A really simple security bypass” challenge
  • “Black Project” challenge
  • GitLab - CVE-2023-2825
  • Cacti - CVE-2022-46169
  • GitLab - CVE-2022-2884
  • Jenkins - CVE-2016-0792
• Secrets leakage detection & prevention
• CI/CD Security Risks & CI/CD Goat
• Insecure Deserialization (with examples in Python) (challenges)

Talks

• Linux Day Torino 2024 - Secrets leakage detection & prevention - 2024-10-26

CTF writeups

Have a look at my repository.