---
description: >-
  Each vulnerability group contains resources on the main explanation page as
  well as the further resources page.
---

# Main Resources

This page contains the main resources for application security.

{% embed url="https://portswigger.net/web-security/all-materials" %}

{% embed url="https://owasp.org/www-project-top-ten/" %}

OWASP Web Security Testing Guide&#x20;

{% embed url="https://owasp.org/www-project-web-security-testing-guide/latest/" %}

The OWASP Code Review Guide provides source code examples of each vulnerability and is a great learning resource and reference.&#x20;

{% embed url="https://owasp.org/www-pdf-archive/OWASP_Code_Review_Guide_v2.pdf" %}

The OWASP Cheat Sheet contains examples and remediation for each vulnerability.&#x20;

{% embed url="https://cheatsheetseries.owasp.org/index.html" %}

{% embed url="https://appsecwiki.com/#/" %}

View hackerone reports on the hacktivity page. Use the search sidebar to search for specific vulnerabilities to read real world write-ups.&#x20;

{% embed url="https://hackerone.com/hacktivity" %}

{% embed url="https://github.com/paragonie/awesome-appsec" %}

Hacktrickz is an amazing amalgamation of resources for pentesting and application security. Go to the web security section for web security.&#x20;

{% embed url="https://book.hacktricks.xyz/pentesting-web/2fa-bypass" %}

This contains all the github awesome lists:&#x20;

{% embed url="https://asmen.icopy.site/awesome" %}

