appsec.fyi

Sources

121 application security publishers with 5+ resources on appsec.fyi, indexed cross-topic.

Browse by source

Each page collects everything we’ve curated from a given publisher across all 25 active topics. Aggregator platforms (Medium, GitHub, X, Reddit, YouTube) are excluded so the list reflects original-publisher signal.

0xn3va.gitbook.io5 resourcesAuthN, GraphQL, JWT acunetix.com8 resourcesXSS, CSRF, Deser advisories.gitlab.com17 resourcesSSRF, Deser, Secrets aikido.dev66 resourcesSupply Chain, AI, RCE akamai.com6 resourcesRCE, API Sec, JWT appsec.guide6 resourcesFuzzing, Burp appsecsanta.com5 resourcesMobile, Secrets, Python arcticwolf.com8 resourcesRCE, SSRF, JWT arstechnica.com9 resourcesAI, Supply Chain arxiv.org36 resourcesAI, Fuzzing, Deser assetnote.io5 resourcesRecon, GraphQL, SSRF aws.amazon.com7 resourcesAuthZ, Supply Chain, AI bankinfosecurity.com10 resourcesSupply Chain, RCE, AI betterprogramming.pub5 resourcesgolang bishopfox.com29 resourcesRCE, AuthZ, AI blackhat.com5 resourcesTalks, Deser, SSTI bleepingcomputer.com71 resourcesRCE, Supply Chain, SSRF blog.cloudflare.com5 resourcesRCE, AI, AuthN blog.doyensec.com12 resourcesAuthZ, AuthN, Fuzzing blog.gitguardian.com60 resourcesSecrets, Supply Chain, AI blog.golang.org5 resourcesgolang blog.includesecurity.com8 resourcesAI, Talks, AuthZ blog.logrocket.com5 resourcesgolang, GraphQL blog.qualys.com6 resourcesRCE, API Sec, AuthZ blog.talosintelligence.com7 resourcesRCE, AuthN, Supply Chain blog.trailofbits.com21 resourcesAI, Fuzzing, Bug Bounty blog.zsec.uk6 resourcesXXE, RCE, API Sec book.hacktricks.xyz12 resourcesSSRF, SSTI, API Sec bugcrowd.com11 resourcesXSS, Bug Bounty, AuthN cert.pl7 resourcesCSRF, SQLi, Fuzzing cheatsheetseries.owasp.org17 resourcesAuthN, AuthZ, SSRF checkmarx.com5 resourcesPython, GraphQL cloud.google.com7 resourcesDeser, RCE, Mobile cloudsek.com10 resourcesSupply Chain, SSRF, AI cobalt.io10 resourcesAPI Sec, AuthN, CSRF corneacristian.medium.com6 resourcesBug Bounty, CSRF, IDOR cryptorank.io6 resourcesSSRF, API Sec, RCE csoonline.com45 resourcesRCE, Supply Chain, AI cybernews.com18 resourcesSupply Chain, RCE, API Sec cyberscoop.com7 resourcesSupply Chain, AI, XSS cybersecuritydive.com11 resourcesRCE, Supply Chain, AI cyberw1ng.medium.com5 resourcesSSRF, AuthN, Bug Bounty danaepp.com9 resourcesBurp, API Sec, AuthN danielmiessler.com6 resourcesBug Bounty, AI, Recon darkreading.com18 resourcesSupply Chain, RCE, XSS devops.com8 resourcesSupply Chain, RCE dl.acm.org10 resourcesDeser, Fuzzing, SQLi docs.google.com5 resourcesSSRF, Talks, API Sec elttam.com7 resourcesDeser, RCE, API Sec endorlabs.com6 resourcesRCE, AI, AuthN escape.tech7 resourcesGraphQL, AI, IDOR esecurityplanet.com26 resourcesSupply Chain, RCE, SQLi exploit-db.com6 resourcesSQLi, SSTI, Deser genai.owasp.org5 resourcesAI, Talks github.blog15 resourcesSupply Chain, Secrets, Bug Bounty govinfosecurity.com5 resourcesSupply Chain, API Sec hackernoon.com12 resourcesRCE, Supply Chain, SQLi hackerone.com33 resourcesSSRF, JWT, AuthN helpnetsecurity.com40 resourcesRCE, Supply Chain, AI hkcert.org28 resourcesRCE, Python imperva.com8 resourcesGraphQL, AuthZ, CSRF infoq.com7 resourcesSupply Chain, RCE, Secrets infosecurity-magazine.com16 resourcesAI, RCE, Supply Chain infosecwriteups.com176 resourcesBug Bounty, AuthZ, AuthN intigriti.com45 resourcesBug Bounty, Recon, AI invicti.com16 resourcesJWT, Deser, SSRF jfrog.com25 resourcesAI, Supply Chain, RCE kaspersky.com5 resourcesSupply Chain, Mobile kitploit.com5 resourcesBurp, Fuzzing, Recon labs.detectify.com10 resourcesBug Bounty, SSRF, XSS labs.watchtowr.com14 resourcesRCE, AuthN, AuthZ levelup.gitconnected.com12 resourcesgolang, API Sec mas.owasp.org7 resourcesMobile microsoft.com23 resourcesSupply Chain, RCE, AI msspalert.com5 resourcesSupply Chain, AI, API Sec null-byte.wonderhowto.com5 resourcesSQLi, XSS, Recon onsecurity.io5 resourcesSSTI, AuthN, RCE osintteam.blog5 resourcesOSINT, Recon, Bug Bounty owasp.org39 resourcesAuthN, AuthZ, XSS ox.security30 resourcesSupply Chain, RCE, AI paloaltonetworks.com11 resourcesSupply Chain, API Sec, AI pentesterlab.com6 resourcesJWT, Deser, SSRF picussecurity.com5 resourcesSQLi, AuthN, RCE portswigger.net104 resourcesBurp, XSS, SSRF projectdiscovery.io6 resourcesRecon, AuthN, SSRF projectzero.google7 resourcesFuzzing, AuthZ, Bug Bounty python.plainenglish.io5 resourcesPython, OSINT radar.offseq.com7 resourcesSSRF, CSRF rapid7.com31 resourcesRCE, CSRF, SQLi realpython.com12 resourcesPython, AuthN rescana.com66 resourcesRCE, Supply Chain, XSS resecurity.com6 resourcesRCE, SSRF, Deser reversinglabs.com10 resourcesSupply Chain, Secrets, Fuzzing samcurry.net5 resourcesAuthZ, Secrets, SSRF security.snyk.io5 resourcesSSRF, SSTI, XSS securityaffairs.com40 resourcesRCE, SSRF, Supply Chain securitylab.github.com5 resourcesSupply Chain, Mobile, RCE securitylabs.datadoghq.com6 resourcesSupply Chain, AI, RCE securityweek.com83 resourcesRCE, Supply Chain, SQLi sentinelone.com35 resourcesPython, SSRF, CSRF slideshare.net7 resourcesXSS, Talks, XXE snyk.io227 resourcesAI, Supply Chain, API Sec socradar.io9 resourcesRCE, Supply Chain, GraphQL sonatype.com10 resourcesSupply Chain, Python, Deser stackoverflow.com10 resourcesXSS, CSRF, Python startupfortune.com5 resourcesRCE, Supply Chain, API Sec stepsecurity.io12 resourcesSupply Chain techrepublic.com7 resourcesRCE, AI, API Sec tenable.com5 resourcesSSRF, Secrets, XXE thehackernews.com181 resourcesRCE, Supply Chain, API Sec theregister.com27 resourcesSupply Chain, RCE, AI tldrsec.com21 resourcesAI, Supply Chain, Bug Bounty trendmicro.com10 resourcesSupply Chain, API Sec, AI trufflesecurity.com5 resourcesSecrets, AuthN unit42.paloaltonetworks.com48 resourcesAI, Supply Chain, Secrets vaadata.com8 resourcesGraphQL, API Sec, AuthN whiteoaksecurity.com8 resourcesBurp, AuthZ, Bug Bounty wired.com7 resourcesBug Bounty, Mobile, OSINT wiz.io254 resourcesAI, Supply Chain, RCE yeswehack.com25 resourcesBug Bounty, Recon, AI zeropath.com5 resourcesAuthN, SSRF, Deser