19 research collections
Each collection maps to one deep-research batch in the archive. Open one to search only its sources.
OAuth, OIDC & SSO
Redirect-URI abuse, token theft, PKCE weaknesses and single-sign-on bypasses.
Cloud IAM & Attack Paths
Cross-account privilege escalation and attack-path analysis in AWS, Azure and GCP.
GraphQL & API Security
Introspection abuse, authorization testing and automated API security workflows.
Web3 & Smart Contracts
Reentrancy, oracle manipulation, MEV and smart-contract analysis tooling.
Dependency Confusion & CI/CD
Package-registry confusion, typosquatting detection and compromise of build pipelines.
Container Escape & Kubernetes
Container escapes, cluster privilege escalation and misconfiguration exploitation.
Mobile Pentesting
Android/iOS decompilation, SSL pinning bypass and runtime instrumentation.
Methodologies & Frameworks
PTES, OWASP WSTG/ASVS, NIST, MITRE ATT&CK and adjacent standards.
Container & Kubernetes Posture
Hardening, runtime security and posture management for cloud-native workloads.
GraphQL Reconnaissance
Introspection as a discovery channel and GraphQL-specific reconnaissance.
AI-Driven Fuzzing
LLM-guided fuzzer synthesis, harness generation and symbolic execution.
Cloud Misconfiguration at Scale
Detecting and exploiting misconfigured cloud services across large estates.
LLM Attack Surfaces
Prompt injection, tool poisoning and automated exploitation of LLM agents.
OAuth Token Attacks & SSO Bypass
Token interception, authorization-code injection and SSO trust abuse.
Wireless, Bluetooth & IoT
Wi-Fi, BLE, RF and embedded-device protocol research.
LLM Security & Prompt Injection
Defences, benchmarks and red-teaming material for language-model systems.
Mobile Reverse Engineering
Automated APK/IPA analysis, hooking frameworks and obfuscation handling.
ML for Vulnerability Discovery
Learning-based bug finding, fuzzing and program-analysis research.
Supply Chain & Dependencies
Dependency scanning, SBOM analysis and software-supply-chain attack paths.
Collections were derived from the source reports in repertoire/_new_sources_full.tsv. Counts and descriptions are generated from that file — nothing here is approximated.