0xor0ne/awesome-list

This repository is a personal reading list focused on cybersecurity. The author collects links to blog posts, technical write-ups, and research papers and organizes them by year, going back to 2011. There is a companion file for tools and code repositories, but the main list concentrates on written content. The entries cover a wide range of topics within offensive and defensive security. A large portion deals with low-level exploitation: finding and taking advantage of bugs in operating system kernels (Linux and Windows), browsers, hypervisors, and firmware. Other entries cover hardware hacking, such as dumping firmware from routers and embedded devices, bypassing secure boot on real devices, and analyzing hardware wallets. Reverse engineering appears throughout as well, with write-ups on unpacking malware, deobfuscating code, and analyzing in-the-wild exploits. Notable recurring themes include Linux kernel exploitation techniques (heap overflows, use-after-free bugs, page table attacks), iOS and Android vulnerability research, Capture-the-Flag challenge write-ups that explain real exploitation steps, and analysis of CVEs with public proof-of-concept code. The 2025 and 2026 sections are the most dense, reflecting the author's current active reading. This is not a beginner tutorial list. The content assumes familiarity with assembly, memory management, and operating system internals. For someone learning security it could serve as a map of where the field is focused and which topics come up repeatedly, but each linked article is an independent deep technical read. The list has no abstracts or summaries for the individual entries, only titles and links. The full README is longer than what was shown.