# SecLeaf

> We are a global cybersecurity community bridging the gap between students, researchers, and the cybersecurity industry through expert-led sessions, practical workshops, and competitive CTF events.

SecLeaf provides structured learning, real-world vulnerability research, and hands-on offensive and defensive cybersecurity training. Our platform and community initiatives help learners gain industry-relevant experience and ethical hacking skills.

- Website: https://secleaf.xyz
- CTF Platform: https://ctf.secleaf.xyz
- Primary Language: English
- Target Audience: Cybersecurity students, ethical hackers, security researchers, penetration testers, and industry professionals

## Core Pages

- [Home](https://secleaf.xyz/): Overview of our community, upcoming live sessions, CTF announcements, featured speakers, and community partners.
- [About Us](https://secleaf.xyz/about): Our mission, community values, leadership, educational philosophy, and industry impact.
- [Events](https://secleaf.xyz/events): Upcoming and past webinars, hands-on workshops, technical masterclasses, and mini-CTF competitions.
- [Speakers](https://secleaf.xyz/speakers): Industry mentors, penetration testers, red team operators, and security researchers who deliver our sessions.
- [Team](https://secleaf.xyz/team): Core organizers and contributors leading SecLeaf initiatives.
- [Blog & Research](https://secleaf.xyz/blog): Technical breakdowns, threat analysis, and practical security tutorials.
- [Contact](https://secleaf.xyz/contact): Inquiries for collaborations, speaking opportunities, partnerships, and sponsorships.
- [Terms & Code of Conduct](https://secleaf.xyz/terms): Community rules, ethical cybersecurity standards, and legal disclaimer.

## CTF Platform

- [SecLeaf CTF](https://ctf.secleaf.xyz): Our competitive Capture The Flag platform hosting international jeopardy-style challenges.
- [CTF Rules & Guidelines](https://ctf.secleaf.xyz/rules): Competition rules, flag submission policies, and anti-cheating guidelines.
- [Early Registration](https://ctf.secleaf.xyz/early-ctf): Early access registration for upcoming flagship CTF tournaments.
- [CTF Privacy Policy](https://ctf.secleaf.xyz/privacy-policy): Privacy and data retention policies for CTF participants.
- [CTF Terms of Service](https://ctf.secleaf.xyz/terms-of-service): Terms governing participation in SecLeaf competitions.

## Research & Technical Breakdowns

- [OWASP API Security Top 10 - BOLA](https://secleaf.xyz/blog/owasp-api-security-top-10-highlight-1-bola-broken-object-level-authorization): Deep dive into Broken Object Level Authorization, exploit scenarios, and server-side authorization defenses.
- [OWASP API Security Top 10 - Broken Authentication](https://secleaf.xyz/blog/owasp-api-security-top-10-2-broken-authentication): Analysis of credential stuffing, weak token handling, JWT misconfigurations, and authentication defenses.
- [OWASP API Security Top 10 - Broken Object Property Level Authorization](https://secleaf.xyz/blog/api3-2023-broken-object-property-level-authorization): Breakdown of unauthorized object property access, mass assignment, and defensive schema validation.
- [API Security Category](https://secleaf.xyz/blog/category/APISEC): All articles and tutorials focused on application and API security vulnerabilities.

## Community & Social Channels

- [Discord Community](https://discord.gg/DvNtgNaYBG): Live discussions, challenge hints, workshop Q&A, and study groups.
- [CTFtime Profile](https://ctftime.org/event/3136): Official CTFtime ratings, team standings, and event tracking.
- [WhatsApp Channel](https://whatsapp.com/channel/0029VbCOsMV65yDA7Sb8Aj1D): Fast announcements for webinars, registrations, and challenge releases.
- [LinkedIn](https://www.linkedin.com/company/secleaf): Professional updates, partner announcements, and speaker spotlights.
- [GitHub](https://github.com/aigo-admin/secleaf): Open-source resources, challenge code, and community projects.

## Optional & Extended Information

- [Full Context (llms-full.txt)](https://secleaf.xyz/llms-full.txt): Complete documentation of our organization, curriculum tracks, code of conduct, and technical writeups in a single markdown file.