AWSGoat : A Damn Vulnerable AWS Infrastructure

Security Blog for Penetesting | Bug Bounty | CTF write-up | POC | HackTheBox | Vulnhun | tryHackMe

A collection of various awesome lists for hackers, pentesters and security researchers

🐛 A list of writeups from the Google VRP Bug Bounty program

Small but effective wordlist for brute-forcing and discovering hidden things.

This repository contains list of web security related resources that you can use to gain new skills and extend knowledge

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wis…

Chart-Of-Wordlist helps to create your own custom wordlist. Also in one repository, you can find a list of awesome wordlist.

Readme about Khaled Mohamed xElkomy

A collection of awesome one-liner scripts especially for bug bounty tips.

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

A collection of awesome API Security tools and resources.

A curated list of Android Security materials and resources For Pentesters and Bug Hunters

Mind-Maps of Several Things

Web application fuzzer

This is a curated list of mobile based CTFs, write-ups and vulnerable apps. Most of them are android based due to the popularity of the platform.

Golden Guide

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

Collection of Facebook Bug Bounty Writeups

A curated list of awesome infosec courses and training resources.

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

Compilation of Resources from TCM's OSINT Course

A collection of special paths linked to major web CVEs, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints …