Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

A collection of various awesome lists for hackers, pentesters and security researchers

This is a repo of my solution of one XSS challenge website (http://sudo.co.il/xss/) . This challenges may have different types of solutions. My solutions are not the only one. So, keep searching & …

A tool to dump a git repository from a website

Make concurrent requests with the curl command-line tool

A Broken-URL Checker

Awesome Bug bounty builder Project

a tiny tool for swf hacking, just browse it:)

A collection of android security related resources

Active Directory Wordlists

This repo about how to start in Pen-Testing Fields

This repository contains list of web security related resources that you can use to gain new skills and extend knowledge

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wis…

This repository contains all the supplement material for the book "The art of sub-domain enumeration"

Intentionally vulnerable web app

Small but effective wordlist for brute-forcing and discovering hidden things.

Chart-Of-Wordlist helps to create your own custom wordlist. Also in one repository, you can find a list of awesome wordlist.

🐛 A list of writeups from the Google VRP Bug Bounty program

High speed/Low cost CommonCrawl RegExp in Node.js

A proof-of-concept WordPress plugin fuzzer

Predict Mongo ObjectIds

"Can I take over DNS?" — a list of DNS providers and how to claim vulnerable domains.

Awesome Writeups and POCs

Top disclosed reports from HackerOne

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

Finding XSS during recon

A one liner Bash command which finds CORS in every possible endpoint.

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.