fabric is an open-source framework for augmenting humans using AI. It provides a modular framework for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.

List of Hourly Updated Fresh DNS resolvers

Prototype Pollution and useful Script Gadgets

A Fast Broken Link Hijacker Tool written in Python

A browser extension that allows you to monitor, intercept, and debug JavaScript sinks based on customizable configurations.

Burp Plugin to Bypass WAFs through the insertion of Junk Data

Same Origin XSS challenge

This repository contains a mindmap and stepwise resource to get started with Smart Contract Auditing. If you find anything missing or want to update existing resources, feel free to create a pull r…

Oversecured Vulnerable iOS App

A streamlined tool for discovering private TLDs for security research.

Uncover the true IP address of websites safeguarded by Cloudflare & Others

A curated list of web3Security materials and resources For Pentesters and Bug Hunters.

Smart contract audit skills roadmap for beginners, auditors, engineers, etc.

Central Repository for the Epoch 0 coursework and quizzes. Contains all the content, cross-referenced and linked.

Mastering Ethereum, by Andreas M. Antonopoulos, Gavin Wood

DeFi Developer roadmap is a curated Developer handbook which includes a list of the best tools for DApps development, resources and references!

Web3/Solidity based wargame

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Nginx configuration static analyzer

The recursive internet scanner for hackers. 🧡

An intentionally vulnerable NGINX setup

An experimental high-performance DNS query bruteforce tool built with AF_XDP for extremely fast and accurate bulk DNS lookups.

A curated list of Smart Contract Security materials and resources For Researchers

Telegram Web Z, GPL v3

A collection of awesome AWS S3 tools that collects and enumerates exposed S3 buckets

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature