Collection of methodology and test case for various web vulnerabilities.

All about bug bounty (bypasses, payloads, and etc)

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

A collection of custom security tools for quick needs.

A collection of awesome one-liner scripts especially for bug bounty tips.

This challenge is Inon Shkedy's 31 days API Security Tips.

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.

Tips and Tutorials for Bug Bounty and also Penetration Tests.

API Security Project aims to present unique attack & defense methods in API Security field

A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying and exploiting vulnerabilities.

Asset inventory of over 800 public bug bounty programs.

OSINT tools and more but without API key

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

🔱 Powerfull XSS Scanning and Parameter analysis tool&gem

Some files for bruteforcing certain things.

A collection of PDF/books about the modern web application security and bug bounty.