Record the cases that I think are interesting in bughunt, which will be constantly updated, 记录挖洞中个人觉得有意义的tips, 会持续更新

A curated list of available Bug Bounty & Disclosure Programs and Write-ups.

Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration tests and vulnerability assessments too.

This repository contains all of the resources and materials of @bhavesharmalkar's Learn365 series, including links to articles, videos, and other learning resources.

Asset inventory of over 800 public bug bounty programs.

WEB_Penetration Testing Methodology , Notes and Tips

These are my checklists which I use during my hunting.

Passive subdomain continous monitoring tool.

List of fresh DNS resolvers updated daily

A collection of PDF/books about the modern web application security and bug bounty.

PassDetective is a command-line tool that scans shell command history to detect mistakenly written passwords, API keys, and secrets. Using regular expressions, it helps prevent accidental exposure of sensitive information in your command history.

"zwatcher is a lightweight bash script for monitoring sub/domains or a list of sub/domains and javascript files. It compares HTTP status codes and content length to detect changes and notifies the user when any modifications occur. Easily keep track of your domains' health and security with zwatcher."

"Can I take over DNS?" — a list of DNS providers and how to claim (sub)domains via missing hosted zones

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

A curated list of awesome Burp Extensions for bug hunter. groups by vulnerability types

bug bounty tips, methodology and one liners explained

This my presnol bug find checklist ; )

Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools.

http://10degres.net

Dump all available paths and/or endpoints on WADL file.

A sensible no bullshit repo of summaries of reports on hackerone, bugcrowd and alike, that makes straight up sense and make it easy to repeat and automate. This is supposed to serve as my personal reference, but should be a good public index reference for like minded.

Pointer is a Fast Simple Lightweight Tool for Endpoint Discovery.

Collection of methodology and test case for various web vulnerabilities.

Mobile Hacker's Weapons / A collection of cool tools used by Mobile hackers. Happy hacking , Happy bug-hunting

OSINT tools and more but without API ke

A collection of awesome one-liner scripts especially for bug bounty tips.

Tool to remove ANSI characters from text files.

Juniper Firewalls CVE-2023-36845 - RCE

Archive of Potential Insider Threats