Source code for Hacker101.com - a free online web and mobile security class.

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

Top disclosed reports from HackerOne

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

A big list of Android Hackerone disclosed reports and other resources.

Tips and Tutorials for Bug Bounty and also Penetration Tests.

BUG BOUNTY WRITEUPS - OWASP TOP 10 🔴🔴🔴🔴✔

Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.

This project crawls bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) hourly and dumps them into the bounty-targets-data repo

Hacker101 CTF Writeup

DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it

HackerOne "in scope" domains

HackerOne Platform Documentation

Find exposed API keys based on RegEx and get exploitation methods for some of keys that are found

A collection of hacker tools using HackerOne's API

Python library and CLI for the Bug Bounty Recon API

List of reporting templates I have used since I started doing BBH.

Ethical hacking, made easy.

Hacking tools

Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities