bugbountytips

Collection of methodology and test case for various web vulnerabilities.

All about bug bounty (bypasses, payloads, and etc)

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

A collection of custom security tools for quick needs.

A collection of awesome one-liner scripts especially for bug bounty tips.

This challenge is Inon Shkedy's 31 days API Security Tips.

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.

API Security Project aims to present unique attack & defense methods in API Security field

Tips and Tutorials for Bug Bounty and also Penetration Tests.

Powerfull XSS Scanning and Parameter analysis tool&gem

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

OSINT tools and more but without API ke

Some files for bruteforcing certain things.

Asset inventory of over 800 public bug bounty programs.

An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.