List of Google Dorks for sites that have responsible disclosure program / bug bounty program

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

Fetch all the URLs that the Wayback Machine knows about for a domain

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Enumerate the permissions associated with AWS credential set

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

Generates permutations, alterations and mutations of subdomains and then resolves them

PDF Files for Pentesting

The recursive internet scanner for hackers. 🧡

A swiss army knife for pentesting networks

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

ChatGPT DAN, Jailbreaks prompt

API Security Project aims to present unique attack & defense methods in API Security field

My Private Bug Hunting Methodology

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

A list of interesting payloads, tips and tricks for bug bounty hunters.