Extract JavaScript source trees from Sourcemap files

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

a Damn Vulnerable Serverless Application

OWASP API Security Project

Getting a handle on container security

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

Container Security Verification Standard

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the contr…

The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Frida Scripts

A collection of awesome penetration testing resources, tools and other shiny things

a collection of handy bookmarks

The Bug Hunters Methodology