Damn Vulnerable Web Services is a vulnerable application with a web service and an API that can be used to learn about webservices/API related vulnerabilities.

Code review

Vulnerable API Code Review

Tips and Tutorials for Bug Bounty and also Penetration Tests.

Checklist of the most important security countermeasures when designing, testing, and releasing your API

A curated list of Smart Contract Security materials and resources For Researchers

A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

Bug Bounty ~ Awesomes | Books | Cheatsheets | Checklists | Tools | Wordlists | More

A curated list of Android Security materials and resources For Pentesters and Bug Hunters

Android security guides, roadmap, docs, courses, write-ups, and teryaagh.

API Security Project aims to present unique attack & defense methods in API Security field

Some of my publicly available Malware analysis and Reverse engineering.

Curated list of public penetration test reports released by several consulting firms and academic security groups

An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!

API Pentesting notes.

GraphQL security workshop labs

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wis…

Tutorials and Things to Do while Hunting Vulnerability.

This script grab public report from hacker one and make some folders with poc videos

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.

A list of resources for those interested in getting started in bug bounties

Hack-the-Box-OSCP-Preparation

A script that you can run in the background!