🌸 A command-line fuzzy finder

OSINT automation for hackers.

HackerOne "in scope" domains

A curated list of Smart Contract Security materials and resources For Researchers

40X/HTTP bypasser in Go. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials...

Weaponize Your Burp is a repository for automation your Bug Bounty Hunting mindset in Burp Suite

Contextual Content Discovery Tool

The most exhaustive list of reliable DNS resolvers.

Small utility program to perform multiple operations for a given subnet/CIDR ranges.

Learn regex the easy way

Go CLI and Library for quickly mapping organization network ranges using ASN information.

Notes for Beginner Network Pentesting Course

A Collection of Logger++ Filters for Hunting API Vulnerabilities

Nuclei Templates Collection

declutters url lists for crawling/pentesting

List of fresh DNS resolvers updated daily

Recon Methodology

ASN / RPKI validity / BGP stats / IPv4v6 / Prefix / URL / ASPath / Organization / IP reputation and geolocation lookup tool / Traceroute server

Tutorials and Things to Do while Hunting Vulnerability.

ReconMaster contest - scripts used and a write-up

30 days of JavaScript programming challenge is a step-by-step guide to learn JavaScript programming language in 30 days. This challenge may take more than 100 days, please just follow your own pace.

List of Computer Science courses with video lectures.

Rockyou for web fuzzing

SSRF (Server Side Request Forgery) testing resources

30 days of Python programming challenge is a step-by-step guide to learn the Python programming language in 30 days. This challenge may take more than100 days, follow your own pace.

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports