awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

bug-bounty-beginner-roadmap

This is a resource factory for anyone looking forward to starting bug hunting and would require guidance as a beginner.

bugbountybooks

A collection of PDF/books about the modern web application security and bug bounty.

hackerone-reports

Top disclosed reports from HackerOne

howtohunt

Collection of methodology and test case for various web vulnerabilities.

iotgoat

IoTGoat is a deliberately insecure firmware created to educate software developers and security professionals with testing commonly found vulnerabilities in IoT devices.

learn365

This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.

mdshuvon

Config files for my GitHub profile.

mind-maps

Mind-Maps of Several Things

odin

Automated network asset, email, and social media profile discovery and cataloguing.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

shodan-filters

A list of shodan filters

shuvonsec

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

vulnerability-checklist

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

x8

Hidden parameters discovery suite