Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

Minimalist and simple theme for Hugo

a javascript change monitoring tool for bugbounties

Community curated list of templates for the nuclei engine to find security vulnerabilities.

An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!

UPX - the Ultimate Packer for eXecutables

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

A fast, simple, recursive content discovery tool written in Rust.

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static a…

List of Google Dorks for sites that have responsible disclosure program / bug bounty program

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

Offensive Software Exploitation Course

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

Collection of methodology and test case for various web vulnerabilities.

The Bug Hunters Methodology

Build your personal knowledge base with Trilium Notes

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

A list of interesting payloads, tips and tricks for bug bounty hunters.

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

Some files for bruteforcing certain things.

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

A list of resources for those interested in getting started in bug bounties

The world’s fastest framework for building websites.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…