A list of interesting payloads, tips and tricks for bug bounty hunters.

HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

🕵️‍♂️ Collect a dossier on a person by username from thousands of sites

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…