This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

Enumerate the permissions associated with AWS credential set

Autoswagger by Intruder - detect API auth weaknesses

A smart fuzzing and parameter injection tool designed to discover reflections and identify potential XSS attack vectors.

Find All Parameters - Tool to crawl pages, find potential parameters and generate a custom target parameter wordlist

Open Redirect Payloads

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Enumerate old versions of robots.txt paths using Wayback Machine for content discovery

A python script that finds endpoints in JavaScript files

A database of PHP security advisories

A subdomain fuzzing tool

Config files for my GitHub profile.

Source code for Hacker101.com - a free online web and mobile security class.

Hacking tool