A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Most advanced XSS scanner.

CTFs as you need them

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

declutters url lists for crawling/pentesting

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatab…