Collection of Facebook Bug Bounty Writeups

xss development frameworks, with the goal of making payload writing easier.

Twitter vulnerable snippets

Fetch all the URLs that the Wayback Machine knows about for a domain

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

Open source education content for the researcher community

Cryptomedia