Web Fuzzing Box - Web 模糊测试字典与一些Payloads

Claude Code skill for AI-assisted bug bounty hunting — recon, IDOR, XSS, SSRF, OAuth, GraphQL, LLM injection, and report generation

Rockyou for web fuzzing

A Simple and Universal Swarm Intelligence Engine, Predicting Anything. 简洁通用的群体智能引擎，预测万物

OpenZeppelin Contracts is a library for secure smart contract development.

《开源大模型食用指南》针对中国宝宝量身打造的基于Linux环境快速微调（全参数/Lora）、部署国内外开源大模型（LLM）/多模态大模型（MLLM）教程

🦄 🦄 Core smart contracts of Uniswap V2

Infosec Wordlists and more.

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

A next-generation crawling and spidering framework.

Standalone utility for service discovery on open ports!

Quickly discover exposed hosts on the internet using multiple search engines.

Optimized Solidity snippets.

Reproduce DeFi hacked incidents using Foundry.

《APT Individual Combat Guide》

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

Knowledge Base 慢雾安全团队知识库

Potentially dangerous files

curation of all(most) immunefi bug bounty writeups I could find(till now)

WEB安全手册(红队安全技能栈)，漏洞理解，漏洞利用，代码审计和渗透测试总结。【持续更新】

Modern, opinionated, and gas optimized building blocks for smart contract development.

To learn common smart contract vulnerabilities using Foundry!

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

A wrapper around grep, to help you grep for things

Find domains and subdomains related to a given domain