A complete, beginner-friendly bug bounty roadmap that takes you from zero experience to earning your first bounty.

Python3 utility for creating zip files that smuggle additional data for later extraction

Performs DNS zone dumps by walking DNSSEC NSEC(3) records.

Go script for bypassing 403 forbidden

The most exhaustive list of reliable DNS resolvers.

Crtsh Subdomain Enumeration | This bash script makes it easy to quickly save and parse the output from https://crt.sh website.

🐍 A toolkit for testing, tweaking and cracking JSON Web Tokens

A .NET Runtime for Cobalt Strike's Beacon Object Files

Awesome XSS stuff

An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!

Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wis…

Biological evolution simulator

WhiteWinterWolf's PHP web shell