Bug Bounty
A bug bounty program is a deal offered by many websites, organizations and software developers by which individuals can receive recognition and compensation for reporting bugs, especially those pertaining to security exploits and vulnerabilities.
subfinder 是一个子域名发现和枚举工具
A list of resources for those interested in getting started in bug bounties
该仓库提供了精选的 Nuclei 模板。Nuclei 是一个基于YAML模板，自定义的漏洞扫描工具。
OneForAll是一款功能强大的子域收集工具
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
The recursive internet scanner for hackers. 🧡
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
An HTTP toolkit for security research.
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous mon...
🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
Collection of methodology and test case for various web vulnerabilities.
A list of interesting payloads, tips and tricks for bug bounty hunters.
The all-in-one browser extension for offensive security professionals 🛠
#速查表 cheatsheets#One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️
- Website
- Wikipedia
- 维基百科