A list of useful payloads and bypass for Web Application Security and Pentest/CTF

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

Robust, fast, intuitive plain text accounting tool with CLI, TUI and web interfaces.

Everything for pentest. | 用于渗透测试的 payload 和 bypass 字典.

Javascript and SVG odometer effect library with motion blur

A tool that allows you to convert NMAP results to html, csv, json, markdown, graphviz (dot), sqlite, excel and d2-lang. Simply put it's nmap converter.

This project crawls bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) hourly and dumps them into the bounty-targets-data repo

🎯 Server Side Template Injection Payloads

Domains belonging to the most reputed public bug bounty programs. [NOT FOR NON-MONETARY OR PRIVATE PROGRAMS]

Robot Vulnerability Database. An archive of robot vulnerabilities and bugs.

Burp Bounty profiles compilation, feel free to contribute!

The unofficial HackerOne disclosure Timeline

The official Musicoin Desktop Wallet Application

ThreatTracer - A python Script to identify CVE by name & version by @FR13ND0x7f

Bounty program for improvements to Tcl and certain Tcl packages

Bug Bounty Vps Setup Tools

Advanced external automation on bug bounty programs by running the best set of tools to perform scanning and finding out vulnerabilities.

Misc bounty and vulndisc things

Dons Js Scanner is a sleek command-line tool that hunts for hidden treasures—API keys, credentials, and secrets—lurking in the JavaScript of websites. Its vibrant ASCII art logo welcomes users to a journey where it scans, reveals, and safeguards against potential security breaches.