Delete   Set public   Set private

Picture Wall - 24 pics

OWASP WrongSecrets
First Bug in Bugcrowd Using Github Dork
Hakluke's huge list of resources for beginner hackers - Detectify Labs
bug-bounty-dorks/dorks.txt at master · sushiwushi/bug-bounty-dorks · GitHub
#859962 Bypass apiserver proxy filter
The Web Application Hacker's Handbook - Task Checklist - Github-Flavored Markdown
All You Need to Know About Bug Bounty Testing Environments
Bug Bytes #92 - Pwning Apple for three months, XSS in VueJS, Hacking Salesforce Lightning & Unicode byͥtes - Intigriti
We Hacked Apple for 3 Months: Here’s What We Found
Bug Bytes #91 - The shortest domain, Weird Facebook authentication bypass & GitHub Actions secrets - Intigriti
My personal hacklab, create your own.
Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community.
Bug Bytes #90 - The impossible XSS, Burp Pro tips & A millionaire on bug bounty and meditation - Intigriti
chenjj/CORScanner: Fast CORS misconfiguration vulnerabilities scanner🍻
nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters: A list of resources for those interested in getting started in bug bounties
Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
Finding Your First Bug: Choosing Your Target - YouTube
Finding Your First Bug: Getting Started on a Target (Part 1) - YouTube
How to Hunt Bugs in SAML; a Methodology - Part I
Attacking SSO: Common SAML Vulnerabilities and Ways to Find Them
GitHub - enjoiz/XXEinjector: Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
GitHub - BuffaloWill/oxml_xxe: A tool for embedding XXE/XML exploits into different filetypes
XXE Payloads · GitHub
GitHub - djadmin/awesome-bug-bounty: A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.