Az0x7/vulnerability-Checklist

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

🐶 A curated list of Web Security materials and resources.

A list of web application security

Web Attack Cheat Sheet

All about bug bounty (bypasses, payloads, and etc)

A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've always found this is the most efficient way.

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

A list of useful payloads and bypass for Web Application Security and Pentest/CTF