Web Security | Bug hunting
@cybersecurityresources
7.41K subscribers
46 photos
2 files
473 links
A web penetration testing / General cybersecurity / Network related topics channel that provides direct links for interesting resources and notes.
Download Telegram
About
Blog
Apps
Platform
Join
Web Security | Bug hunting
7.41K subscribers
Web Security | Bug hunting
https://gist.github.com/kurobeats/9a613c9ab68914312cbb415134795b45
Gist
Deprecated - new repo here https://github.com/kurobeats/XSS-Vectors
Deprecated - new repo here https://github.com/kurobeats/XSS-Vectors - xss_vectors.txt
289 views
Web Security | Bug hunting
https://gist.github.com/staaldraad/01415b990939494879b4
Gist
XXE Payloads
XXE Payloads. GitHub Gist: instantly share code, notes, and snippets.
303 views
Web Security | Bug hunting
Tools :
https://bugbountyforum.com/tools/
Bugbountyforum
Bug Bounty Forum - tools - Index
Bug bounty forum - A list of helpfull resources may help you to escalate vulnerabilities.
315 viewsedited  
Web Security | Bug hunting
https://forum.bugcrowd.com/t/researcher-resources-tools/167
Bugcrowd
Hackers | Bugcrowd
Bugcrowd teams with elite security researchers to reduce risk & improve security ROI through our bug bounty, pen testing, & vulnerability disclosure programs.
326 views
Web Security | Bug hunting
https://resources.infosecinstitute.com/use-firefox-browser-as-a-penetration-testing-tool-with-these-add-ons/
Infosecinstitute
18 extensions for turning Firefox into a Penetration testing tool | Infosec
Firefox is a popular web browser from Mozilla. Popularity of Firefox is not only because it's a good web browser, it also supports add-ons to enhance the fun
324 views
Web Security | Bug hunting
https://github.com/Pgaijin66/XSS-Payloads/blob/master/payload.txt
312 views
Web Security | Bug hunting
https://gist.github.com/clarketm/919457847cece7ce40323dc217623054
Gist
Listing of a number of useful Google dorks.
Listing of a number of useful Google dorks. GitHub Gist: instantly share code, notes, and snippets.
326 views
Web Security | Bug hunting
https://www.hackerone.com/blog/Guide-Subdomain-Takeovers
HackerOne
A Guide To Subdomain Takeovers
HackerOne's Hacktivity feed — a curated feed of publicly-disclosed reports — has seen its fair share of subdomain takeover reports. Since Detectify's fantastic series on subdomain takeovers, the bug bounty industry has seen a rapid influx of reports concerning…
318 views
Web Security | Bug hunting
https://medium.com/@rootxharsh_90844/vimeo-ssrf-with-code-execution-potential-68c774ba7c1e
Medium
Vimeo SSRF with code execution potential.
Recently i discovered a semi responded SSRF on Vimeo with code execution possibility. This blog post explains how i found & exploited it…
327 views
Web Security | Bug hunting
https://mega.nz/#F!zMN00AKJ!V9ZTkIgJiE03YJDDwHe9Jw
343 views
Web Security | Bug hunting
https://mega.nz/#F!7jIyBShb!5uQgMY-3UjZNCMrISP6ufQ
mega.nz
MEGA provides free cloud storage with convenient and powerful always-on privacy. Claim your free 20GB now
325 views
Web Security | Bug hunting
https://mega.nz/#F!adpgWYgJ!HSr97HTDUGY1E_rv0hu9Zw
mega.nz
MEGA provides free cloud storage with convenient and powerful always-on privacy. Claim your free 20GB now
330 views
Web Security | Bug hunting
Wordlists collection for brute force:-

https://mega.nz/?fbclid=IwAR1jTeS_iavhqaS1pLBiUhgsuu3pHB8JLfytoGq4z_HDFyaZJqTixDDtXSQ#!gIt2EA7Y!ZawiZSUGo7_Y4K8U0__9inUaDS9IvV9vb0-taTGOnNw

https://mega.nz/?fbclid=IwAR3peqY6z0UNcJpRG74clmyqrJIiWLpSjBwTwwTwFDE6RV7gq_INxudLpds#!1U92zYbD!RqxRS_6tlStIOn7yeIKni_0Yw3zwUolfiSKpuZQSKcc

https://mega.nz/?fbclid=IwAR3ue8LL0FWjPrUbcS9EQsGZ3Gxm8DMEZDOiASFba8QoOpMjeAPI4sKrNLM#F!5CxhhJRA!StYkDCiLPVQ2nMMoyGN1LQ
mega.nz
MEGA provides free cloud storage with convenient and powerful always-on privacy. Claim your free 20GB now
347 views
Web Security | Bug hunting
Books :
https://mega.nz/?fbclid=IwAR2mY9SYLuVzIbfBiMy2DGGGZkeduWOcBI6Q6RPiHlHbck76piUFiFMsths#F!7jIyBShb!5uQgMY-3UjZNCMrISP6ufQ

From : Alra3ees
361 viewsedited  
Web Security | Bug hunting
https://github.com/AnimeshShaw/Learning-Node.js-Security
GitHub
AnimeshShaw/Learning-Node.js-Security
A Collection of articles, videos, blogs, talks and other materials on Node.js Security - AnimeshShaw/Learning-Node.js-Security
343 views
Web Security | Bug hunting
https://hackingresources.com/web-application-penetration-testing-course/?fbclid=IwAR3BHWTmDEUZ9sMfPEfAL6eN5q1FQ7foDRO95peehquggH412B5Hqp9RDiQ
CyberSecurity
Web Application Penetration Testing Course - CyberSecurity
Penetration Testing and Web Security Testing (WST) are security testing systems for security vulnerabilities or security breaches of enterprise sites and Web applications. These vulnerabilities could lead to abuse on websites.
394 views
Web Security | Bug hunting
https://blackarch.org/webapp.html
blackarch.org
Webapp tools
List of all webapp tools available on BlackArch
332 views
Web Security | Bug hunting
https://medium.com/bugbountywriteup/using-shodan-better-way-b40f330e45f6
Medium
Using Shodan Better Way! :)
Hello Everyone!
312 views
Web Security | Bug hunting
https://medium.com/@jrozner/wiping-out-csrf-ded97ae7e83f
Medium
Wiping Out CSRF
It’s 2017 and there shouldn’t be much more to say about Cross-Site Request Forgery (CSRF) that hasn’t already been said. It’s a…
321 views
Web Security | Bug hunting
https://portswigger.net/blog/practical-web-cache-poisoning
PortSwigger Research
Practical Web Cache Poisoning
In this paper I'll show you how to compromise websites by using esoteric web features to turn their caches into exploit delivery systems
322 views