Provision remote development environments via Terraform

drpc is a lightweight, drop-in replacement for gRPC

Truly independent web browser

Community curated list of public bug bounty and responsible disclosure programs.

Ongoing Storj v3 development. Decentralized cloud object storage that is affordable, easy to use, private, and secure.

Blazingly fast and light-weight Actor engine written in Golang

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...

Next-gen identity server replacing your Auth0, Okta, Firebase with hardened security and PassKeys, SMS, OIDC, Social Sign In, MFA, FIDO, TOTP and OTP, WebAuthn, passwordless and much more. Golang, …

Deploy web apps anywhere.

Fetch all the URLs that the Wayback Machine knows about for a domain

Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!

A collection of hacks and one-off scripts

An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

Prototype Pollution and useful Script Gadgets

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

Tips and Tutorials for Bug Bounty and also Penetration Tests.

XSS payloads designed to turn alert(1) into P1

PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit.

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

A list of interesting payloads, tips and tricks for bug bounty hunters.

A curated list of Android Security materials and resources For Pentesters and Bug Hunters

Next generation web scanner

This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location

Collections of Orange Tsai's public presentation slides.

A fast tool to scan CRLF vulnerability written in Go

Backstage is an open framework for building developer portals