HolyBugx/HolyTips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

apiapi-securitybugbountybugbounty-writeupsbugbountytipschecklistpentestpentestingsecurityweb

License & maintenance

GPL-3.0 is a copyleft license: products that include or modify it may have to publish their code.

Last code push 5 years ago.

	Repository	Stars	Language	License	Activity
1	daffainfo/AllAboutBugBountyAll about bug bounty (bypasses, payloads, and etc)	★ 6.9k	—	—	Stale
2	qeeqbox/social-analyzerAPI, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites	★ 24.3k	JavaScript	AGPL-3.0	Slowing
3	shieldfy/API-Security-ChecklistChecklist of the most important security countermeasures when designing, testing, and releasing your API	★ 23.3k	—	MIT	Active
4	bee-san/RustScan🤖 The Modern Port Scanner 🤖	★ 20.6k	Rust	GPL-3.0	Active
5	ffuf/ffufFast web fuzzer written in Go	★ 16.9k	Go	MIT	Active
6	projectdiscovery/nuclei-templatesCommunity curated list of templates for the nuclei engine to find security vulnerabilities.	★ 13.1k	JavaScript	MIT	Active
7	dstotijn/hettyAn HTTP toolkit for security research.	★ 12.5k	Go	MIT	Active
8	OWASP/wstgThe Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.	★ 10.1k	CSS	CC-BY-SA-4.0	Active