Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature
created at Sept. 1, 2016, 12:53 p.m.
Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more
created at Aug. 24, 2016, 3:12 p.m.
A collection of JavaScript engine CVEs with PoCs
created at Aug. 6, 2016, 1:02 a.m.
A script that inspects multi-byte character sets looking for characters with specific user-defined properties
created at June 23, 2016, 3:09 p.m.
A simple tool to convert the IP to a DWORD IP
created at April 30, 2016, 11:32 p.m.
A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.
created at Feb. 13, 2016, 11 p.m.
A free software to find the components installed in Joomla CMS, built out of the ashes of Joomscan.
created at Feb. 11, 2016, 9:28 p.m.
Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
created at Jan. 10, 2016, 10:41 p.m.
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
created at Sept. 10, 2015, 5:54 p.m.