Bounty Targets Data: Contains data dumps of Hackerone and Bugcrowd scopes.
Project Discovery Chaos: Maintains internet-wide assets' data for enhanced DNS insights.
curl -s -X POST -H "Content-Type: text/xml" ... --data-binary "SOAP request" https://autodiscover-s.outlook.com | xmllint --format -WhatWeb: Identifies web technologies like CMS, analytics packages, etc.
whatweb -a 4 -U 'Mozilla' -c 'cookie=here' -t 20 www.example.comSemgrep: Open-source, static analysis tool.
OpenCVE: Alerts you when a CVE is published or updated.
Hydra: Security tool for brute-forcing various protocols.
hydra -l root -P passlist.txt www.example.com sshPayloads All The Things: Collection of useful payloads for bypassing filters.
LLM Attacks: Discusses web LLM attacks that exploit data, APIs, etc.
Print only response headers:
curl -skSL -D - https://www.example.com -o /dev/null