HowToHunt is a bug bounty hunting knowledge base and a structured guide for web application penetration testing. It provides a research methodology for organizing security testing procedures and validating application behaviors against known vulnerability patterns. The project features a curated library of security flaws and reconnaissance techniques. It organizes security testing into modular playbooks, checklists, and categorical vulnerability mappings to align specific exploitation techniques with target weaknesses. The repository covers a systematic sequence of information gathering task
SecLists is a centralized library of security assessment data designed to support vulnerability discovery and penetration testing. It functions as a comprehensive repository of wordlists, payloads, and testing methodologies used to audit software, firmware, and internet-connected hardware for technical vulnerabilities. The project distinguishes itself through a standardized taxonomy and a language-agnostic data format, which allows security tools to predictably ingest and utilize its assets regardless of the underlying programming environment. By decoupling raw testing data from execution log
The main features of spajed/processrefund are: Vulnerability Research.
Open-source alternatives to spajed/processrefund include: kathanp19/howtohunt — HowToHunt is a bug bounty hunting knowledge base and a structured guide for web application penetration testing. It… chalker/notes — Some public notes. danielmiessler/seclists — SecLists is a centralized library of security assessment data designed to support vulnerability discovery and… edoverflow/bugbounty-cheatsheet — This project is a bug bounty resource directory, vulnerability research cheatsheet, and web security payload library.… elvanderb/tcp-32764 — some codes and notes about the backdoor listening on TCP-32764 in linksys WAG200G. bnagy/crashwalk — Crashwalk.
