Resources
hackerone-reports
reddelexc/hackerone-reports
A curated ranking site of disclosed HackerOne reports, organized by upvotes, payouts, vulnerability type, and program. It is a reference collection for security learning and bug-bounty research.
Topics
Related projects
SafeLine23.3kA self-hosted web application firewall and reverse proxy that protects websites from injections, XSS, bots, and abuse.
dalfox5.4kDalfox is a fast, open-source XSS scanner written in Rust. It automates parameter analysis, reflected, stored and DOM-based XSS detection, WAF fingerprinting and reporting, with a CLI, REST API and MCP server for security testing workflows.
wstg10.3kThe OWASP Web Security Testing Guide, a comprehensive open-source guide and framework for testing web application security.- WebHackersWeapons5.1kWebHackersWeapons is a curated awesome-list of tools used by web security researchers and bug hunters. It catalogs scanners, proxies, recon utilities, bookmarklets and extensions by type, with links and language tags.
wordlists1.8kA regularly updated collection of real-world infosec wordlists covering CMS paths, robots.txt entries and subdomains for use in security testing.
google-dorks1.4kA curated collection of Google dorks for web security and bug bounty work, organized into query lists for exposed files, cloud services, CMS footprints and more.