4. ExploitDB—Archive of various exploits. 5. ZoomEye—Gather information about targets. 6. Pulsedive—Search for threat intelligence. 7. GrayHatWarefare—Search public S3 buckets.
8. PolySwarm—Scan files and URLs for threats. 9. Fofa—Search for various threat intelligence. 10. LeakIX—Search publicly indexed information. 11. DNSDumpster—Search for DNS records quickly.
15. Grep App—Search across a half million git repos. 16. URL Scan—Free service to scan and analyse websites. 17. Vulners—Search vulnerabilities in a large database.
18. WayBackMachine—View content from deleted websites. 19. Shodan—Search for devices connected to the internet. 20. Wigle—Database of wireless networks, with statistics.
The Mobile Hacking CheatSheet is an attempt to summarise a few interesting basics info regarding tools and commands needed to assess the security of Android and iOS mobile applications.
While researching some neat domain based bug bounties on sites like HackerOne and BugCrowd, I've found some good vulnerable sites that pay you good money if you find something useful.
Step 1: Determine if a website is worth hacking
If the site you’re doing recon on just doesn’t look like it might be vulnerable (i.e. updated styling, utilizes PLP, looks clean),
8. Pentester Land — Written Content. 9. Checkmarx — Interactive Learning. 10. Cybrary — Written Content and Labs. 11. RangeForce — Interactive Exercises. 12. Vuln Hub — Written Content and Labs. 13. TCM Security — Interactive Learning. 14. HackXpert — Written Content and Labs.
15. Try Hack Me — Written Content and Labs. 16. OverTheWire — Written Content and Labs. 17. Hack The Box — Written Content and Labs. 18. CyberSecLabs — Written Content and Labs. 19. Pentester Academy — Written Content and Labs. 20. Bug Bounty Reports Explained YouTube — Videos.