What is this?
A curated collection of resources for people getting started with web hacking and bug bounty hunting, including blog posts, talks, books, tools, labs and vulnerability-type guides.
A curated collection of resources for people getting started with web hacking and bug bounty hunting, including blog posts, talks, books, tools, labs and vulnerability-type guides.Is this a tool or just a list of links?It is a plain markdown list/index of external resources (blogs, talks, books, tools, labs), not something you install or run.
It is a plain markdown list/index of external resources (blogs, talks, books, tools, labs), not something you install or run.How is the list organized and where should a beginner start?The repo is organized into sections like Basics, Setup, Tools, Labs & Testing Environments, Vulnerability Types, Mobile Hacking, and Coding & Scripting; a newcomer would typically start with the Basics and Setup sections before moving to Tools and Labs.
The repo is organized into sections like Basics, Setup, Tools, Labs & Testing Environments, Vulnerability Types, Mobile Hacking, and Coding & Scripting; a newcomer would typically start with the Basics and Setup sections before moving to Tools and Labs.Is this list actively maintained and updated?The repo has a version label (2023.01) and the authors acknowledge the list isn't exhaustive, planning to add more resources over time.
The repo has a version label (2023.01) and the authors acknowledge the list isn't exhaustive, planning to add more resources over time.Is this only for experienced hackers?No, it explicitly targets both complete beginners and seasoned bug bounty hunters.
No, it explicitly targets both complete beginners and seasoned bug bounty hunters.What vulnerability types does it cover?It links to resources on specific vulnerability classes, including SSRF and XSS, among others, under a dedicated Vulnerability Types section.
It links to resources on specific vulnerability classes, including SSRF and XSS, among others, under a dedicated Vulnerability Types section.Does it cover mobile app hacking too?Yes, there's a dedicated Mobile Hacking section alongside the main web hacking content.
Yes, there's a dedicated Mobile Hacking section alongside the main web hacking content.Is there a related video resource from the author?Yes, NahamSec offers a Bug Bounty Course with 100+ labs plus YouTube and Twitch channels covering live recon and hacking content.
Yes, NahamSec offers a Bug Bounty Course with 100+ labs plus YouTube and Twitch channels covering live recon and hacking content.Is there a community to ask questions in?Yes, the README points readers to NahamSec's Discord for questions or suggestions.
Yes, the README points readers to NahamSec's Discord for questions or suggestions.What are similar projects?h4cker, hacker101, PENTESTING-BIBLE, awesome-hacker-search-engines, hacker-roadmap, PayloadsAllTheThings, bug-bounty-hunting-prompts, awesome-hacking
h4cker, hacker101, PENTESTING-BIBLE, awesome-hacker-search-engines, hacker-roadmap, PayloadsAllTheThings, bug-bounty-hunting-prompts, awesome-hackingWhich topics is it in?xss, mobile-security, hacking-tools, bugbounty, bug-bounty, pentest, web-security, hacking-tool, penetration-testing, hacking, cybersecurity, beginner-friendly
xss, mobile-security, hacking-tools, bugbounty, bug-bounty, pentest, web-security, hacking-tool, penetration-testing, hacking, cybersecurity, beginner-friendly