tools

General

• Write your own scripts!
• Flag Alert (Thanks Andrew)
• OWASP Cheatsheet
• HackTricks (the bible)
• cyberchef
• ProjectDiscovery
• Mozilla Web Docs

Recon

Passive

• nslookup
• dig
• crt.sh
• DNS Dumpster
• Wayback Machine
• Shodan
• subfinder

Active

• nmap
• subbrute
• sublist3r
• puredns
• httpx

Authentication/Authorisation

• cookie-editor
• jwt.io

Webhooks

• requestbin
• webhook.site

XSS Payloads

• tinyxss
• PayloadsAllTheThings
• HackTricks

Report Writing

• typst