tools General Write your own scripts! Flag Alert (Thanks Andrew) OWASP Cheatsheet HackTricks (the bible) cyberchef Recon Passive nslookup dig crt.sh DNS Dumpster Wayback Machine Shodan Wolfram Alpha - 1 2 Active nmap subbrute sublist3r puredns Authentication/Authorisation cookie-editor jwt.io Webhooks requestbin webhook.site XSS Payloads tinyxss PayloadsAllTheThings HackTricks