Tamjid

SmartContracts-audit-checklist. A checklist of things to look for when auditing Solidity smart contracts.

awesome-smartcontract-hacking. Here we collect and discuss for Smart contract security & Blockchain researches and tools - contributions are welcome.

cool. the Wayback Machine, and Common Crawl. Originally built as a microservice. #hacking #bugbunty #bughunting #cybersecurity #security

Web3Bugs. Demystifying Exploitable Bugs in Smart Contracts

Web3-All-The-Things. Web3-All-The-Things is a curated Web3.0 Developer handbook which includes a list of the best tools for Web3, Smartcontracts, DApps, development resources, Security and lifehacks.

defi-derivatives. A hopefully comprehensive guide to the defi derivative landscape

tamjid0x01.

blocksec-ctfs. A curated list of blockchain security Capture the Flag (CTF) competitions

awesome-bug-bounty. A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

bug-bounty-reference. Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

Awesome-Hacking. A collection of various awesome lists for hackers, pentesters and security researchers

awesome-mobile-security. An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.

DeFi-Developer-Road-Map. DeFi Developer roadmap is a curated Web3.0 Developer handbook which includes a list of the best tools for DApps, development resources and lifehacks.

JSParser. Python

-Digital-Ocean. Install Windows 10 on Digital Ocean

dirhunt. Find web directories without bruteforce

solcurity. Opinionated security and code quality standard for Solidity smart contracts.

smartcheck. SmartCheck – a static analysis tool that detects vulnerabilities and bugs in Solidity programs (Ethereum-based smart contracts).

awesome-test-cases-collection. This repository contains collection of test cases for beginners that need to be included while validating projects of different domains/technologies.

Web3-Security-Library. Information about web3 security and programming tutorials/tools

ethereumbook. Mastering Ethereum, by Andreas M. Antonopoulos, Gavin Wood

forge-poc-templates. Solidity

91d86947b64726c82e2031a6dfa9793a-sb-apps.accounts.nintendo.com.

SecLists. SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

AwesomeXSS. Awesome XSS stuff

crawler. Crawl website extract links

commonspeak2. Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists

github-dorks. Collection of github dorks and helper tool to automate the process of checking dorks

gau. Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.