guest@mmr:~$ cd ./web
guest@mmr:~/web$ cd ./cheatsheets && ls -la
total 6
-rw-r--r--0xn3va-cheatsheets/# the real one — every web/appsec bug class, one place -rwxr-xr-xcyberchef# input in → every decode/encode/hash chained out -rw-r--r--xss-cheatsheet.md# XSS payloads filterable by context -rw-r--r--sqli-cheatsheet.md# SQL injection syntax per database engine -rw-r--r--hacktricks-web-methodology.md# full web pentesting methodology -rw-r--r--owasp-cheatsheets/# reference per vulnerability classguest@mmr:~/web/cheatsheets$ cd ../payloads && ls -la
total 4
-rw-r--r--payloadsallthethings/# the standard: a payload for every bug class -rw-r--r--xxe-cheatsheet.md# classic, blind, error-based, SAML -rw-r--r--seclists/# the wordlist collection -rw-r--r--fuzzdb/# fault injection dictionariesguest@mmr:~/web/payloads$ cd ../dorks && ls -la
total 2
-rw-r--r--ghdb.db# official Google Hacking Database -rw-r--r--bugbounty-dorks.txt# dorks for private / unlisted programsguest@mmr:~/web/dorks$ cd ../bugbounty && ls -la
total 5
-rwxr-xr-xhackerone-hacktivity# publicly disclosed reports -rwxr-xr-xbugcrowd-programs# active programs -rw-r--r--bounty-targets-data/# scopes, updated hourly (H1/Bugcrowd/Intigriti) -rwxr-xr-xpentester.land# huge writeup index -rw-r--r--awesome-bugbounty-writeups/# writeups sorted by bug typeguest@mmr:~/web/bugbounty$ cd ../bookmarklets && ls -la
total 5
-rw-r--r--gl0bal01-bookmarklets/# 13 recon bookmarklets — extract every link, scan 80+ paths for sensitive files, expose hidden HTML -rw-r--r--k2sosint-bookmarklets/# find hidden emails/links in page source, tech stack via BuiltWith, robots.txt/sitemap.xml discovery -rw-r--r--reveal-password.js# flips every password input to type=text so you can read what's behind the dots -rwxr-xr-xextract-endpoints.js# drag to bookmarks bar (don't click here) — recursively pulls path-like strings out of every script the target page loads -rwxr-xr-xlist-all-links.js# drag to bookmarks bar (don't click here) — opens every link on the target page as a plain list in a new tabguest@mmr:~/web/bookmarklets$