guest@mmr:~$ cd ./web
guest@mmr:~/web$ cd ./cheatsheets && ls -la
total 6
-rw-r--r--0xn3va-cheatsheets/# the real one — every web/appsec bug class, one place -rwxr-xr-xcyberchef# input in → every decode/encode/hash chained out -rw-r--r--xss-cheatsheet.md# XSS payloads filterable by context -rw-r--r--sqli-cheatsheet.md# SQL injection syntax per database engine -rw-r--r--hacktricks-web-methodology.md# full web pentesting methodology -rw-r--r--owasp-cheatsheets/# reference per vulnerability classguest@mmr:~/web/cheatsheets$ cd ../payloads && ls -la
total 4
-rw-r--r--payloadsallthethings/# the standard: a payload for every bug class -rw-r--r--xxe-cheatsheet.md# classic, blind, error-based, SAML -rw-r--r--seclists/# the wordlist collection -rw-r--r--fuzzdb/# fault injection dictionariesguest@mmr:~/web/payloads$ cd ../dorks && ls -la
total 2
-rw-r--r--ghdb.db# official Google Hacking Database -rw-r--r--bugbounty-dorks.txt# dorks for private / unlisted programsguest@mmr:~/web/dorks$ cd ../bugbounty && ls -la
total 5
-rwxr-xr-xhackerone-hacktivity# publicly disclosed reports -rwxr-xr-xbugcrowd-programs# active programs -rw-r--r--bounty-targets-data/# scopes, updated hourly (H1/Bugcrowd/Intigriti) -rwxr-xr-xpentester.land# huge writeup index -rw-r--r--awesome-bugbounty-writeups/# writeups sorted by bug typeguest@mmr:~/web/bugbounty$