# Articles, Docs, Sites, etc

### BugBounty

* [HackerOne](https://hackerone.com/)
* [BugCrowd](https://www.bugcrowd.com/bug-bounty-list/)

### Blogs

* [HackTricks](https://book.hacktricks.xyz/): Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps and reading researches and news.
* [HighOn.Coffe](https://highon.coffee/): Penetration Testing && Security Research Blog.
* [Hacking Articles](https://www.hackingarticles.in/): Raj Chandel's Blog
* [Detectify Labs](https://labs.detectify.com/): A security research blog

### Articles

* JWT
  * [(in)segurança em tokens JWT](https://tiagotavares.io/2020/06/inseguran%C3%A7a-em-tokens-jwt/#payload)
  * [Stop using jwt for sessions](http://cryto.net/~joepie91/blog/2016/06/13/stop-using-jwt-for-sessions/)
* OAuth
  * [OAuth 2.0 Threat Model and Security Considerations](https://datatracker.ietf.org/doc/html/rfc6819)
* [Hakluke's huge list of resources for beginner hackers](https://labs.detectify.com/2021/08/24/hakluke-list-resources-for-beginner-hackers-2021/)

### Docs

* OWASP
  * [ASVS](https://owasp.org/www-project-application-security-verification-standard/): security assessment doc for applications.
  * [Cheat Sheet](https://cheatsheetseries.owasp.org/): best practices for security web apps.

### Ebooks

* [Web Application Security by NGINX](https://www.nginx.com/resources/library/web-application-security/#download)

### Youtube

* [Ricardo Longatto](https://www.youtube.com/channel/UCHXz8q9tOE9-p442AUFJSRw)
* [Técnicas de Invasão](https://www.youtube.com/channel/UCpjHvl6UYFAeHCxVfUvMDQA)
* [NetworkChuck](https://www.youtube.com/channel/UC9x0AN7BWHpCDHSm9NiJFJQ)
* [Gabriel Pato](https://www.youtube.com/channel/UC70YG2WHVxlOJRng4v-CIFQ)
* [DC CyberSec](https://www.youtube.com/channel/UC3sccPO4v8YqCTn8sezZGTw)
* [edureka!](https://www.youtube.com/user/edurekaIN)
* [IppSec](https://www.youtube.com/channel/UCa6eh7gCkpPo5XXUDfygQQA)
* [LiveOverflow](https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w)

### Vídeos

* [Meetup - Estratégias de segurança no React Native](https://www.youtube.com/watch?v=aJ3U1m9LHYo)
