Trending repositories for topic bugbounty
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
🧿 AutorizePro是一款强大越权检测 Burp 插件，通过增加 AI 辅助分析 && 进一步优化检测逻辑，大幅降低误报率，提升越权漏洞检出效率。 [ AutorizePro is a authorization enforcement detection extension for burp suite. By adding Ai-assisted analysis, it si...
A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying and exploiting vulnerabilities.
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
Community curated list of templates for the nuclei engine to find security vulnerabilities.
Robofinder retrieves historical #robots.txt files from #Archive.org, allowing you to uncover previously disallowed directories and paths for any domain—essential for deepening your #OSINT and #recon p...
🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List
A list of resources for those interested in getting started in bug bounties
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.
🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.
Robofinder retrieves historical #robots.txt files from #Archive.org, allowing you to uncover previously disallowed directories and paths for any domain—essential for deepening your #OSINT and #recon p...
🧿 AutorizePro是一款强大越权检测 Burp 插件，通过增加 AI 辅助分析 && 进一步优化检测逻辑，大幅降低误报率，提升越权漏洞检出效率。 [ AutorizePro is a authorization enforcement detection extension for burp suite. By adding Ai-assisted analysis, it si...
Get related domains / subdomains by looking at Google Analytics IDs
This is a useful Python script for extracting bug bounty or any other write-ups from Medium.com and other websites (soon).
jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vuln...
A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying and exploiting vulnerabilities.
A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.
GoogleDorker - Unleash the power of Google dorking for ethical hackers with custom search precision.
GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.
Command line tool for testing CRLF injection on a list of domains.
The Largest Collection of Pre-Compiled (+ UPXed) Linux Static Binaries 📦📀 for Soar: The true, simple & suckless Linux User Repository/Package Manager:: https://github.com/pkgforge/soar [repo=pkgforg...
Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).
This Repository is a collection of different ethical hacking tools and malware's for penetration testing and research purpose written in python, ruby, rust, c++, go and c.
A heavily armed customizable phishing tool for educational purpose only
PwnMachine is a self hosting solution based on docker aiming to provide an easy to use pwning station for bug hunters.
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
🧿 AutorizePro是一款强大越权检测 Burp 插件，通过增加 AI 辅助分析 && 进一步优化检测逻辑，大幅降低误报率，提升越权漏洞检出效率。 [ AutorizePro is a authorization enforcement detection extension for burp suite. By adding Ai-assisted analysis, it si...
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying and exploiting vulnerabilities.
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
Community curated list of templates for the nuclei engine to find security vulnerabilities.
jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vuln...
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List
A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.
A list of resources for those interested in getting started in bug bounties
Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.
Robofinder retrieves historical #robots.txt files from #Archive.org, allowing you to uncover previously disallowed directories and paths for any domain—essential for deepening your #OSINT and #recon p...
Roadmap to get up to speed with CosmWasm smart contract audits and security vulnerabilities
🧿 AutorizePro是一款强大越权检测 Burp 插件，通过增加 AI 辅助分析 && 进一步优化检测逻辑，大幅降低误报率，提升越权漏洞检出效率。 [ AutorizePro is a authorization enforcement detection extension for burp suite. By adding Ai-assisted analysis, it si...
jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vuln...
A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.
GoogleDorker - Unleash the power of Google dorking for ethical hackers with custom search precision.
Toxic MD is a powerful WhatsApp crash and bug bot developed by Joker, designed for managing and automating various bot-related functions. Whether you're testing crash bugs or exploring custom bot conf...
This is a useful Python script for extracting bug bounty or any other write-ups from Medium.com and other websites (soon).
Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.
GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.
[Custom || Automated] Curation & Collection of BugBounty Wordlists
All cheetsheets with main information from HTB CBBH role path in one place.
[Automated | UpToDate] Daily Dumps of CertStream Certificate Logs Subdomains Data (SAN || CN)
A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying and exploiting vulnerabilities.
SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty
Basic Recon For Bug Bounty Hunter - "HuntTheBug" is Basic Scripts For Sub Domain Enumeration> Live Domain Enumeration > Sub Domain Hijack > URL + JavaScript Scan > Dir Brute Forcing > Open Port Check ...
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.
jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vuln...
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
🧿 AutorizePro是一款强大越权检测 Burp 插件，通过增加 AI 辅助分析 && 进一步优化检测逻辑，大幅降低误报率，提升越权漏洞检出效率。 [ AutorizePro is a authorization enforcement detection extension for burp suite. By adding Ai-assisted analysis, it si...
Community curated list of templates for the nuclei engine to find security vulnerabilities.
Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
GoogleDorker - Unleash the power of Google dorking for ethical hackers with custom search precision.
This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous mon...
This Repository is a collection of different ethical hacking tools and malware's for penetration testing and research purpose written in python, ruby, rust, c++, go and c.
jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vuln...
A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.
GoogleDorker - Unleash the power of Google dorking for ethical hackers with custom search precision.
🧿 AutorizePro是一款强大越权检测 Burp 插件，通过增加 AI 辅助分析 && 进一步优化检测逻辑，大幅降低误报率，提升越权漏洞检出效率。 [ AutorizePro is a authorization enforcement detection extension for burp suite. By adding Ai-assisted analysis, it si...
Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.
Zzl is a reconnaissance tool that collects subdomains from SSL certificates in IP ranges
Robofinder retrieves historical #robots.txt files from #Archive.org, allowing you to uncover previously disallowed directories and paths for any domain—essential for deepening your #OSINT and #recon p...
Roadmap to get up to speed with CosmWasm smart contract audits and security vulnerabilities
The Web3 Security Resources Hub is a comprehensive collection of curated tools, guides, and best practices for securing decentralized systems and smart contracts in the blockchain space.
collectvars collects JavaScript variables, highlights risky ones, and helps you understand code structure, while you casually browse.
This Repository is a collection of different ethical hacking tools and malware's for penetration testing and research purpose written in python, ruby, rust, c++, go and c.
All cheetsheets with main information from HTB CBBH role path in one place.
GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.
Toxic MD is a powerful WhatsApp crash and bug bot developed by Joker, designed for managing and automating various bot-related functions. Whether you're testing crash bugs or exploring custom bot conf...
Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.
An insane list of all dorks taken from everywhere from various different sources.
Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including do...
🧿 AutorizePro是一款强大越权检测 Burp 插件，通过增加 AI 辅助分析 && 进一步优化检测逻辑，大幅降低误报率，提升越权漏洞检出效率。 [ AutorizePro is a authorization enforcement detection extension for burp suite. By adding Ai-assisted analysis, it si...
A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.
jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vuln...
Find All Parameters - Tool to crawl pages, find potential parameters and generate a custom target parameter wordlist
GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.
The Web3 Security Resources Hub is a comprehensive collection of curated tools, guides, and best practices for securing decentralized systems and smart contracts in the blockchain space.
HackerToolkit offers a curated selection of tools designed to enhance your hacking capabilities. This repository not only organizes these tools but provides information about them. Easily install all ...
Toxic MD is a powerful WhatsApp crash and bug bot developed by Joker, designed for managing and automating various bot-related functions. Whether you're testing crash bugs or exploring custom bot conf...
SubSnipe is a tool designed to help find subdomains that are vulnerable to takeover.
A powerful bash script for massive XSS scanning leveraging Brute Logic's KNOXSS API
Advanced CORS Header Checker Tool with Vulnerability Detection and Bypass Attempts
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Community curated list of templates for the nuclei engine to find security vulnerabilities.
This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous mon...
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
A list of resources for those interested in getting started in bug bounties
An step by step fuzzing tutorial. A GitHub Security Lab initiative
Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...
An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.
This Repository is a collection of different ethical hacking tools and malware's for penetration testing and research purpose written in python, ruby, rust, c++, go and c.
Find All Parameters - Tool to crawl pages, find potential parameters and generate a custom target parameter wordlist
Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including do...
A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.
🧿 AutorizePro是一款强大越权检测 Burp 插件，通过增加 AI 辅助分析 && 进一步优化检测逻辑，大幅降低误报率，提升越权漏洞检出效率。 [ AutorizePro is a authorization enforcement detection extension for burp suite. By adding Ai-assisted analysis, it si...
Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.
SubSnipe is a tool designed to help find subdomains that are vulnerable to takeover.
An insane list of all dorks taken from everywhere from various different sources.
SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty
Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/or bug bounty targets!
The Largest Collection of Pre-Compiled (+ UPXed) Linux Static Binaries 📦📀 for Soar: The true, simple & suckless Linux User Repository/Package Manager:: https://github.com/pkgforge/soar [repo=pkgforg...
Explore, analyze, and gain valuable data & insights from reverse engineered Flutter apps.
An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.
Delve into a comprehensive checklist, your ultimate companion for Android app penetration testing. Identify vulnerabilities in network, data, storage, and permissions effortlessly. Boost security skil...
Hastly written Tools & Scripts for Personal Use Cases & Bug Bounties
Ultimate Tasks Automation Framework for Hackers, DevSecOps, Pentesters, and Bug-bounty hunters!
Community curated list of templates for the nuclei engine to find security vulnerabilities.