huntr-com-bug-bounties-collector

huntr.com bugs collector New bug bountyvulnerabilities collector Requirements Chrome with GUI If you encounter trouble with script execution, check the status of VMs GPU features, if available. Chrome WebDriver Preview python3 main.py 2024-02-20 16:14:47.836189 1. Arbitrary File Reading due to La...

pentest-guide

Penetration Test Guide based on the OWASP + Extra This guide is for the penetration testers seeking for the appropriate test cases required during a penetration test project. I rearranged the OWASP Testing Guide v4 from my point of view including 9 Test Classes and each class has several Test Cas...

subscraper

SubScraper Overview :smallbluediamond: Usage :smallbluediamond: Contribute SubScraper is a subdomain enumeration tool that uses a variety of techniques to find subdomains of a given target. Subdomain enumeration is especially helpful during penetration testing and bug bounty hunting to uncover an...

CVE-2024-4879

CVE-2024-4879 Bulk scanning tool for ServiceNow CVE-2024-4879 vulnerability. Overview This tool is designed for bulk scanning of the ServiceNow CVE-2024-4879 vulnerability. It is inspired by Assetnote security research, which covers the recent ServiceNow CVE-2024-4879, CVE-2024-5178, and...

defcon32

Defcon 32 - BugBounty Village Workshop Slides Presentation Slides Unveiling Vulnerabilities: A Comprehensive Guide to Bug Bounty Recon Documentation ProjectDiscovery Docs Installing ProjectDiscovery Tools Install PDTM Fuzzing / DAST Workshop...

axiom

WARNING : Axiom Classic is now in maintenance mode. We encourage you to transition to the new Ax Framework. In the coming months, we will introduce essential quality-of-life updates to Axiom Classic before 2025. Long live Axiom! Axiom is a dynamic infrastructure framework to efficiently work with...

reconness

ReconNess Web App Why ReconNess? Well, we have seen a lot of bugbounty hackers organizing his recon using txt and doing a lot of bash scripts to filter the output to keep everything organized with the intention to focus only on the potentially vulnerable targets. But realistically this demands a...

ai-exploits

AI Exploits The AI world has a security problem and it's not just in the inputs given to LLMs such as ChatGPT. Based on research done by Protect AI and independent security experts on the Huntr Bug Bounty Platform, there are far more impactful and practical attacks against the tools, libraries an...

Important: Red Hat Security Advisory: MTV RHEL9 Images

Updated Release packages that fix several bugs and add various enhancements are now available. Migration Toolkit for Virtualization Images...

bug-bounty-domains

BUG BOUNTY DOMAINS Domains belonging to the most reputed public bug bounty programs. NOT FOR NON-MONETARY OR PRIVATE PROGRAMS !https://assets.kitploit.com/production/public/readmes/6941/7164554a880fd0545e5dc196593b59979d6603d1462460...

reactor

Reactor Reactor started as a fork of the open source project ElastAlert. The maintainer of this project should keep close tabs on the changes to ElastAlert excluding their additional alerters and ensure that any relevant bugs fixes be patched in and any useful feature ported in. Reactor is an...

rustproofing-linux

Rustproofing Linux Porting Linux Kernel Bugs to Rust This source code repository is a collection of examples accompanying the blog post at https://research.nccgroup.com/?p=18577. DO NOT USE these examples for anything but following the blog post. They intentionally contain vulnerabilities, and ev...

AllAboutBugBounty

All about bug bounty These are my bug bounty notes that I have gathered from various sources, you can contribute to this repository too! List Vulnerability Arbitrary File Upload CRLF Injection Cross Site Request Forgery CSRF Cross Site Scripting XSS Denial of Service DoS Exposed Source Code Host...

CVE-2025-21756

CVE-2025-21756 — Exploitation Lab For educational and authorized security research purposes only. Description CVE-2025-21756 is a use-after-free UAF vulnerability in the Linux kernel's vsock Virtual Socket subsystem, disclosed on February 26, 2025. It allows a local attacker to escalate privilege...

ShellShock-CGI-Scan

ShellShock-CGI-Scan A script, in C, to check if CGI scripts are vulnerable to CVE-2014-6271 The Bash Bug. Options: -i local ip-address -p port to listen -l site list -t connection timeout Default: 15s Example: $ ./Scanner -i 127.0.0.1 -p 31337 -l sites.txt -t 5 Starting listen in localhost on por...

quiver

Quiver : A Meta-Tool for Kali Linux Quiver is an organized namespace of shell functions that pre-fill commands in your terminal so that you can ditch your reliance on notes, copying, pasting, editing, copying and pasting again. Quiver helps you remember how to use every tool in your arsenal and...

shellsploit-framework

We'll back in several years. update...

TLPE

This is a PoC and a writeup for CVE-2026-49881, a logic issue in the InCallController class in Android 17's Telecom service that allows an unprivileged app to gain arbitrary code execution as UID 1000 systemserver with no extra user interaction. We also show here that systemserver code execution...

Recon

👑 Recon 👑 The step of recognizing a target in both Bug Bounties and Pentest can be very time-consuming. Thinking about it, I decided to create my own recognition script with all the tools I use most in this step. All construction of this framework is based on the methodologies of @ofjaaah and...

LSPromise

LSPromise A complete exploit chain that enables privilege escalation from a local untrusted app to root/kernel. It does not involve memory corruptions or race conditions, so attackers don't need to perform complex heap spraying or bypass mitigations against memory corruption vulnerabilities such ...