OWASPBugBounty

OWASP Bug Bounty для проектов Введение Многие разработчики и компании, стремящиеся внедрить безопасность, обращаются к OWASP, чтобы использовать библиотеки Defender, которые они могут внедрить для защиты своих критически важных приложений. Поскольку это подразумевает определённую форму доверия к...

Needle

Needle Extension Chrome pour un accès instantané à votre tableau de bord de soumission de bogues sur diverses plateformes + rapports divulgués publiquement + bugbountytip Needle est la seule extension Chrome dont vous aurez besoin pour accéder en un clic à vos soumissions de bogues sur différente...

DarkAngel

English | 中文 DarkAngel — это полностью автоматический сканер уязвимостей для белых хакеров, который позволяет отслеживать активы HackerOne и Bugcrowd, генерировать отчёты об уязвимостях, делать скриншоты URL-адресов уязвимостей и отправлять уведомления через мессенджеры. Адрес загрузки DarkAngel:...

templates

Шаблоны отчётов Примечания по структуре каталога: Скрипт generate-directories.py берёт текущую последнюю версию структуры VRT из GitHub и создаёт недостающие каталоги. Он не удаляет и не переименовывает каталоги на основе элементов, удалённых из VRT. Скрипт следует стандартным именам записей и...

domain-protect

OWASP Domain Protect - moved OWASP Domain Protect has moved to terraform-aws-domain-protect OWASP Domain Protect is now available as a Terraform Module See OWASP Domain Protect documentation including options for migration...

telegram_bbbot

telegrambbbot Telegram Bug Bounty Bot https://telegram.me/bugbountychannel History This bot adopted special for deploying to Heroku General purposes of this got - "Be helpful for infosec community!" Bot use https://github.com/maddevsio/bbcrawler for fetching information Used heroku...

telegram_bbbot

telegrambbbot Telegram бот для Bug Bounty https://telegram.me/bugbountychannel История Этот бот адаптирован специально для развертывания на Heroku Общая цель этого бота — «Быть полезным для сообщества infosec!» Бот использует https://github.com/maddevsio/bbcrawler для получения информации В...

httprobe

httprobe Take a list of domains and probe for working http and https servers. Install root@kitploit: ▶ go install github.com/tomnomnom/httprobe@latest Basic Usage httprobe accepts line-delimited domains on stdin: root@kitploit: ▶ cat recon/example/domains.txt example.com example.edu example.net ▶...

Exploit for CVE-2022-42005

Tesla Security Research Vulnerability research on the Tesla M...

claude-bug-bounty

Claude Bug Bounty Hunter The AI-native bug bounty framework...

POC-Generator-Burp_Suite_Extension

🎯 POC Generator - Burp Suite Extension From vulnerability...

PT-2025-32331 · Undefined · Undefined

@phisher305 @Bugcrowd after the CVE-2025-8673 😂...

GHSA-M454-3XV7-QJ85 CVE-2025-1386- Query smuggling in ch-go library

Impact When using the ch-go library, under a specific condition when the query includes a large, uncompressed malicious external data, it is possible for an attacker in control of such data to smuggle another query packet into the connection stream. Patches If you are using ch-go library, we...

CVE-2025-1386- Query smuggling in ch-go library

Impact When using the ch-go library, under a specific condition when the query includes a large, uncompressed malicious external data, it is possible for an attacker in control of such data to smuggle another query packet into the connection stream. Patches If you are using ch-go library, we...

Malicious code in bugcrowd-npm-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 46b2f058641ff9f8a06f7a20bd103fbfc37dc8ffcfc09d191ab7a8b9d0c35715 The OpenSSF Package Analysis project identified 'bugcrowd-npm-poc' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1078 Malicious code in bugcrowd-npm-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 46b2f058641ff9f8a06f7a20bd103fbfc37dc8ffcfc09d191ab7a8b9d0c35715 The OpenSSF Package Analysis project identified 'bugcrowd-npm-poc' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

XSS sidekiq-unique-jobs UI server vulnerability

Summary Cross site scripting XSS potentially exposing cookies / sessions / localStorage, fixed by sidekiq-unique-jobs v8.0.7. Specifically, this is a Reflected Server-Side, Non-Self, Cross Site Scripting vulnerability, considered a P3 on the BugCrowd taxonomy with the following categorization:...

GHSA-CMH9-RX85-XJ38 XSS sidekiq-unique-jobs UI server vulnerability

Summary Cross site scripting XSS potentially exposing cookies / sessions / localStorage, fixed by sidekiq-unique-jobs v8.0.7. Specifically, this is a Reflected Server-Side, Non-Self, Cross Site Scripting vulnerability, considered a P3 on the BugCrowd taxonomy with the following categorization:...

Bullied by Bugcrowd over Kape CyberGhost disclosure

TL;DR The CyberGhost VPN client suffers from an elevation of privilege vulnerability and is filed under CVE-2023-30237. A specially crafted JSON payload sent to the CyberGhost RPC service can lead to command line injection when the OpenVPN process is launched, leading to full system compromise. T...

ChatGPT Security: OpenAI's Bug Bounty Program Offers Up to $20,000 Prizes

OpenAI, the company behind the massively popular ChatGPT AI chatbot, has launched a bug bounty program in an attempt to ensure its systems are "safe and secure." To that end, it has partnered with the crowdsourced security platform Bugcrowd for independent researchers to report vulnerabilities...