971520 matches found
HowToHunt
HowToHunt A collection of practical guides, methodologies, and resources for hunting vulnerabilities From Hackers for Community, because Hacking is not just a skill Itโs a Mindset ๐ก What is HowToHunt? HowToHunt is a collaborative repository of step-by-step guides, methodologies, and hands-on...
Garud
An automation tool that scans sub-domains, sub-domain takeover and then filters out xss, ssti, ssrf and more injection point parameters. I made this tool to automate my recon and save my time. It really give me headache always type such command and then wait to complete one command and I type oth...
subscraper
SubScraper Overview :smallbluediamond: Usage :smallbluediamond: Contribute SubScraper is a subdomain enumeration tool that uses a variety of techniques to find subdomains of a given target. Subdomain enumeration is especially helpful during penetration testing and bug bounty hunting to uncover an...
xsshunter
DEPRECATED - TRY THE NEW EXPRESS VERSION See here for more info: https://github.com/mandatoryprogrammer/xsshunter-express XSS Hunter Source Code This is a portable version of the source code running on https://xsshunter.com. It is designed to be easily-installable on any server for security...
scriptkiddi3
Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools. How it works โข Installation โข Install with Docker โข Usage โข MODES โข Important Notes | Webhook configurations โข For Develope...
WAES
WAES - Web Auto Enum & Scanner Version 1.2.77 WAES is a professional-grade bash-based web enumeration and reconnaissance platform designed for Capture The Flag CTF competitions, Bug Bounty hunting, and Penetration Testing. It automates the complex workflow of security scanning by orchestrating...
KingOfBugBountyTips
KingOfBugBountyTips The Ultimate Bug Bounty Reconnaissance Arsenal "In the shadows we hunt, in the code we trust" Telegram | Twitter | YouTube | LinkedIn DoD VDP Scope DoD Vulnerability Disclosure Program | KingRecon DOD Full DoD Scope - 19 Domains root@kitploit: BBRF Scope - All DoD Domains bbrf...
BugBountyScanner
BugBountyScanner A Bash script and Docker image for Bug Bounty reconnaissance, intended for headless use. Low on resources, high on information output. Helpful? BugBountyScanner helped you net a bounty? Description โ Note: Using the script over a VPN is highly recommended. It's recommended to run...
google-dorks-bug-bounty
Google Dorks for Bug Bounty A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting Live Tool Broad domain search w/ negative search root@kitploit: site:example.com -www -shop -share -ir -mfa PHP extension w/ parameters root@kitploit: site:example.com ext:php inurl:? API...
Galaxy-Bugbounty-Checklist
Notes Try to make best Bug Bounty Checklist. All checklists come with references. Feel free to contact me maximus0xday at gmail if you have any question. To do list: Account Takeover CSRF Bypass Http Request Smuggling OSINT OAuth...
subfinder
Fast passive subdomain enumeration tool. Features โข Install โข Usage โข API Setup โข Library โข Join Discord subfinder is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. subfinder is...
Redcloud
Weather report. Cloudy with a chance of shells! Early release. Follow me on Twitter to stay updated on Redcloud's development. ๐โ๏ธ๐๐ฑ Quick Start - Architecture - Use-cases - Screenshots Introduction Redcloud is a powerful and user-friendly toolbox for deploying a fully featured Red Team...
Needle
Needle Chrome extension for Instant access to your bug bounty submission dashboard of various platforms + publicly disclosed reports + bugbountytip Needle is the only chrome extension you may need to have one click access to your bug submissions across various platforms. No need to create any...
quiver
Quiver : A Meta-Tool for Kali Linux Quiver is an organized namespace of shell functions that pre-fill commands in your terminal so that you can ditch your reliance on notes, copying, pasting, editing, copying and pasting again. Quiver helps you remember how to use every tool in your arsenal and...
Claude-BugHunter
claude-bughunter A self-contained Claude skill bundle for bug hunting and external red-team work ยท 82 skills ยท 15 slash commands ยท 681 disclosed-report patterns across 24 core vulnerability classes ยท enterprise identity + infrastructure attack matrices ยท engagement-folder scaffolding ยท Burp MCP...
hackerone-reports
Live site: reddelexc.github.io/hackerone-reports Tops of HackerOne reports. All reports' raw info stored in data.csv. Scripts to update this file are written in Python 3 and require chromedriver and Chromium executables at PATH. Every script contains some info about how it works. The run order of...
bbscope
bbscope.com Web interface and API for aggregating bug bounty program scopes from HackerOne, Bugcrowd, Intigriti, and YesWeHack. Quick start Docker root@kitploit: cd website cp .env.example .env Edit .env โ at minimum set POSTGRESPASSWORD and your platform credentials docker compose up -d --build...
fuzzilli
Fuzzilli A coverage-guided fuzzer for dynamic language interpreters based on a custom intermediate language "FuzzIL" which can be mutated and translated to JavaScript. Usage The basic steps to use this fuzzer are: 1. Download the source code for one of the supported JavaScript engines. See the...
Recon
๐ Recon ๐ The step of recognizing a target in both Bug Bounties and Pentest can be very time-consuming. Thinking about it, I decided to create my own recognition script with all the tools I use most in this step. All construction of this framework is based on the methodologies of @ofjaaah and...
gowitness
gowitness A golang, web screenshot utility using Chrome Headless. introduction gowitness is a website screenshot utility written in Golang, that uses Chrome Headless to generate screenshots of web interfaces using the command line, with a handy report viewer to process results. Both Linux and mac...