971520 matches found
Awesome-OSINT-List
Awesome OSINT For Everything A list of osint tools/websites for pentration testing, Reverse Searching, Red team Oprations, information gathering, bugbounty and almost cover everything in single file. Index AI β Breaches & Leaks β Basic OSINT β Recon β Productivity β OSINT Challenge β File Upload ...
s3sec
s3sec Test AWS S3 buckets for read/write/delete access This tool was developed to quickly test a list of s3 buckets for public read, write and delete access for the purposes of penetration testing on bug bounty programs. Screenshot Found a bug bounty using this tool? Feel free to add me as a...
claude-bug-bounty
BugHunter AI-powered bug bounty hunting β recon to report, in your terminal. Free Setup Β· Quick Start Β· Commands Β· What It Finds Β· Install Β· FAQ Powered byAwareXone.com β Your AI Agent Against Scams & Fraud π Open for Sponsorship BugHunter is open for sponsorship. Your support funds new features...
gerobug
Gerobug: The First Open Source Bug Bounty Platform. Gerobug The first open source self-managed bug bounty platform. Are you a company, planning to have your own bug bounty program, with minimum budget? WE GOT YOU! We are aware that some organizations have had difficulty establishing their own bug...
flumberboozle
flumberboozle Suite of programs meant to aid in bug hunting and security assessments Why this weird name? Just because I heard it first here so I thought this meaningless word would be fitting name of a repository I don't know what I'm going to do with. Contents This repository contains scripts...
HowToHunt
HowToHunt A collection of practical guides, methodologies, and resources for hunting vulnerabilities From Hackers for Community, because Hacking is not just a skill Itβs a Mindset π‘ What is HowToHunt? HowToHunt is a collaborative repository of step-by-step guides, methodologies, and hands-on...
Garud
An automation tool that scans sub-domains, sub-domain takeover and then filters out xss, ssti, ssrf and more injection point parameters. I made this tool to automate my recon and save my time. It really give me headache always type such command and then wait to complete one command and I type oth...
subscraper
SubScraper Overview :smallbluediamond: Usage :smallbluediamond: Contribute SubScraper is a subdomain enumeration tool that uses a variety of techniques to find subdomains of a given target. Subdomain enumeration is especially helpful during penetration testing and bug bounty hunting to uncover an...
xsshunter
DEPRECATED - TRY THE NEW EXPRESS VERSION See here for more info: https://github.com/mandatoryprogrammer/xsshunter-express XSS Hunter Source Code This is a portable version of the source code running on https://xsshunter.com. It is designed to be easily-installable on any server for security...
scriptkiddi3
Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools. How it works β’ Installation β’ Install with Docker β’ Usage β’ MODES β’ Important Notes | Webhook configurations β’ For Develope...
WAES
WAES - Web Auto Enum & Scanner Version 1.2.77 WAES is a professional-grade bash-based web enumeration and reconnaissance platform designed for Capture The Flag CTF competitions, Bug Bounty hunting, and Penetration Testing. It automates the complex workflow of security scanning by orchestrating...
KingOfBugBountyTips
KingOfBugBountyTips The Ultimate Bug Bounty Reconnaissance Arsenal "In the shadows we hunt, in the code we trust" Telegram | Twitter | YouTube | LinkedIn DoD VDP Scope DoD Vulnerability Disclosure Program | KingRecon DOD Full DoD Scope - 19 Domains root@kitploit: BBRF Scope - All DoD Domains bbrf...
BugBountyScanner
BugBountyScanner A Bash script and Docker image for Bug Bounty reconnaissance, intended for headless use. Low on resources, high on information output. Helpful? BugBountyScanner helped you net a bounty? Description β Note: Using the script over a VPN is highly recommended. It's recommended to run...
google-dorks-bug-bounty
Google Dorks for Bug Bounty A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting Live Tool Broad domain search w/ negative search root@kitploit: site:example.com -www -shop -share -ir -mfa PHP extension w/ parameters root@kitploit: site:example.com ext:php inurl:? API...
android-security-awesome
android-security-awesome A collection of Android security-related resources. 1. Tools 2. Academic/Research/Publications/Books 3. Exploits/Vulnerabilities/Bugs Tools Online Analyzers 1. Appknox - not free 2. Virustotal 3. NowSecure Lab Automated - Enterprise tool for mobile app security testing...
Galaxy-Bugbounty-Checklist
Notes Try to make best Bug Bounty Checklist. All checklists come with references. Feel free to contact me maximus0xday at gmail if you have any question. To do list: Account Takeover CSRF Bypass Http Request Smuggling OSINT OAuth...
subfinder
Fast passive subdomain enumeration tool. Features β’ Install β’ Usage β’ API Setup β’ Library β’ Join Discord subfinder is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. subfinder is...
Redcloud
Weather report. Cloudy with a chance of shells! Early release. Follow me on Twitter to stay updated on Redcloud's development. πβοΈππ± Quick Start - Architecture - Use-cases - Screenshots Introduction Redcloud is a powerful and user-friendly toolbox for deploying a fully featured Red Team...
Needle
Needle Chrome extension for Instant access to your bug bounty submission dashboard of various platforms + publicly disclosed reports + bugbountytip Needle is the only chrome extension you may need to have one click access to your bug submissions across various platforms. No need to create any...
quiver
Quiver : A Meta-Tool for Kali Linux Quiver is an organized namespace of shell functions that pre-fill commands in your terminal so that you can ditch your reliance on notes, copying, pasting, editing, copying and pasting again. Quiver helps you remember how to use every tool in your arsenal and...