keyhacks

KeyHacks показывает методы проверки различных API-ключей, найденных в рамках программы Bug Bounty или пентеста. @Gwen001 автоматизировал весь процесс, доступный здесь, и его можно найти здесь Table of Contents ABTasty API Key Algolia API key Amplitude API Keys Asana Access token AWS Access Key ID...

TOP

TOP all Top Top TopCodeql TOP All bugbounty pentesting CVE-2022- POC Exp Things 목차 2026년 상위 총계 30 2025년 상위 총계 30 2024년 상위 총계 30 2023년 상위 총계 30 2022년 상위 총계 30 2021년 상위 총계 30 2020년 상위 총계 30 2019년 상위 총계 30 2018년 상위 총계 30 2026 2025 2024 2022 2021 2020 2018 2017 기부 Wechat Pay| AliPay| Paypal| BTC Pay|...

Redcloud

Weather report. Cloudy with a chance of shells! Early release. Follow me on Twitter to stay updated on Redcloud's development. 💁☁️🐚🌱 Quick Start - Architecture - Use-cases - Screenshots Introduction Redcloud is a powerful and user-friendly toolbox for deploying a fully featured Red Team...

byp4xx

/ / // // / / / / / / // /| |/ / |// / / / / // / / / / / Some cURL options you may use as example: -L follow redirections 30X responses -x : to set a proxy -m to set a timeout -H for new headers. Escape double quotes. -d for data in the POST requests body -... Built-in options: --all Verbose mod...

Needle

Needle Chrome extension for Instant access to your bug bounty submission dashboard of various platforms + publicly disclosed reports + bugbountytip Needle is the only chrome extension you may need to have one click access to your bug submissions across various platforms. No need to create any...

quiver

Quiver : A Meta-Tool for Kali Linux Quiver is an organized namespace of shell functions that pre-fill commands in your terminal so that you can ditch your reliance on notes, copying, pasting, editing, copying and pasting again. Quiver helps you remember how to use every tool in your arsenal and...

wordlists

Wordlists 실무 기반 인포섹 워드리스트, 정기적으로 업데이트 현재 워드리스트 기술 이 워드리스트들은 여기에 나열된 CMS/서버/프레임워크의 소스 코드를 기반으로 합니다. 현재 워드리스트는 다음과 같습니다: Wordpress Joomla Drupal Magento Ghost Tomcat 각 워드리스트에는 2가지 버전이 있습니다: 기본예: tomcat.txt: 저장소에 있는 각 파일의 전체 경로를 나열합니다. root@kitploit:...

afrog

Инструмент безопасности для Bug Bounty, Pentest и Red Teaming English • 中文 Скачать • •...

bbot

BEE·bot — это многоцелевой сканер, вдохновлённый Spiderfoot, созданный для автоматизации вашего Recon разведки, Bug Bounties баг-баунти и ASM управления поверхностью атаки! https://github.com/blacklanternsecurity/bbot/assets/20261699/e539e89b-92ea-46fa-b893-9cde94eebf81 Скан BBOT в реальном време...

Recon

👑 Recon 👑 The step of recognizing a target in both Bug Bounties and Pentest can be very time-consuming. Thinking about it, I decided to create my own recognition script with all the tools I use most in this step. All construction of this framework is based on the methodologies of @ofjaaah and...

open-sesame

open-sesame Contains hackerone disclosed reports and other bug bounty writeups. A python tool which runs to display random publicly disclosed Hackerone reports when bored. Automatically opens the report in browser. Contains Over 8k Publicly disclosed Hackerone reports and addtl. wordlist of 700 b...

domained

domained archived A domain name enumeration tool This project is no longer maintained. Thank you to @ccsplit and @mzfr for their work on domained. Gist: Some terrible continually updated python code leveraging some awesome tools that I use for bug bounty reconnaissance. The tools contained in...

InjuredAndroid

InjuredAndroid - CTF A vulnerable Android application with ctf examples based on bug bounty findings, exploitation concepts, and pure creativity. Now available on Google Play! https://play.google.com/store/apps/details?id=b3nac.injuredandroid Setup for a physical device 1. Download the latest...

telegram_bbbot

telegrambbbot Telegram бот для Bug Bounty https://telegram.me/bugbountychannel История Этот бот адаптирован специально для развертывания на Heroku Общая цель этого бота — «Быть полезным для сообщества infosec!» Бот использует https://github.com/maddevsio/bbcrawler для получения информации В...

bbrecon

이 프로젝트는 더 이상 유지 관리되지 않으며 크롤링 인프라는 오프라인 상태로 전환되었습니다. 유지할 만한 충분한 규모의 사용자층이 없었습니다. Bug Bounty Recon bbrecon은 버그 바운티 헌터와 보안 연구자를 위한 무료 Recon-as-a-Service입니다. 이 API는 범위 밖의 대상을 제외하고, 지속적으로 업데이트되는 인터넷 "안전항safe harbor" 공격 표면의 지도를 제공하는 것을 목표로 합니다. 편리한 CLI와 Python 라이브러리가 함께 제공됩니다. 중요 공지 bbrecon이 반환하는 결과의...

megplus

meg+ Deprecated Automated reconnaissance wrapper — TomNomNom's meg on steroids. Built by TomNomNom and EdOverflow. About This wrapper will automate numerous tasks and help you during your reconnaissance process. The script finds common issues, low hanging fruit, and assists you when approaching a...

bug-bounty-tools

버그 바운티 스크립트 가장 인기 있는 버그 바운티 도구의 설치를 자동화하는 BASH 스크립트입니다. 이 스크립트의 주요 목적은 클라우드의 임시/일회용 가상 머신에서 실행하는 것입니다. 사용된 도구 Nuclei httpx Naabu Subfinder DNSx Nmap Katana Recox Wfuzz Amass SQLMap 설정 1. wget을 사용하여 파일을 복사하거나 다운로드하세요: wget...

celerystalk

celerystalk celerystalk помогает автоматизировать процесс сканирования/перечисления сети с помощью асинхронных заданий также называемых задачами, сохраняя при этом полный контроль над тем, какие инструменты вы хотите запускать. Интерактивная демонстрация: Режим Bug Bounty HackerOne Интерактивная...

kenzer

KENZER - Automated web assets enumeration & scanning DEPRECATED Mentions A Conceptual Introduction to Automating Bug Bounties Demo Screenshots Instructions for running 0. Run git clone https://github.com/ARPSyndicate/kenzer /home/ubuntu/kenzer && cd /home/ubuntu/kenzer preferred 1. Create an...

tracy

Tracy A pentesting tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner. tracy should be used during the mapping-the-application phase of the pentest to identify sources of input and their corresponding outputs. tracy can...