Recon

👑 Recon 👑 The step of recognizing a target in both Bug Bounties and Pentest can be very time-consuming. Thinking about it, I decided to create my own recognition script with all the tools I use most in this step. All construction of this framework is based on the methodologies of @ofjaaah and...

GitMonitor

GitMonitor GitMonitor One way to continuously monitor sensitive information that could be exposed on Github Summary I know that there are many other tools available for finding sensitive information currently leaked on Github, I myself still use some of them. However, I think they still lack some...

faraday_bugbounty

faradaybugbounty Faraday Workspaces for Bug Bounties Release notes Documentation...

CVE-2024-21413

CVE-2024-21413 This script is the Proof of Concept PoC of the CVE-2024-21413, a significant security vulnerability discovered in the Microsoft Windows Outlook having a strong 9.8 critical CVSS score. Named as MonikerLink Bug, this vulnerability allows the attacker to execute the arbitrary code...

Important: Red Hat Security Advisory: Red Hat Quay 3.10.26

Red Hat Quay 3.10.26 is now available with bug fixes. Quay 3.10.26...

CVE-2026-80920

In the Linux kernel, the following vulnerability has been resolved: iouring: defer eventfd signaling when queued from a wakeup handler ioreqlocalworkadd signals the CQ ring eventfd inline when it is the one to push the first entry onto -worklist. For DEFERTASKRUN rings that add is frequently done...

CVE-2026-47156

MantisBT versions 2.28.3 and earlier contain a critical authentication bypass in the SOAP API's mci_check_login() function. Any user holding a valid cookie_string (obtainable from the MANTIS_STRING_COOKIE browser cookie after login) can authenticate as any other user by supplying that cookie_stri...

OpenTAXII

OpenTAXII TAXII server implementation in Python from EclecticIQ. OpenTAXII is a robust Python implementation of TAXII Services that delivers rich feature set and friendly pythonic API built on top of well designed application. OpenTAXII is guaranteed to be compatible with Cabby, TAXII client...

ios11-cookie-set-expire-issue

iOS 11 Cookie Set / Expire Issue There appears to be an intermittent issue with setting and expiring cookies in iOS 11 home screen web apps. Two erroneous behaviors can be observed: When a cookie is set and then the app is closed and re-opened, the cookie may no longer be present upon re-opening...

Samba-CVE-2017-7494

Samba-CVE-2017-7494 https://www.zer0d0y.info/post/notes-on-bug-hunting-labs/...

shhgit

🚨 shhgit is no longer maintained. If you need support or consultation for your secret scanning endeavours, drop me an e-mail [email protected] 🚨 shhgit helps secure forward-thinking development, operations, and security teams by finding secrets across their code before it leads to a security...

iptodomain

iptodomain Description: This tool allows you to extract domains from a IP range, using the historic information archived in Virustotalusing API key. It is usefull if you want to know what domains are behind of this IP address, for example in bug bounty programs one of the first steps is to extrac...

bugbounty-cheatsheet

Bug Bounty Cheat Sheet 📚 Reference| 🔎 Vulnerabilities ---|--- Bug Bounty Platforms| XSS Books| SQLi Special Tools| SSRF Recon| CRLF Injection Practice Platforms| CSV Injection Bug Bounty Tips| LFI | XXE | RCE | Open Redirect | Crypto | Template Injection | Contributing We welcome contributions fr...

defcon32

Defcon 32 - BugBounty Village Workshop Slides Presentation Slides Unveiling Vulnerabilities: A Comprehensive Guide to Bug Bounty Recon Documentation ProjectDiscovery Docs Installing ProjectDiscovery Tools Install PDTM Fuzzing / DAST Workshop...

waymore

Acerca de - v8.9 La idea detrás de waymore es encontrar aún más enlaces de Wayback Machine además de otras fuentes que otras herramientas existentes. 👉 La mayor diferencia entre waymore y otras herramientas es que también puede descargar las respuestas archivadas para las URLs en Wayback Machine ...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana12.4: grafana12.4-12.4.10-0.2.hum1 aarch64, x8664 grafana12.4-12.4.10-0.2.hum1.src src...

Important: Red Hat Security Advisory: Ansible automation portal Red Hat Enterprise Linux Images

Updated images are now available for Red Hat Ansible Automation Platform 2.2, which include new features, bug fixes, and enhancements for the Red Hat Ansible Automation Portal bootable container image. Red Hat Ansible Automation Platform 2.2 delivers the Ansible Automation Portal as a bootable...

NoXss

NoXss NoXss is a cross-site script vulnerability scanner supported reflected xss and dom-based xss. It's very fast and suitable for testing millions of urls. It has found some xss vulnerabilities in Bug Bounty program. Features Fast and suitable for testing millions of urls Support Dom-based xssu...

Afuzz

Afuzz - An automated web path fuzzing tool Afuzz is an automated web path fuzzing tool for the Bug Bounty projects. Afuzz is being actively developed by @rapiddns Features Afuzz automatically detects the development language used by the website, and generates extensions according to the language...

GraphQLer

The only dependency-aware GraphQL API testing tool! GraphQLer is a cutting-edge tool designed to dynamically test GraphQL APIs with a focus on adaptability. It offers a range of sophisticated features that streamline the testing process and ensure robust analysis of GraphQL APIs. GraphQLer...