chomp-scan

Chomp Scan A scripted pipeline of tools to simplify the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs. If you've found any bugs using this tool, please let me know! Scope Chomp Scan is a Bash script that chains together the fastest and most effective tools in...

Upload_Bypass

UploadBypass v3 About Upload Bypass is a simple tool designed to assist penetration testers and bug hunters in testing file upload mechanisms. It leverages various bug bounty techniques to simplify the process of identifying and exploiting vulnerabilities, ensuring thorough assessments of web...

multiplier

Multiplier finds more bugs faster Multiplier provides precise and comprehensive code understanding capabilities. It does so by saving build artifacts into a database, and then making them persistently accessible using a C++ or Python API. Multiplier emphasizes the ability to uniquely identify all...

shhgit

🚨 shhgit is no longer maintained. If you need support or consultation for your secret scanning endeavours, drop me an e-mail [email protected] 🚨 shhgit helps secure forward-thinking development, operations, and security teams by finding secrets across their code before it leads to a security...

ios11-cookie-set-expire-issue

iOS 11 Cookie Set / Expire Issue There appears to be an intermittent issue with setting and expiring cookies in iOS 11 home screen web apps. Two erroneous behaviors can be observed: When a cookie is set and then the app is closed and re-opened, the cookie may no longer be present upon re-opening...

bugz-tools

bugz-tools A collection of tools I wrote for bug bounty or hacking and don't mind publishing it 😄 Donation If my work has been useful for you, feel free to thank me by buying me a coffee or more : Disclaimer All tools here are created to help in penetration testing/bug bounty and not responsible...

ShellShock-CGI-Scan

ShellShock-CGI-Scan A script, in C, to check if CGI scripts are vulnerable to CVE-2014-6271 The Bash Bug. Options: -i local ip-address -p port to listen -l site list -t connection timeout Default: 15s Example: $ ./Scanner -i 127.0.0.1 -p 31337 -l sites.txt -t 5 Starting listen in localhost on por...

Bug_Bounty_writeups

STOP DOING BEG-BOUNTIES - STOP COPYING ANOTHERS POC ! DO SOMETHING DIFFERENT!🔴🔴🔴🔴✔ Want to support my work? DONT TRY HACKING WITHOUT BASICS --- IT WILL BE DANGEROUS FOR YOU AND YOUR FUTURE! Contents Cross Site Scripting XSS Cross Site Request Forgery CSRF Clickjacking UI Redressing Attack Local...

Zin

Version 1.0 😎 Zin 😎 A Payload Injector for bugbounties written in go Features Inject multiple payloads into all parameters Inject single payloads into all parameters Saves responses into output folder Displays Status Code & Response Length Can grep for patterns in the response Really fast Easy to...

Mind-Maps

MindMaps 🗺️ This repository stores and houses various Mindmaps for bug bounty Hunters🧑‍🦰, pentesters🧑‍🦰 and offensive🔴/defensive🔵 security Professionals🫂 provided by me as well as contributed by the community🧑🏻‍🤝‍🧑🏽. Your contributions and suggestions are welcomed. Name| Link| Type| Description|...

auto-repeater

AutoRepeater: Automated HTTP Request Repeating With Burp Suite tl;dr Within extender import AutoRepeater.jar Some Brief Instructions AutoRepeater will only resend requests which are changed by a defined replacement. When AutoRepeater receives a request that matches the conditions set for a given...

Apache APISIX - Remote Code Execution

A default configuration of Apache APISIX with default API key is vulnerable to remote code execution. An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. When the admin key was changed or the port of Admin API was changed to a port different...

NexusDB <4.50.23 - Local File Inclusion

NexusQA NexusDB before 4.50.23 allows the reading of files via ../ directory traversal and local file inclusion. id: CVE-2020-24571 info: name: NexusDB 4.50.23 - Local File Inclusion author: pikpikcu severity: high description: NexusQA NexusDB before 4.50.23 allows the reading of files via ../...

Mongo-Express - Remote Code Execution

Mongo-Express before 1.0.0 is susceptible to remote code execution because it uses safer-eval to validate user supplied javascript. Unfortunately safer-eval sandboxing capabilities are easily bypassed leading to remote code execution in the context of the node server. id: CVE-2020-24391 info: nam...

NeDi 1.9C - Cross-Site Scripting

NeDi 1.9C is vulnerable to cross-site scripting because of an incorrect implementation of sanitize in inc/libmisc.php. This function attempts to escape the SCRIPT tag from user-controllable values, but can be easily bypassed, as demonstrated by an onerror attribute of an IMG element as a...

MajorDoMo - Unauthenticated RCE

MajorDoMo contains a remote code execution caused by an include order bug and lack of exit after redirect in admin panel's PHP console, letting unauthenticated attackers execute arbitrary PHP code via crafted GET requests. id: CVE-2026-27174 info: name: MajorDoMo - Unauthenticated RCE author:...

GraphQLer

The only dependency-aware GraphQL API testing tool! GraphQLer is a cutting-edge tool designed to dynamically test GraphQL APIs with a focus on adaptability. It offers a range of sophisticated features that streamline the testing process and ensure robust analysis of GraphQL APIs. GraphQLer...

V8Harvest

V8Harvest V8Harvest helps view recent V8 bug patterns on a single page for analyzing V8 vulnerabilities. It has parsed all regress- files under the directory of src/v8/test/mjsunit/ using git log. Each regress contains the following links related to its own information: Chromium Bugs / V8 Bugs V8...

rack-bug

Rack::Bug Code Climate Repository: http://github.com/brynary/rack-bug Description Rack::Bug adds a diagnostics toolbar to Rack apps. When enabled, it injects a floating div allowing exploration of logging, database queries, template rendering times, etc. Features Password-based security IP-based...

reactor

Reactor Reactor started as a fork of the open source project ElastAlert. The maintainer of this project should keep close tabs on the changes to ElastAlert excluding their additional alerters and ensure that any relevant bugs fixes be patched in and any useful feature ported in. Reactor is an...