1039188 matches found
awesome-bugbounty-tools
Awesome Bug Bounty Tools A curated list of various bug bounty tools Contents Recon Subdomain Enumeration Port Scanning Screenshots Technologies Content Discovery Content Filtering Links Parameters Fuzzing Monitoring Waf Evasion Exploitation Command Injection CORS Misconfiguration CRLF Injection...
chaos
chaos chaos es un escΓ‘ner de IP de 'origen' desarrollado por RST en colaboraciΓ³n con ChatGPT. Es una utilidad de nicho con una audiencia prevista de probadores de penetraciΓ³n y cazadores de bugs principalmente. Una IP de origen es una expresiΓ³n tΓ©cnica que describe la direcciΓ³n IP pΓΊblica final...
chaos
chaos chaos is an 'origin' IP scanner developed by RST in collaboration with ChatGPT. It is a niche utility with an intended audience of mostly penetration testers and bug hunters. An origin-IP is a term-of-art expression describing the final public IP destination for websites that are publicly...
sh00t
root@kitploit: A Testing Environment for Manual Security Testers Sh00t is a task manager to let you focus on performing security testing provides To Do checklists of test cases helps to create bug reports with customizable bug templates Features: Dynamic Task Manager to replace simple editors or...
sh00t
root@kitploit: A Testing Environment for Manual Security Testers Sh00t es un gestor de tareas para que te centres en realizar pruebas de seguridad proporciona listas de verificaciΓ³n Por Hacer de casos de prueba ayuda a crear informes de errores con plantillas de errores personalizables...
memguard
MemGuard Software enclave for storage of sensitive information in memory. This package attempts to reduce the likelihood of sensitive data being exposed when in memory. It aims to support all major operating systems and is written in pure Go. Features Sensitive data is encrypted and authenticated...
ubuntu-cve-2026-31431-mitigation
Complete Guide to Updating the Kernel and kmod in Ubuntu to Fix Security Vulnerabilities CVE CVE-2026-31431 This vulnerability, also known as Copy Fail, is a logic bug in the Linux kernel that occurs in the AFALG / algifaead path. According to the discloser, an unprivileged local user can cause t...
debugHunter
debugHunter Discover Hidden Debug Endpoints & Development Environments The essential Chrome extension for bug bounty hunters and penetration testers Passively detect debug parameters, sensitive headers, and exposed paths while you browse. Why debugHunter? Finding debug endpoints and exposed...
flumberboozle
flumberboozle Suite of programs meant to aid in bug hunting and security assessments Why this weird name? Just because I heard it first here so I thought this meaningless word would be fitting name of a repository I don't know what I'm going to do with. Contents This repository contains scripts...
faraday
Open Source Vulnerability Manager Security has two difficult tasks: designing smart ways of getting new information, and keeping track of findings to improve remediation efforts. With Faraday, you may focus on discovering vulnerabilities while we help you with the rest. Just use it in your termin...
RingBufferDetonator
Ring Buffer Detonator This is a proof-of-concept program for triggering to prove a logic bug in rbpercpuempty. Programs hit the bug will be hung up in kernel-space busy deadloop in tracingreadpipe and impossible to suspend or terminate using any UNIX signal including SIGKILL. Despite exhibiting...
BugBountyScanner
BugBountyScanner A Bash script and Docker image for Bug Bounty reconnaissance, intended for headless use. Low on resources, high on information output. Helpful? BugBountyScanner helped you net a bounty? Description β Note: Using the script over a VPN is highly recommended. It's recommended to run...
CobraAudit
CobraAudit Bug bounty audit framework β three focused modules for common vulnerability classes. root@kitploit: ββββββββ β¦βββββ ββββ¦ β¦ββ¦ββ¦ββ¦β β β ββ β©ββ β¦ββ ββ£ β ββ£β β βββ β ββββββββββ©βββ© β© β© β©βββββ©ββ© β© Modules...
ai-exploits
Exploits de IA El mundo de la IA tiene un problema de seguridad y no solo estΓ‘ en las entradas dadas a LLMs como ChatGPT. Basado en investigaciones realizadas por Protect AI y expertos en seguridad independientes en la Plataforma de Bug Bounty Huntr, existen ataques mucho mΓ‘s impactantes y...
pgpdump
pgpdump: a PGP packet visualizer Kazu Yamamoto [email protected] August 16, 2010 Overview pgpdump is a PGP packet visualizer which displays the packet format of OpenPGP RFC 4880 and PGP version 2 RFC 1991. Here is an example: root@kitploit: % pgpdump test/sig1 Old: Marker Packettag 103 bytes...
NextRecon
NextRecon NextRecon is a simple Python-based reconnaissance tool designed for bug bounty hunters, security researchers, and penetration testers. It performs passive recon by collecting archived URLs from the Wayback Machine and fetching leaked credentials from the BreachCollection API. It also...
afrog
Una herramienta de seguridad para Bug Bounty, Pentest y Red Teaming English β’ δΈζ Descargar β’ Wiki β’ Afrog PoC θ§εηΌεζε¨ζε Colaboradores de PoC...
Redcloud
Weather report. Cloudy with a chance of shells! Early release. Follow me on Twitter to stay updated on Redcloud's development. πβοΈππ± Quick Start - Architecture - Use-cases - Screenshots Introduction Redcloud is a powerful and user-friendly toolbox for deploying a fully featured Red Team...
jackhammer
Jackhammer: One Security vulnerability assessment/management tool to solve all the security team problems. What is Jackhammer? Jackhammer is a collaboration tool built with an aim of bridging the gap between Security team vs dev team, QA team and being a facilitator for TPM to understand and trac...
uro
uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...