Claude-BugHunter

claude-bughunter A self-contained Claude skill bundle for bug hunting and external red-team work · 83 skills · 15 slash commands · 681 disclosed-report patterns 433 now individually cited & auditable across 24 core vulnerability classes · enterprise identity + infrastructure attack matrices ·...

HowToHunt

HowToHunt A collection of practical guides, methodologies, and resources for hunting vulnerabilities From Hackers for Community, because Hacking is not just a skill It’s a Mindset 💡 What is HowToHunt? HowToHunt is a collaborative repository of step-by-step guides, methodologies, and hands-on...

fuzzilli

Fuzzilli A coverage-guided fuzzer for dynamic language interpreters based on a custom intermediate language "FuzzIL" which can be mutated and translated to JavaScript. Usage The basic steps to use this fuzzer are: 1. Download the source code for one of the supported JavaScript engines. See the...

offensive-one-liners

offensive-one-liners Jean Miélot at his desk. Public domain. A notebook of 110 offensive security one-liners for authorized testing, CTFs, bug bounty, and lab research. Organized into one markdown notebook with 12 sections. Each entry is a full command or tight pipeline, not a stub. See...

awesome-password-cracking

Awesome Password Cracking In cryptanalysis and computer security, password cracking is the process of recovering passwords from data that has been stored in or transmitted by a computer system in scrambled form. A common approach brute-force attack is to repeatedly try guesses for the password an...

Cybersecurity-Books

Cybersecurity-Books Here you will get awesome collection of mostly all well-known and usefull cybersecurity books from beginner level to expert for all cybersecurity positions 1. CyberSecRoadmap 1.pdf 2. 21 days free CCNA complete videos.pdf 3. 101 Labs - CompTIA Linux+.pdf 4. 7839+ Awesome Deep...

awesome-oneliner-bugbounty

Awesome One-liner Bug Bounty A collection of awesome one-liner scripts especially for bug bounty. This repository stores and houses various one-liner for bug bounty tips provided by me as well as contributed by the community. Your contributions and suggestions are heartily♥ welcome. Definitions...

Bug-Bounty-Wordlists

Bug-Bounty-Wordlists A repository that includes all the important wordlists used while bug hunting. Wordlists will be updated regularly Also you are welcome to contribute in this project and upload your own wordlists. Highly Appreactiable. Note : This repository contains some public available...

BugBuntu

BugBuntu Linux v0.1.2 Hello, this is our first alphabeta test version of BugBuntu This little project is based on Tips from King of Bug Bounty repository BugBuntu is a customized distro based on Ubuntu 18.04 and focused on Bug Bounty tools. Some installed tools: Amass Anew Anti-burl Assetfinder...

CVE-2025-55182-Simple-Scanner-main

CVE-2025-55182: React Server Components RCE Scanner A comprehensive toolkit for detecting and exploiting CVE-2025-55182 , a Critical Remote Code Execution vulnerability in Next.js applications using React Server Components. This repository features a unified Bash scanner Single & Mass mode,...

cve

CVE PoC Almost every publicly available CVE PoC. Current hottest CVEs Title| URL ---|--- CVE-2022-0001| /trickest/cve/blob/main/2022/CVE-2022-0001.md CVE-2022-25297| /trickest/cve/blob/main/2022/CVE-2022-25297.md CVE-2022-1388| /trickest/cve/blob/main/2022/CVE-2022-1388.md CVE-2022-25451|...

-vercel-prod.yml-application-is-vulnerable-to-CVE-2025-66478.

-vercel-prod.yml-application-is-vulnerable-to-CVE-2025-66478. bug bounty...

Bug-Bounty

Here Are Some Bug Bounty Resource From Twitter Contents List : Common Vulnerabilities and Exposures | SQL injection | Cross-Site Scripting ---|---|--- CVE-2022-40684 | SQLiDetector | XSS CVE-2022-41040 | SQLI Payload | XSS Payload | | | | | | Support:...

shhgit

🚨 shhgit is no longer maintained. If you need support or consultation for your secret scanning endeavours, drop me an e-mail [email protected] 🚨 shhgit helps secure forward-thinking development, operations, and security teams by finding secrets across their code before it leads to a security...

bounty-targets-data

bounty-targets-data What's it for This repo contains data dumps of Hackerone and Bugcrowd scopes i.e. the domains that are eligible for bug bounty reports. The files provided are: Main files: domains.txt: full list of domains, without wildcards. wildcards.txt: full list of wildcard domains. Note:...

RepoReaper

RepoReaper Overview RepoReaper is a precision tool designed to automate the identification of exposed .git repositories across a list of domains and subdomains. By processing a user-provided text file with domain names, RepoReaper systematically checks each for publicly accessible .git files. Thi...

gerobug

Gerobug: The First Open Source Bug Bounty Platform. Gerobug The first open source self-managed bug bounty platform. Are you a company, planning to have your own bug bounty program, with minimum budget? WE GOT YOU! We are aware that some organizations have had difficulty establishing their own bug...

wordpress-hacking

WordPress Hacking Some useful resources for hacking WordPress and it's plugins and themes. Bug Bounty If you're passionate about finding and reporting WordPress vulnerabilities, consider joining these bug bounty programs: Wordfence and Patchstack. Signing up through my Wordfence link gives me a...

hakrevdns

hakrevdns Small, fast, simple tool for performing reverse DNS lookups en masse. You feed it IP addresses, it returns hostnames. This can be a useful way of finding domains and subdomains belonging to a company from their IP addresses. Installation go install github.com/hakluke/hakrevdns@latest...

claude-bug-bounty

AI-powered bug bounty hunting — recon to report, in your terminal. What Is This · Trusted By · Free Setup · Quick Start · Commands · What It Finds · AXguard · Support · FAQ Built and maintained by AwareXone · Website ·...