bbscope

bbscope.com Web interface and API for aggregating bug bounty program scopes from HackerOne, Bugcrowd, Intigriti, and YesWeHack. Quick start Docker root@kitploit: cd website cp .env.example .env Edit .env — at minimum set POSTGRESPASSWORD and your platform credentials docker compose up -d --build...

reconness

ReconNess Web App Why ReconNess? Well, we have seen a lot of bugbounty hackers organizing his recon using txt and doing a lot of bash scripts to filter the output to keep everything organized with the intention to focus only on the potentially vulnerable targets. But realistically this demands a...

flumberboozle

flumberboozle Suite of programs meant to aid in bug hunting and security assessments Why this weird name? Just because I heard it first here so I thought this meaningless word would be fitting name of a repository I don't know what I'm going to do with. Contents This repository contains scripts...

claude-bug-bounty

BugHunter AI-powered bug bounty hunting — recon to report, in your terminal. Free Setup · Quick Start · Commands · What It Finds · Install · FAQ !AwareXonehttps://assets.kitploit.com/production/public/readmes/65/29e21784cbe8b37142a688801ddd02d4084136effa303a59c67cdd8...

afrog

afrog 用于漏洞赏金、测试和红队的安全工具 English • 中文 下载 • Wiki • Afrog PoC 规则编写权威指南...

dorkish

Dorkish Durante la fase de reconocimiento o cuando se realiza OSINT, a menudo usamos Google dorking y Shodan, y de ahí surge la idea de Dorkish. Dorkish es una extensión de Chrome que facilita la creación de dorks personalizados para Google y Shodan mediante un constructor, y ofrece dorks...

dorkish

Dorkish During reconaissance phase or when doing OSINT , we often use google dorking and shodan and thus the idea of Dorkish. Dorkish is a Chrome extension tool that facilitates custom dork creation for Google and Shodan using the builder and it offers prebuilt dorks for efficient reconnaissance...

KingOfBugBountyTips

KingOfBugBountyTips The Ultimate Bug Bounty Reconnaissance Arsenal "In the shadows we hunt, in the code we trust" Telegram | Twitter | YouTube | LinkedIn DoD VDP Scope DoD Vulnerability Disclosure Program | KingRecon DOD Full DoD Scope - 19 Domains root@kitploit: BBRF Scope - All DoD Domains bbrf...

Awesome-OSINT-List

Awesome OSINT For Everything A list of osint tools/websites for pentration testing, Reverse Searching, Red team Oprations, information gathering, bugbounty and almost cover everything in single file. Index AI ⁕ Breaches & Leaks ⁕ Basic OSINT ⁕ Recon ⁕ Productivity ⁕ OSINT Challenge ⁕ File Upload ...

bbot

BEE·bot 是一个多功能扫描器，灵感来自 Spiderfoot，旨在自动化你的侦察 、漏洞赏金 和ASM ！ https://github.com/blacklanternsecurity/bbot/assets/20261699/e539e89b-92ea-46fa-b893-9cde94eebf81 实时 BBOT 扫描 - 使用VivaGraphJS 进行可视化 安装 root@kitploit: stable version pipx install bbot bleeding edge dev branch pipx install --pip-args '--pre'...

hackerone-reports

Live site: reddelexc.github.io/hackerone-reports Tops of HackerOne reports. All reports' raw info stored in data.csv. Scripts to update this file are written in Python 3 and require chromedriver and Chromium executables at PATH. Every script contains some info about how it works. The run order of...

keyhacks

KeyHacks 展示了在漏洞赏金计划或渗透测试中发现的不同 API 密钥的验证方法。 @Gwen001 已将整个过程编写成脚本，可在此处获取：here 目录 ABTasty API 密钥 Algolia API 密钥 Amplitude API 密钥 Asana 访问令牌 AWS 访问密钥 ID 和密钥 Azure Application Insights APP ID 和 API 密钥 Bazaarvoice 通行密钥 Bing Maps API 密钥 Bit.ly 访问令牌 Branch.io 密钥和密钥 BrowserStack 访问密钥 Buildkite 访问令牌...

awesome-hacker-search-engines

Impresionantes motores de búsqueda para hackers Una lista curada de impresionantes motores de búsqueda útiles durante pruebas de penetración, evaluaciones de vulnerabilidades, operaciones de Red/Blue Team, Bug Bounty y más General • Servidores • Vulnerabilidades • Exploits • Superficie de ataque ...

RepoReaper

RepoReaper Overview RepoReaper is a precision tool designed to automate the identification of exposed .git repositories across a list of domains and subdomains. By processing a user-provided text file with domain names, RepoReaper systematically checks each for publicly accessible .git files. Thi...

hacker101

Hacker101 Hacker101 is a free class for web security. Whether you're a programmer with an interest in bug bounties or a seasoned security professional, Hacker101 has something to teach you. Getting Started Prerequisites Ruby Suggestion: use rbenv bundler Run gem install bundler, if needed...

JSFScan.sh

JSFScan.sh Blog can be found at https://medium.com/@patelkathan22/beginners-guide-on-how-you-can-use-javascript-in-bugbounty-492f6eb1f9ea?sk=21500dc4288281c7e6ed2315943269e7 Script made for all your javascript recon automation in bugbounty. Just pass subdomain list to it and options according to...

OWASPBugBounty

Programa de Bug Bounty de OWASP para Proyectos Introducción Muchos desarrolladores y empresas que buscan implementar seguridad están recurriendo a OWASP para utilizar librerías Defender que puedan implementar para proteger sus aplicaciones críticas. Dado que esto implica una forma de confianza en...

should-i-trust

should-i-trust Summary should-i-trust is a tool to evaluate OSINT signals for a domain. Requirements should-i-trust requires API keys from the following sources: Censys.io - Free for for first 250/quries/month VirusTotal - Free GrayHatWarFare - Free with limited results Use Case You're part of a...

bugz-tools

bugz-tools A collection of tools I wrote for bug bounty or hacking and don't mind publishing it 😄 Donation If my work has been useful for you, feel free to thank me by buying me a coffee or more : Disclaimer All tools here are created to help in penetration testing/bug bounty and not responsible...

ReconAIzer

ReconAIzer ReconAIzer 是一款强大的 Burp Suite Jython 扩展，利用 OpenAI 帮助漏洞赏金猎人优化其信息收集流程。该扩展可自动化多种任务，使安全研究人员能够更轻松、更快速地识别和利用漏洞。 安装后，ReconAIzer 会添加一个上下文菜单和一个专用标签页来显示结果： 前提条件 Burp Suite Jython Standalone Jar 安装 请按照以下步骤在 Burp Suite 中安装 ReconAIzer 扩展： 第 1 步：下载 Jython 1. 从官方网站下载最新的 Jython Standalone...