should-i-trust

should-i-trust Summary should-i-trust is a tool to evaluate OSINT signals for a domain. Requirements should-i-trust requires API keys from the following sources: Censys.io - Free for for first 250/quries/month VirusTotal - Free GrayHatWarFare - Free with limited results Use Case You're part of a...

hackerone-reports

Live site: reddelexc.github.io/hackerone-reports Tops of HackerOne reports. All reports' raw info stored in data.csv. Scripts to update this file are written in Python 3 and require chromedriver and Chromium executables at PATH. Every script contains some info about how it works. The run order of...

fuzz4bounty

🚀💰fuzz4bounty 🚀Wordlists for Bug Bounty Hunting This repository contains publicly available wordlists for Bug hunting. The main Objective for creating this repo is to bring all the available wordlists at one place. Wordlists will be updated regularly. Feel free to contribute, Pull Requests are...

KingOfBugBountyTips

KingOfBugBountyTips El Arsenal Definitivo de Reconocimiento para Bug Bounty "En las sombras cazamos, en el código confiamos" Telegram | Twitter | YouTube | LinkedIn DoD VDP Scope Programa de Divulgación de Vulnerabilidades del DoD | KingRecon DOD Alcance Completo del DoD - 19 Dominios bash BBRF...

Agentic-Bug-Hunter

AI-powered bug bounty hunting - recon to report, in your terminal. Free Setup · Quick Start · Commands · What It Finds · Install · Support · FAQ Built and maintained by AwareXone · Website · X · GitHub Support This Project If BugHunter helps your hunts, you can fuel more of them — every...

afrog

Una herramienta de seguridad para Bug Bounty, Pentest y Red Teaming English • 中文 Descargar • Wiki • Afrog PoC 规则编写权威指南 Colaboradores de PoC...

awesome-oneliner-bugbounty

Awesome One-liner Bug Bounty A collection of awesome one-liner scripts especially for bug bounty. This repository stores and houses various one-liner for bug bounty tips provided by me as well as contributed by the community. Your contributions and suggestions are heartily♥ welcome. Definitions...

Galaxy-Bugbounty-Checklist

Notas Intenta hacer la mejor lista de verificación de Bug Bounty. Todas las listas de verificación vienen con referencias. No dudes en contactarme a maximus0xday at gmail si tienes alguna pregunta. Lista de tareas: Account Takeover CSRF Bypass Http Request Smuggling OSINT OAuth...

subfinder

Fast passive subdomain enumeration tool. Features • Install • Usage • API Setup • Library • Join Discord subfinder is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. subfinder is...

BugBuntu

BugBuntu Linux v0.1.2 Hola, esta es nuestra primera versión de prueba alfa-beta de BugBuntu. Este pequeño proyecto está basado en consejos del repositorio King of Bug Bounty. BugBuntu es una distribución personalizada basada en Ubuntu 18.04 y enfocada en herramientas de Bug Bounty. Algunas...

AppSecEzine

AppSec Ezine Raising awareness towards the prevention of security risks is challenging. Most people are unaware of or just don’t have access to the right information. Keeping up the pace in the tech world is a golden rule. If you are not ready to deal with security issues, you are heading in the...

dora

dora Features Blazing fast as we are using ripgrep in backend Exploit/PoC steps for many of the API key, allowing to write a good report for bug bounty hunting Unlike many other API key finders, dora also shows the path to the file and the line with context for easier analysis Can easily be...

fuzzilli

Fuzzilli A coverage-guided fuzzer for dynamic language interpreters based on a custom intermediate language "FuzzIL" which can be mutated and translated to JavaScript. Usage The basic steps to use this fuzzer are: 1. Download the source code for one of the supported JavaScript engines. See the...

GitMonitor

GitMonitor GitMonitor Una forma de monitorear continuamente información sensible que podría estar expuesta en Github Resumen Sé que hay muchas otras herramientas disponibles para encontrar información sensible actualmente filtrada en Github, yo mismo todavía uso algunas de ellas. Sin embargo, cre...

BugBountyScanner

BugBountyScanner Un script Bash y una imagen Docker para reconocimiento de Bug Bounty, pensado para uso sin interfaz gráfica. Bajo en recursos, alto en salida de información. ¿Útil? ¿BugBountyScanner te ayudó a conseguir un bounty? Descripción ⚠ Nota: Se recomienda encarecidamente usar el script ...

bounty-targets-data

bounty-targets-data What's it for This repo contains data dumps of Hackerone and Bugcrowd scopes i.e. the domains that are eligible for bug bounty reports. The files provided are: Main files: domains.txt: full list of domains, without wildcards. wildcards.txt: full list of wildcard domains. Note:...

Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes

Pruebas de Penetración, De Principiante a Experto! Esta guía está diseñada tanto para principiantes como para testers de penetración experimentados. Cubre todos los aspectos de las pruebas de penetración de aplicaciones web, incluyendo conceptos fundamentales, configuración de entornos de prueba...

Claude-BugHunter

claude-bughunter Un paquete de skills autocontenido para Claude, diseñado para la caza de bugs y trabajos de red-team externos · 82 skills · 15 comandos slash · 681 patrones de informes divulgados en 24 clases de vulnerabilidades principales · matrices de ataque de identidad empresarial e...

gaia

Gaia - Attack Surface Discovery & AI-Assisted Triage Gaia is a CLI-first attack surface analysis tool that discovers endpoints and parameters, reduces noise, and highlights security-relevant risks using static heuristics and optional AI reasoning. It orchestrates Katana, gau, arjun, linkfinder, a...

bug-reaper

BugReaper Structured web2 bug bounty AI skill — 18 vulnerability classes, 4 bug bounty platforms, zero AI slop. Compatible with OpenClaw, Cursor, Claude Code, Antigravity, and Windsurf. BugReaper is an Agent Skill that turns any compatible AI agent into a disciplined web2 bug bounty hunter. It...