claude-bug-bounty

AI-powered bug bounty hunting — recon to report, in your terminal. What Is This · Trusted By · Free Setup · Quick Start · Commands · What It Finds · AXguard · Support · FAQ Built and maintained by AwareXone · Website · X · GitHub !SocialSafe by AwareXone provides case review and assistance for...

bounty-targets-data

bounty-targets-data What's it for This repo contains data dumps of Hackerone and Bugcrowd scopes i.e. the domains that are eligible for bug bounty reports. The files provided are: Main files: domains.txt: full list of domains, without wildcards. wildcards.txt: full list of wildcard domains. Note:...

DarkAngel

अंग्रेज़ी | 中文 DarkAngel एक पूर्णतः स्वचालित व्हाइट हैट भेद्यता स्कैनर है, जो हैकर और बगक्राउड संपत्तियों की निगरानी कर सकता है, भेद्यता रिपोर्ट तैयार कर सकता है, भेद्यता URL का स्क्रीनशॉट ले सकता है, और संदेश सूचनाएँ भेज सकता है। DarkAngel डाउनलोड पता: github.com/Bywalks/DarkAngel वर्तमान में...

httprobe

httprobe Take a list of domains and probe for working http and https servers. Install ▶ go install github.com/tomnomnom/httprobe@latest Basic Usage httprobe accepts line-delimited domains on stdin: ▶ cat recon/example/domains.txt example.com example.edu example.net ▶ cat recon/example/domains.txt...

templates

قوالب التقارير ملاحظات حول بنية الدليل: يقوم السكربت generate-directories.py بجلب أحدث إصدار حالي من بنية VRT من GitHub وإنشاء أي أدلة مفقودة. ولا يقوم بإزالة أو إعادة تسمية الأدلة بناءً على العناصر التي تمت إزالتها من VRT. يتبع السكربت أسماء الإدخالات القياسية ويحافظ على الشرطات السفلية / حالة...

Needle

Needle Chrome एक्सटेंशन: विभिन्न प्लेटफार्मों के आपके बग बाउंटी सबमिशन डैशबोर्ड + सार्वजनिक रूप से खुलासा रिपोर्ट + bugbountytip तक तत्काल पहुँच Needle एकमात्र ऐसा Chrome एक्सटेंशन है जिसकी आपको आवश्यकता हो सकती है ताकि एक क्लिक से विभिन्न प्लेटफार्मों पर अपने बग सबमिशन तक पहुँच सकें। कोई बुकमार्...

OWASPBugBounty

برنامج مكافآت OWASP للمشاريع مقدمة يتجه العديد من المطورين والشركات التي تسعى إلى تطبيق الأمان نحو OWASP لاستخدام مكتبات Defender التي يمكنهم تنفيذها لتأمين تطبيقاتهم الحيوية. نظرًا لأن هذا يعني وجود شكل من الثقة في OWASP، فقد ينسى العديد من مستخدمي هذه المشاريع أو لا يدركون أن الكثير منها مفتوح...

telegram_bbbot

telegrambbbot Telegram Bug Bounty Bot https://telegram.me/bugbountychannel History This bot adopted special for deploying to Heroku General purposes of this got - "Be helpful for infosec community!" Bot use https://github.com/maddevsio/bbcrawler for fetching information Used heroku...

telegram_bbbot

telegrambbbot टेलीग्राम बग बाउंटी बॉट https://telegram.me/bugbountychannel इतिहास यह बॉट विशेष रूप से Heroku पर डिप्लॉय करने के लिए अपनाया गया था इस बॉट का सामान्य उद्देश्य - "इन्फोसेक समुदाय के लिए सहायक बनना!" बॉट जानकारी प्राप्त करने के लिए https://github.com/maddevsio/bbcrawler का उपयोग करता ...

domain-protect

OWASP Domain Protect - moved OWASP Domain Protect has moved to terraform-aws-domain-protect OWASP Domain Protect is now available as a Terraform Module See OWASP Domain Protect documentation including options for migration...

bounty-targets-data — Updated!

bounty-targets-data What's it for This repo contains data dumps of Hackerone and Bugcrowd scopes i.e. the domains that are eligible for bug bounty reports. The files provided are: Main files: domains.txt: full list of domains, without wildcards. wildcards.txt: full list of wildcard domains. Note:...

Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers

Attacker-controlled instructions can make Atlassian's Rovo assistant collect Jira or Confluence data that a signed-in user can access, then send it to an outside server. Two security firms found that behavior independently, by different routes. Only one of those routes is confirmed closed...

bbscope — Updated!

bbscope.com Web interface and API for aggregating bug bounty program scopes from HackerOne, Bugcrowd, Intigriti, and YesWeHack. Quick start Docker root@kitploit: cd website cp .env.example .env Edit .env — at minimum set POSTGRESPASSWORD and your platform credentials docker compose up -d --build...

PT-2026-59509

Impact When using .pgpass, database connection information including the username and password will be logged at the debug level. Patches Upgrade to version 2.7.1 or greater. Workarounds Filter out debug-level logs. References This issue was discovered by BugCrowd user DRAKOKORIAN...

Exploit for CVE-2022-42005

Tesla Security Research Vulnerability research on the Tesla M...

claude-bug-bounty

Claude Bug Bounty Hunter The AI-native bug bounty framework...

POC-Generator-Burp_Suite_Extension

🎯 POC Generator - Burp Suite Extension From vulnerability...

PT-2025-32331 · Undefined · Undefined

@phisher305 @Bugcrowd after the CVE-2025-8673 😂...

CVE-2025-1386- Query smuggling in ch-go library

Impact When using the ch-go library, under a specific condition when the query includes a large, uncompressed malicious external data, it is possible for an attacker in control of such data to smuggle another query packet into the connection stream. Patches If you are using ch-go library, we...

GHSA-M454-3XV7-QJ85 CVE-2025-1386- Query smuggling in ch-go library

Impact When using the ch-go library, under a specific condition when the query includes a large, uncompressed malicious external data, it is possible for an attacker in control of such data to smuggle another query packet into the connection stream. Patches If you are using ch-go library, we...