ariesike

KingOfBugBountyTips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

goproxy

An HTTP proxy library for Go

Gxss

A tool to check a bunch of URLs that contain reflecting params.

SecurityTips

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

learngo

❤️ 1000+ Hand-Crafted Go Examples, Exercises, and Quizzes. 🚀 Learn Go by fixing 1000+ tiny programs.

go-rate

A timed rate limiter for Go

advisory-database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Go-SCP

Golang Secure Coding Practices guide

gauplus

subjack

Subdomain Takeover tool written in Go

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

gospider

Gospider - Fast web spider written in Go

codesearch

Fast, indexed regexp search over large file trees

HowToHunt

Collection of methodology and test case for various web vulnerabilities.

tty-record

Simple tool to record a terminal session

shuttle

A web proxy in Golang with amazing features.

glorp

A CLI-based HTTP intercept and replay proxy

xss-payload-list

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

proxify

A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go.

colima

Container runtimes on macOS (and Linux) with minimal setup

mariana-trench

A security focused static analysis tool for Android and Java applications.

CVE-2021-44228-Scanner

Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228

kryptology

log4shell-poc

syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

timeout

Timeout invocation. Go porting of GNU timeout and able to use as Go package

STEWS

A Security Tool for Enumerating WebSockets

RsaCtfTool

RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data

crawlergo

A powerful browser crawler for web vulnerability scanners