bsysop's repositories
blind-ssrf-chains
An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability
awesome-bbht
A bash script that will automatically install a list of bug hunting tools that I find interesting for recon, exploitation, etc. (minus burp) For Ubuntu/Debain. Feel free to fork, and add your own tools.
bbrecon
Python library and CLI for the Bug Bounty Recon API
burp-piper-custom-scripts
Custom scripts for the PIPER Burp extensions.
CVE-2020-5410-POC
CVE-2020-5410 Spring Cloud Config directory traversal vulnerability
dtd-finder
List DTDs and generate XXE payloads using those local DTDs.
eos
Enemies Of Symfony - Debug mode Symfony looter
exclude-cdn
Wraps projectdiscovery's cdncheck library to exclude CDN hosts from input passed over stdin
explo
Human and machine readable web vulnerability testing format
nuclei-templates
Community curated list of template files for the nuclei engine to find security vulnerability and fingerprinting the targets.
OneListForAll
Rockyou for web fuzzing
oobfuzz
Conduct OOB Fuzzing of targets with custom payloads towards callback server
PacketProxy
A local proxy written in Java
spring-view-manipulation
When MVC magic turns black
SSRFire
An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects
sub.sh
Multiprocessing(Parallel)Subdomain Detect Script
web-payloads
Payload Arsenal for Pentration Tester and Bug Bounty Hunters
wraith-signatures
Signatures for wraith used to detect secrets across various sources