h1pmnh

sqli-dojo-docker

A demo PHP application used to exercise SQL injection techniques in a safe, local Docker environment

bcstats

A tool to download program information from Bugcrowd, for use by researchers to compare programs they are eligible to participate in

h1reports

A tool which allows HackerOne researchers to download their reports into a local, indexed, and searchable repository

autograph

GraphQL automatic fuzzing tool

h1privdisc

Utility to pull disclosed vulnerabilities from HackerOne private programs - for personal use only

synstats

Used to pull a summary CSV of an SRT's statistics on the Synack Red Team platform

burp-exporter

A simple Python script to extract files from a Burp export

bbscope

Scope gathering tool for HackerOne, Bugcrowd, and Intigriti!

h1stats

a tool that compiles a csv of all h1 program stats

pwntools-tutorial

Tutorials for getting started with Pwntools

synackAPI

h1pmnh

responsible-bug-bounty

A simple repo to describe how to use common bug bounty recon tools responsibly

Scavenger

Burp extension to create target specific and tailored wordlist from burp history.

source-map-unpack

Unpack 🛍 your JS source maps 🗺 to original files and folders.

testing

testing

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

h1pmnh.github.io

GH Pages Site

param-miner