kfalconspb

jitrex

Humio JITrex - Fast JVM Bytecode Regex Engine

bug-bounty-standards

A list of edge cases that occur in bug bounty programs, conversations on how they should be handled. The goal is to standardise the way that specific situations are handled in bug bounties.

web-check

🕵️‍♂️ All-in-one OSINT tool for analysing any website

googleSearcher

A custom Google search (to bypass some limitations on google and VPNs)

Revenant

Revenant - A 3rd party agent for Havoc that demonstrates evasion techniques in the context of a C2 framework

termGPT

A simple wrapper to call openAI's chatGPT on the terminal written in Python

bbot

A recursive internet scanner for hackers.

DetectDee

DetectDee: Hunt down social media accounts by username, email or phone across social networks.

KnowledgeSharing

rootAVD

Script to root AVDs running with QEMU Emulator from Android Studio

bash-bounty

Random Tools for Bug Bounty

Bug-Bounty-Methodology

These are my checklists which I use during my hunting.

awesome-bugbounty-builder

Awesome Bug bounty builder Project

BugBountyCheckList

This is a bug bounty checklist for various approaches we are going to use in a penetration testing

intigriti-slack-announce

Go bot that publishes new intigriti bug bounty findings to Slack.

google-dorks

Useful Google Dorks for WebSecurity and Bug Bounty

google-search

Returns results from Google search.

favicon-hashtrick

Python script implementing the favicon hash trick to find subdomains.

dnsexpire

Test domain expiration dates.

vhost-brute

A PHP tool to brute force vhost configured on a server.

gitpillage

Extract data from a .git directory.

hakip2host

hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.

enumXFF

Enumerating IPs in X-Forwarded-Headers to bypass 403 restrictions

termtosvg

Record terminal sessions as SVG animations

S3Cruze

All-in-one AWS S3 bucket tool for pentesters.

ssrf-sheriff

A simple SSRF-testing sheriff written in Go

awsScrape

A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

scrcpy

Display and control your Android device

singularity

A DNS rebinding attack framework.