pikpikcu

XRCross

XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|IDOR|RCE|LFI|SQLI) vulnerabilities

nuclei-templates

Community curated list of template files for the nuclei engine to find security vulnerability and fingerprinting the targets.

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

bash-recon

[+] bash recon

my-nuclei-templates

WebHackersWeapons

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

dotfile

Awesome-WAF

🔥 Everything about web-application firewalls (WAF).

axiom

A dynamic infrastructure toolkit for red teamers and bug bounty hunters!

Bug-Bounty-Toolz

BBT - Bug Bounty Tools

bugbounty

Bugbounty Resources

cent

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

jaeles

The Swiss Army knife for automated Web Application Testing

KingOfBugBountyTips

top25-parameter

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

wadl-dumper

Dump all available paths and/ endpoints on WADL file.

Awesome-Asset-Discovery

List of Awesome Asset Discovery Resources

dtd-finder

List DTDs and generate XXE payloads using those local DTDs.

jaeles-signatures

Default signature for Jaeles Scanner

learn-regex

Learn regex the easy way

open-source-web-scanners

A list of open source web security scanners

Payloads_xss_sql_bypass

pikpikcu

PoC-in-GitHub

📡 PoC auto collect from GitHub.

public-bugbounty-programs

Community curated list of public bugbounty and responsible disclosure programs.

ssrf-tool

subfinder

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

SubOver

A Powerful Subdomain Takeover Tool

teler

Real-time HTTP Intrusion Detection

unew

A tool for append URLs, skipping duplicates & combine parameters.