tomsec

0install

A bash script that will automatically install Bug Hunting tools used for recon

Anubis

🔓 Subdomain enumeration and information gathering tool

arachni

Web Application Security Scanner Framework

Atlas

Quick SQLMap Tamper Suggester

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

awesome-osint

:scream: A curated list of amazingly awesome OSINT

BBTz

BBT - Bug Bounty Tools

cent

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

discover

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.

DNS-Wordlists

part of my wordlist to bruteforce DNS to find subdoamains.

FinalRecon

OSINT Tool for All-In-One Web Reconnaissance

gf

A wrapper around grep, to help you grep for things

Gf-Patterns

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

Git-Secret

Go scripts for finding an API key / some keywords in repository

haklistgen

Turns any junk text into a usable wordlist for brute-forcing.

hello-world

HowToHunt

Tutorials and Things to Do while Hunting Vulnerability.

jsleak

a Go code to detect leaks in JS files via regex patterns

kali-setup-script

Bash script which prepares Kali for a pentest by enabling session logging, installing tools, and making common configuration changes

KingOfBugBountyTips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

nerdbug

Full Nuclei automation script with logic explanation.

NotesYouDontNeed

Some Notes because I am too lazy to search

nuclei

Nuclei is a fast tool for configurable targeted scanning based on templates offering massive extensibility and ease of use.

OSINT-Framework

OSINT Framework

Reconator

Automated Recon for Pentesting & Bug Bounty

spiderfoot

SpiderFoot, the most complete OSINT collection and reconnaissance tool.

templatesallnuclei

This includes all the templates of nuclei collected from different sources

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

urlhunter

a recon tool that allows searching on URLs that are exposed via shortener services

XSS-Catcher

Find blind XSS but why not gather data while you're at it.