bug-bounty

There are 167 repositories under bug-bounty topic.

Hack-with-Github / Awesome-Hacking
A collection of various awesome lists for hackers, pentesters and security researchers
android awesome bug-bounty fuzzing hacking penetration-testing pentesting-windows reverse-engineering security
77681
maurosoria / dirsearch
Web path scanner
appsec brute bug-bounty bugbounty dirsearch enumeration fuzzer fuzzing hacking hacking-tool infosec penetration-testing pentest-tool pentesting python red-teaming redteam scanner security wordlist
Language:Python 11280
nahamsec / Resources-for-Beginner-Bug-Bounty-Hunters
A list of resources for those interested in getting started in bug bounties
bug-bounty bug-bounty-hunters bugbounty education hackers hacking learn2hack pentest ssrf web-security xss
10166
rengine
yogeshojha / rengine
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
bug-bounty bugbounty hacking information-gathering infosec osint penetration-testing pentesting recon recon-engine reconnaissance rengine scanner scanner-web scanning security-tools
Language:Python 6968
HackTools
LasCC / HackTools
The all-in-one browser extension for offensive security professionals 🛠
reverse-shell hacking hack-tools chrome-extension firefox-addon hacktools payloads xss-payloads web-pentesters hack msfvenom metasploit hackbar cheatsheet purpleteam redteam bug-bounty hackingtools
Language:TypeScript 5459
reconftw
six2dez / reconftw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
bugbounty hacking recon pentest subdomain nuclei vulnerabilities scanner fuzzing osint penetration-testing pentesting reconnaissance dns pentest-tool security security-tools bug-bounty
Language:Shell 5251
osmedeus
j3ssie / osmedeus
A Workflow Engine for Offensive Security
attack-surface attack-surface-management bug-bounty bugbounty go golang hacking hacking-tool information-gathering osint penetration-testing pentest-tool pentesting reconnaissance scanning security security-tools
Language:Go 5094
pry0cc / axiom
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
axiom bug-bounty dnsgen dnsx ffuf gau gowitness hacking-vps httprobe httpx masscan massdns meg nmap nuclei shuffledns subfinder tmux
Language:Shell 3828
skerkour / black-hat-rust
Applied offensive security with Rust - https://kerkour.com/black-hat-rust
rust security pentest pentesting offensive-security red-team audit beacon c2 bug-bounty bug-hunting wasm shellcodes scanner phishing trojan virus hacking infosec security-tools
Language:Rust 3046
zan8in / afrog
A Security Tool for Bug Bounty, Pentest and Red Teaming.
afrog bug-bounty penetration-testing pentest poc red-teaming vulnerability-scanner vulnerability-scanning-tools
Language:Go 2834
dwisiswant0 / awesome-oneliner-bugbounty
A collection of awesome one-liner scripts especially for bug bounty tips.
awesome bash bug-bounty bugbounty bugbountytips hacktoberfest liner-scripts one-liners recon
2437
inonshk / 31-days-of-API-Security-Tips
This challenge is Inon Shkedy's 31 days API Security Tips.
api-pentest api-security bug-bounty bugbounty bugbountytips infosec pentest security
2062
tom0li / collection-document
Collection of quality safety articles. Awesome articles.
awesome bounty-hunters bug-bounty cloud dns fuzz github hacker hacking java list pentest redteam research sec security src waf web xss
1976
sn0int
kpcyrd / sn0int
Semi-automatic OSINT framework and package manager
osint intelligence osint-framework certificate-transparency rust security security-audit security-scanner investigation reconnaissance recon lua pentesting location bug-bounty
Language:Rust 1859
haccer / subjack
Subdomain Takeover tool written in Go
go golang hostile subdomain takeover subdomain-takeover bug-bounty pentesting infosec bugbounty security
Language:Go 1849
SubDomainizer
nsonaniya2010 / SubDomainizer
A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
python3 security-tools security-automation security subdomain-scanner subdomain-enumeration s3-bucket find-subdomains cloud-storage-services external-javascripts secrets secretfinder bugbounty find-secrets s3-buckets bug-bounty madeinindia
Language:Python 1659
wagiro / BurpBounty
Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
bug-bounty bugbounty burp-extensions burpsuite vulnerability-detection vulnerability-scanner
Language:Java 1623
danieldurnea / FBI-tools
🕵️ OSINT Tools for gathering information and actions forensics 🕵️
awesome awesome-list bug-bounty cybersecurity forensics hacking incident-response infosec osint penetration-testing pentesting reconnaissance security security-automation security-tools
1504
Cyber-Guy1 / API-SecurityEmpire
API Security Project aims to present unique attack & defense methods in API Security field
api apisecurity bug-bounty bugbounty bugbountytips cybersec cybersecurity information-security infosec penetration-testing tips
1287
dumpall
0xHJK / dumpall
一款信息泄漏利用工具，适用于.git/.svn/.DS_Store泄漏和目录列出
dumpall python3 pentesting security hacking tools scanner spider bug-bounty githack svn
Language:Python 1254
xalgord / Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes
bugbounty resources hacking owasp owasp-top-10 bug-bounty bugbountytips xalgord collection ethical-hacking
1185
metabigor
j3ssie / metabigor
OSINT tools and more but without API key
osint security pentesting infosec bugbounty ip-osint ip-range asn reconnaissance subdomain security-tools bugbounty-tools bugbountytips subdomains bug-bounty recon
Language:Go 1143
trickest / inventory
Asset inventory of over 800 public bug bounty programs.
security bugbounty bugbountytips infosec reconnaissance recon pentesting hacking security-tools red-team penetration-testing software-security pentest-tool osint osint-tool osint-resources threat-intelligence bug-bounty fuzzing
Language:Shell 1121
Uniswap / v3-periphery
🦄 🦄 🦄 Peripheral smart contracts for interacting with Uniswap v3
automated-market-maker bug-bounty ethereum periphery smart-contracts uniswap
Language:TypeScript 1112
0xPugal / One-Liners
A collection of awesome one-liners for bug bounty hunting.
bug-bounty bugbounty enumeration onliner-scripts subdomain-enumeration
1087
payloadbox / xxe-injection-payload-list
🎯 XML External Entity (XXE) Injection Payload List
xxe xxe-injection xxe-payloads xxe-example xml websecurity websecurity-reference infosec bugbounty bug-bounty web-application-security cybersecurity cyber-security information-security xml-entity payload xxe-payload xxe-payload-list payloads hacking
1019
yassineaboukir / sublert
Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.
reconnaissance sublert penetration-testing pentest security certificate-transparency bug-bounty python monitoring-tool certificate-transparency-logs hacking information-gathering
Language:Python 979
diodb
disclose / diodb
Open-source vulnerability disclosure and bug bounty program database
security-research safe-harbor-framework responsible-disclosure vulnerability-disclosure disclosure-policy simplicity legal safety bug-bounty hackers bug-bounty-hunters data
Language:Python 955
taielab / awesome-hacking-lists
平常看到好的渗透hacking工具和多领域效率工具的集合
web hacking awesome-list hacker hacking-tool kali-scripts hacking-tools pentesting-tools pentest-scripts bounty-hunters bug-bounty bugbounty bugbounty-tool
945
nikitastupin / clairvoyance
Obtain GraphQL API schema even if the introspection is disabled
bug-bounty graphql penetration-testing security
Language:Python 911
Ice3man543 / SubOver
A Powerful Subdomain Takeover Tool
subdomain-takeover subdomain subdomains bug-bounty bugbounty takeover-subdomain hostile hostile-subdomain-takeover takeover pentesting
Language:Go 904
ehrishirajsharma / SwiftnessX
A cross-platform note-taking & target-tracking app for penetration testers.
bug-bounty checklist electronjs penetration-testing security-tools
Language:JavaScript 878
alexbieber / Bug_Bounty_writeups
BUG BOUNTY WRITEUPS - OWASP TOP 10 🔴🔴🔴🔴✔
bug bug-bounty bug-bounty-hunters bug-bounty-hunting bug-bounty-recon bugbounty bugcrowd facebook google hackerone bug-bounty-poc bug-poc integriti alexbieber
Language:Python 805
bl4de / security-tools
My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.
bug-bounties bug-bounty bugbounty ctf ctf-tools hacking infosec itsecurity pentesting python scanner security-testing security-tools static-analysis webappsec
Language:Python 762
h4r5h1t / webcopilot
An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.
bug-bounty bugbounty enumeration recon reconnaissance
Language:Shell 757
offensive-docker
aaaguirrep / offensive-docker
Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.
bug-bounty bugbounty ctf-tools hacking hacking-tools htb pentest pentesting pentesting-tools
Language:Dockerfile 717