bug-bounty

There are 187 repositories under bug-bounty topic.

Hack-with-Github / Awesome-Hacking
A collection of various awesome lists for hackers, pentesters and security researchers
hacking security bug-bounty awesome android fuzzing penetration-testing pentesting-windows reverse-engineering
86839
maurosoria / dirsearch
Web path scanner
appsec brute bug-bounty bugbounty dirsearch enumeration fuzzer fuzzing hacking hacking-tool infosec penetration-testing pentest-tool pentesting python red-teaming redteam scanner security wordlist
Language:Python 12343
nahamsec / Resources-for-Beginner-Bug-Bounty-Hunters
A list of resources for those interested in getting started in bug bounties
bug-bounty bug-bounty-hunters bugbounty education hackers hacking learn2hack pentest ssrf web-security xss
10838
rengine
yogeshojha / rengine
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
security-tools osint recon recon-engine reconnaissance scanner scanner-web rengine information-gathering bugbounty hacking scanning pentesting bug-bounty infosec penetration-testing
Language:HTML 7594
HackTools
LasCC / HackTools
The all-in-one browser extension for offensive security professionals 🛠
reverse-shell hacking hack-tools chrome-extension firefox-addon hacktools payloads xss-payloads web-pentesters hack msfvenom metasploit hackbar cheatsheet purpleteam redteam bug-bounty hackingtools
Language:TypeScript 5869
reconftw
six2dez / reconftw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
bug-bounty bugbounty dns fuzzing hacking nuclei osint penetration-testing pentest pentest-tool pentesting recon reconnaissance scanner security security-tools subdomain vulnerabilities
Language:Shell 5817
osmedeus
j3ssie / osmedeus
A Workflow Engine for Offensive Security
scanning reconnaissance penetration-testing security-tools pentest-tool hacking-tool information-gathering hacking osint bugbounty pentesting golang security go bug-bounty attack-surface attack-surface-management
Language:Go 5398
pry0cc / axiom
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
hacking-vps bug-bounty tmux axiom masscan gowitness massdns ffuf gau dnsx shuffledns nuclei subfinder nmap httpx httprobe dnsgen meg
Language:Shell 4081
skerkour / black-hat-rust
Applied offensive security with Rust - https://kerkour.com/black-hat-rust
rust security pentest pentesting offensive-security red-team audit beacon c2 bug-bounty bug-hunting wasm shellcodes scanner phishing trojan virus hacking infosec security-tools
Language:Rust 3906
zan8in / afrog
A Security Tool for Bug Bounty, Pentest and Red Teaming.
vulnerability-scanner poc penetration-testing afrog vulnerability-scanning-tools bug-bounty pentest red-teaming
Language:Go 3555
dwisiswant0 / awesome-oneliner-bugbounty
A collection of awesome one-liner scripts especially for bug bounty tips.
awesome bash bug-bounty bugbounty bugbountytips hacktoberfest liner-scripts one-liners recon
2727
inonshk / 31-days-of-API-Security-Tips
This challenge is Inon Shkedy's 31 days API Security Tips.
pentest api-pentest bug-bounty api-security security bugbountytips bugbounty infosec
2109
sn0int
kpcyrd / sn0int
Semi-automatic OSINT framework and package manager
osint intelligence osint-framework certificate-transparency rust security security-audit security-scanner investigation reconnaissance recon lua pentesting location bug-bounty
Language:Rust 2094
tom0li / collection-document
Collection of quality safety articles. Awesome articles.
awesome bounty-hunters bug-bounty cloud dns fuzz github hacker hacking java list pentest redteam research sec security src waf web xss
2024
haccer / subjack
Subdomain Takeover tool written in Go
bug-bounty bugbounty go golang hostile infosec pentesting security subdomain subdomain-takeover takeover
Language:Go 1921
danieldurnea / FBI-tools
🕵️ OSINT Tools for gathering information and actions forensics 🕵️
forensics osint cybersecurity hacking security-automation security-tools infosec awesome-list incident-response penetration-testing reconnaissance security awesome pentesting bug-bounty
1767
SubDomainizer
nsonaniya2010 / SubDomainizer
A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
bug-bounty bugbounty cloud-storage-services external-javascripts find-secrets find-subdomains madeinindia python3 s3-bucket s3-buckets secretfinder secrets security security-automation security-tools subdomain-enumeration subdomain-scanner
Language:Python 1749
wagiro / BurpBounty
Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
bugbounty burp-extensions burpsuite bug-bounty vulnerability-scanner vulnerability-detection
Language:Java 1686
dumpall
0xHJK / dumpall
一款信息泄漏利用工具，适用于.git/.svn/.DS_Store泄漏和目录列出
dumpall python3 pentesting security hacking tools scanner spider bug-bounty githack svn
Language:Python 1404
Cyber-Guy1 / API-SecurityEmpire
API Security Project aims to present unique attack & defense methods in API Security field
cybersecurity penetration-testing apisecurity information-security bugbounty api bug-bounty infosec cybersec tips bugbountytips
1364
xalgord / Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes
A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying and exploiting vulnerabilities.
bugbounty resources hacking owasp owasp-top-10 bug-bounty bugbountytips xalgord collection ethical-hacking
1354
trickest / inventory
Asset inventory of over 800 public bug bounty programs.
security bugbounty bugbountytips infosec reconnaissance recon pentesting hacking security-tools red-team penetration-testing software-security pentest-tool osint osint-tool osint-resources threat-intelligence bug-bounty fuzzing
Language:Shell 1283
metabigor
j3ssie / metabigor
OSINT tools and more but without API key
asn bug-bounty bugbounty bugbounty-tools bugbountytips infosec ip-osint ip-range osint pentesting recon reconnaissance security security-tools subdomain subdomains
Language:Go 1278
0xPugal / One-Liners
A collection of one-liners for bug bounty hunting.
bugbounty onliner-scripts subdomain-enumeration bug-bounty enumeration
1249
Uniswap / v3-periphery
🦄 🦄 🦄 Peripheral smart contracts for interacting with Uniswap v3
ethereum smart-contracts automated-market-maker periphery uniswap bug-bounty
Language:TypeScript 1216
payloadbox / xxe-injection-payload-list
🎯 XML External Entity (XXE) Injection Payload List
xxe xxe-injection xxe-payloads xxe-example xml websecurity websecurity-reference infosec bugbounty bug-bounty web-application-security cybersecurity cyber-security information-security xml-entity payload xxe-payload xxe-payload-list payloads hacking
1110
nikitastupin / clairvoyance
Obtain GraphQL API schema even if the introspection is disabled
bug-bounty graphql penetration-testing security
Language:Python 1081
h4r5h1t / webcopilot
An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.
bug-bounty bugbounty enumeration recon reconnaissance
Language:Shell 1068
taielab / awesome-hacking-lists
平常看到好的渗透hacking工具和多领域效率工具的集合
awesome-list bounty-hunters bug-bounty bugbounty bugbounty-tool hacker hacking hacking-tool hacking-tools kali-scripts pentest-scripts pentesting-tools web
1023
yassineaboukir / sublert
Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.
reconnaissance sublert penetration-testing pentest security certificate-transparency bug-bounty python monitoring-tool certificate-transparency-logs hacking information-gathering
Language:Python 991
diodb
disclose / diodb
Open-source vulnerability disclosure and bug bounty program database
security-research safe-harbor-framework responsible-disclosure vulnerability-disclosure disclosure-policy simplicity legal safety bug-bounty hackers bug-bounty-hunters data
Language:Python 989
Ice3man543 / SubOver
A Powerful Subdomain Takeover Tool
subdomain-takeover subdomain subdomains bug-bounty bugbounty takeover-subdomain hostile hostile-subdomain-takeover takeover pentesting
Language:Go 937
ehrishirajsharma / SwiftnessX
A cross-platform note-taking & target-tracking app for penetration testers.
electronjs security-tools penetration-testing bug-bounty checklist
Language:JavaScript 892
bl4de / security-tools
My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.
pentesting hacking python bugbounty itsecurity ctf ctf-tools infosec webappsec scanner security-tools security-testing bug-bounty bug-bounties static-analysis
Language:Python 866
alexbieber / Bug_Bounty_writeups
BUG BOUNTY WRITEUPS - OWASP TOP 10 🔴🔴🔴🔴✔
bug bug-bounty bug-bounty-hunters bug-bounty-hunting bug-bounty-recon bugbounty bugcrowd facebook google hackerone bug-bounty-poc bug-poc integriti alexbieber
Language:Python 828
DataSurgeon
Drew-Alleman / DataSurgeon
Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Security Numbers and a lot More From Text
cybersecurity incident-response rust search security-tools bug-bounty email hacking ip-address pentesting recon reconnaissance rust-lang file-search regex ctf-tools search-tools infosec osint windows
Language:Rust 760