bug-bounty

There are 178 repositories under bug-bounty topic.

Hack-with-Github / Awesome-Hacking
A collection of various awesome lists for hackers, pentesters and security researchers
android awesome bug-bounty fuzzing hacking penetration-testing pentesting-windows reverse-engineering security
80523
maurosoria / dirsearch
Web path scanner
fuzzer fuzzing python security dirsearch hacking pentesting penetration-testing bug-bounty appsec wordlist hacking-tool infosec brute scanner bugbounty enumeration pentest-tool red-teaming redteam
Language:Python 11618
nahamsec / Resources-for-Beginner-Bug-Bounty-Hunters
A list of resources for those interested in getting started in bug bounties
bug-bounty-hunters hackers xss bug-bounty learn2hack hacking pentest web-security education ssrf bugbounty
10399
rengine
yogeshojha / rengine
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
security-tools osint recon recon-engine reconnaissance scanner scanner-web rengine information-gathering bugbounty hacking scanning pentesting bug-bounty infosec penetration-testing
Language:HTML 7224
HackTools
LasCC / HackTools
The all-in-one browser extension for offensive security professionals 🛠
reverse-shell hacking hack-tools chrome-extension firefox-addon hacktools payloads xss-payloads web-pentesters hack msfvenom metasploit hackbar cheatsheet purpleteam redteam bug-bounty hackingtools
Language:TypeScript 5620
reconftw
six2dez / reconftw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
bugbounty hacking recon pentest subdomain nuclei vulnerabilities scanner fuzzing osint penetration-testing pentesting reconnaissance dns pentest-tool security security-tools bug-bounty
Language:Shell 5476
osmedeus
j3ssie / osmedeus
A Workflow Engine for Offensive Security
scanning reconnaissance penetration-testing security-tools pentest-tool hacking-tool information-gathering hacking osint bugbounty pentesting golang security go bug-bounty attack-surface attack-surface-management
Language:Go 5191
pry0cc / axiom
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
hacking-vps bug-bounty tmux axiom masscan gowitness massdns ffuf gau dnsx shuffledns nuclei subfinder nmap httpx httprobe dnsgen meg
Language:Shell 3929
zan8in / afrog
A Security Tool for Bug Bounty, Pentest and Red Teaming.
vulnerability-scanner poc penetration-testing afrog vulnerability-scanning-tools bug-bounty pentest red-teaming
Language:Go 3218
skerkour / black-hat-rust
Applied offensive security with Rust - https://kerkour.com/black-hat-rust
rust security pentest pentesting offensive-security red-team audit beacon c2 bug-bounty bug-hunting wasm shellcodes scanner phishing trojan virus hacking infosec security-tools
Language:Rust 3108
dwisiswant0 / awesome-oneliner-bugbounty
A collection of awesome one-liner scripts especially for bug bounty tips.
bugbounty bugbountytips bash one-liners awesome bug-bounty liner-scripts recon hacktoberfest
2503
inonshk / 31-days-of-API-Security-Tips
This challenge is Inon Shkedy's 31 days API Security Tips.
pentest api-pentest bug-bounty api-security security bugbountytips bugbounty infosec
2075
tom0li / collection-document
Collection of quality safety articles. Awesome articles.
dns pentest list security sec hacking src bug-bounty fuzz xss research github waf java hacker redteam bounty-hunters web cloud awesome
2001
sn0int
kpcyrd / sn0int
Semi-automatic OSINT framework and package manager
osint intelligence osint-framework certificate-transparency rust security security-audit security-scanner investigation reconnaissance recon lua pentesting location bug-bounty
Language:Rust 1933
haccer / subjack
Subdomain Takeover tool written in Go
go golang hostile subdomain takeover subdomain-takeover bug-bounty pentesting infosec bugbounty security
Language:Go 1876
SubDomainizer
nsonaniya2010 / SubDomainizer
A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
python3 security-tools security-automation security subdomain-scanner subdomain-enumeration s3-bucket find-subdomains cloud-storage-services external-javascripts secrets secretfinder bugbounty find-secrets s3-buckets bug-bounty madeinindia
Language:Python 1684
wagiro / BurpBounty
Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
bugbounty burp-extensions burpsuite bug-bounty vulnerability-scanner vulnerability-detection
Language:Java 1643
danieldurnea / FBI-tools
🕵️ OSINT Tools for gathering information and actions forensics 🕵️
forensics osint cybersecurity hacking security-automation security-tools infosec awesome-list incident-response penetration-testing reconnaissance security awesome pentesting bug-bounty
1583
Cyber-Guy1 / API-SecurityEmpire
API Security Project aims to present unique attack & defense methods in API Security field
cybersecurity penetration-testing apisecurity information-security bugbounty api bug-bounty infosec cybersec tips bugbountytips
1311
dumpall
0xHJK / dumpall
一款信息泄漏利用工具，适用于.git/.svn/.DS_Store泄漏和目录列出
dumpall python3 pentesting security hacking tools scanner spider bug-bounty githack svn
Language:Python 1293
xalgord / Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes
bugbounty resources hacking owasp owasp-top-10 bug-bounty bugbountytips xalgord collection ethical-hacking
1223
metabigor
j3ssie / metabigor
OSINT tools and more but without API key
osint security pentesting infosec bugbounty ip-osint ip-range asn reconnaissance subdomain security-tools bugbounty-tools bugbountytips subdomains bug-bounty recon
Language:Go 1185
trickest / inventory
Asset inventory of over 800 public bug bounty programs.
security bugbounty bugbountytips infosec reconnaissance recon pentesting hacking security-tools red-team penetration-testing software-security pentest-tool osint osint-tool osint-resources threat-intelligence bug-bounty fuzzing
Language:Shell 1180
Uniswap / v3-periphery
🦄 🦄 🦄 Peripheral smart contracts for interacting with Uniswap v3
ethereum smart-contracts automated-market-maker periphery uniswap bug-bounty
Language:TypeScript 1145
0xPugal / One-Liners
A collection of one-liners for bug bounty hunting.
bugbounty onliner-scripts subdomain-enumeration bug-bounty enumeration
1126
payloadbox / xxe-injection-payload-list
🎯 XML External Entity (XXE) Injection Payload List
xxe xxe-injection xxe-payloads xxe-example xml websecurity websecurity-reference infosec bugbounty bug-bounty web-application-security cybersecurity cyber-security information-security xml-entity payload xxe-payload xxe-payload-list payloads hacking
1045
h4r5h1t / webcopilot
An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.
bug-bounty bugbounty enumeration recon reconnaissance
Language:Shell 1002
yassineaboukir / sublert
Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.
reconnaissance sublert penetration-testing pentest security certificate-transparency bug-bounty python monitoring-tool certificate-transparency-logs hacking information-gathering
Language:Python 982
taielab / awesome-hacking-lists
平常看到好的渗透hacking工具和多领域效率工具的集合
web hacking awesome-list hacker hacking-tool kali-scripts hacking-tools pentesting-tools pentest-scripts bounty-hunters bug-bounty bugbounty bugbounty-tool
970
nikitastupin / clairvoyance
Obtain GraphQL API schema even if the introspection is disabled
graphql security penetration-testing bug-bounty
Language:Python 965
diodb
disclose / diodb
Open-source vulnerability disclosure and bug bounty program database
security-research safe-harbor-framework responsible-disclosure vulnerability-disclosure disclosure-policy simplicity legal safety bug-bounty hackers bug-bounty-hunters data
Language:Python 962
Ice3man543 / SubOver
A Powerful Subdomain Takeover Tool
subdomain-takeover subdomain subdomains bug-bounty bugbounty takeover-subdomain hostile hostile-subdomain-takeover takeover pentesting
Language:Go 917
ehrishirajsharma / SwiftnessX
A cross-platform note-taking & target-tracking app for penetration testers.
electronjs security-tools penetration-testing bug-bounty checklist
Language:JavaScript 882
alexbieber / Bug_Bounty_writeups
BUG BOUNTY WRITEUPS - OWASP TOP 10 🔴🔴🔴🔴✔
bug bug-bounty bug-bounty-hunters bug-bounty-hunting bug-bounty-recon bugbounty bugcrowd facebook google hackerone bug-bounty-poc bug-poc integriti alexbieber
Language:Python 814
bl4de / security-tools
My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.
pentesting hacking python bugbounty itsecurity ctf ctf-tools infosec webappsec scanner security-tools security-testing bug-bounty bug-bounties static-analysis
Language:Python 772
DataSurgeon
Drew-Alleman / DataSurgeon
Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Security Numbers and a lot More From Text
cybersecurity incident-response rust search security-tools bug-bounty email hacking ip-address pentesting recon reconnaissance rust-lang file-search regex ctf-tools search-tools infosec osint windows
Language:Rust 724