bughunting

There are 7 repositories under bughunting topic.

devanshbatham / Awesome-Bugbounty-Writeups
A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference
bugbounty bugbounty-blogs bugbounty-facebook bugbounty-writeups bugbounty-yahoo bugbountytips bughunting bughunting-methodology bughunting-writeups security-writeups
Language:Python 4415
devanshbatham / FavFreak
Making Favicon.ico based Recon Great again !
bugbounty bughunting hacking information-gathering osint recon reconnaissance web-security webappsec
Language:Python 1074
tenable / routeros
RouterOS Security Research Tooling and Proof of Concepts
bughunting exploits honeypot poc routeros scanner
Language:C++ 847
redhuntlabs / BucketLoot
BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.
automation blackhat bounty bugbounty bughunting cli cloud cloud-security cybersecurity infosec infosectools osint pentesting recon reconnaissance s3 secret-scanning
Language:Go 345
HightechSec / git-scanner
A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public
hacking-tools bash git-dumper pentesting pentest-tool security-audit bughunting
Language:Shell 331
renatahodovan / grammarinator
ANTLR v4 grammar-based test generator
antlr4 bughunting fuzzer fuzzing grammar-based-testing hacktoberfest random-testing security test-automation
Language:Python 329
seeu-inspace / easyg
Here I gather all the resources about hacking that I find interesting
automation penetration-testing bughunting red-teaming
Language:Ruby 261
danilabs / tools-tbhm
Tools of "The Bug Hunters Methodology V2 by @jhaddix"
security-tools security bughunting bugbounty
Language:Shell 192
renatahodovan / fuzzinator
Fuzzinator Random Testing Framework
fuzzing-framework fuzzing security random-testing bughunting test-automation hacktoberfest
Language:Python 186
thehackingsage / bughunter
Tools for BugHunting
information-gathering bughunting bugbounty penetration-testing tools mapping discovery exploitation poc reporting
Language:Python 186
devanshbatham / ArchiveFuzz
Hunt down the secrets from the WebArchives for Fun and Profit
web-archive subdomain-scanner subdomain-enumeration osint email-enumeration bughunting security-tools
Language:Python 162
R0X4R / D4rkXSS
A list of useful payloads and Bypass for Web Application Security and Bug Bounty/CTF
bugbounty ethical-hacking xss-vulnerability xss-exploitation xss-filter hacking javascript bughunter bughunting
158
justakazh / DockerExploit
Docker Remote API Scanner and Exploit
2375 bugbounty bughunter bughunting cybersecurity docker exploit massive pentesting scanner security tools
Language:Python 147
xer0times / SQLi-Query-Tampering
SQLi Query Tampering extends and adds custom Payload Generator/Processor in Burp Suite's Intruder. This extension gives you the flexibility of manual testing with many powerful evasion techniques.
burp-extensions burpsuite burp-plugin burpsuite-pro sqlinjection sqli evasion bugbounty bug-bounty bughunting pentesting pentesting-tools payload-generator
Language:Python 147
Anon-Artist / R3C0Nizer
R3C0Nizer is the first ever CLI based menu-driven web application B-Tier recon framework.
bash-scripting bugbounty bugbounty-tool bughunting cli pentesting recon reconnaissance scanner-web scans scripting webapplicationhacking workflow
Language:Shell 145
xer0times / BugBounty
Bug Bounty stuffs, payloads, scripts, profiles, tips and tricks, ...
bugbounty burpsuite burp-extensions bug-bounty web-application bughunting bughunting-methodology burpsuite-extender burpsuite-pro bounty-hunters netsparker zaproxy
Language:BitBake 145
YasserGersy / cazador_unr
Hacking tools
hacking hackerone bugbounty bughunting bugcrowd dns http information-gathering-tools subdomains tcp fuzzing owasp directory-lister poc pocgenerator csrf xss sqli rce automation
134
devanshbatham / CertEagle
Weaponizing Live CT logs for automated monitoring of assets
reconnaissance bughunting subdomain-enumeration subdomain-finder cybersecurity osint ssl-certificates asset-monitoring subdomain-monitor
Language:Python 131
h0tak88r / S8cN8tes
Cyber Security Notes, Methodology, Resources and Tips
bugbounty bughunting methodology penetration-testing security security-testing how-to-hack hackerone-reports writeups appsec bugbountytips websecurity
99
fergarrui / custom-bytecode-analyzer
Java bytecode analyzer customizable via JSON rules
bytecode analyzer java security bughunting json callgraph analysis static-analysis
Language:Java 69
tamimhasan404 / FFUF-Tips-And-Tricks
Describe how to use ffuf different options with examples
recon penetration-testing bugbounty bughunting tips tools ffuf dirbrute
62
tamimhasan404 / Chart-Of-Wordlist
Chart-Of-Wordlist helps to create your own custom wordlist. Also in one repository, you can find a list of awesome wordlist.
brute-force bugbounty bughunting linux penetration-testing recon wordlist
54
gilts / wsee
A CDN Domain Fronting Tool or Websocket Discovery written in Python
cloudflare cloudflare-checker cloudfront domain-fronting websocket ws cdn cswsh bug-bounty bug-hunter bugbounty bugbounty-tool bughunting bug-hunters bug-hunting bugbounty-tools h2 h2c reverse-proxy freenet
Language:Python 51
DreyAnd / DeadDNS
DNS hijacking via dead records automation tool
bughunting bugbounty bugbounty-tool bugbountytips
Language:Python 49
thecyberworld / hackliner
Hackliner: Cybersec/Bughunting Oneliners
bash bash-script bugbounty bugbounty-tool bugbountyhunting bughunting bughunting-methodology cybersecurity oneliner oneliner-commands oneliners sqli xss awesome-oneliner-bugbounty cybersec-onliner
45
joshkar / X-Recon
A utility for detecting webpage inputs and conducting XSS scans.
bugbounty bughunting hunt xss xss-scanner xssscan
Language:Python 42
hackarwiki / bughunting-ar
هذا المستودع هي محاولة منا لاثراء المحتوي العربي بخصوص البج بونتي ومايحتويه من انواع ثغرات الي تقنيات مختلفة الي مصادر متعددة
bugbounty bughunting arabic arabic-language cybersecurity penetration-testing
Language:HTML 38
h0tak88r / subfalcon
subfalcon is a subdomain enumeration tool that allows you to discover and monitor subdomains for a given list of domains. It fetches subdomains from various sources [crtsh, hackertargetapi, anubis, alienvault, rappiddns, urlscan ] , saves them to a SQLite database, and can notify updates via Discord.
appsec bughunting penetration-testing-tools recon reconnaissance subdomains-enumeration webscrapping go golang
Language:Go 34
nabasteh / Intro-To-Bug-Hunting
I provide educational resources in this repository for starting bug hunting from scratch. The content will be updated over time! Also, I would be happy if you introduce new resources to be added
bug-bounty bugbounty bughunting bughunting-methodology bughunting-tools bughunting-writeups js nodejs php python ruby tools vulnerability webapp webhacking
32
tamimhasan404 / Google-Dorks
Speed-up your hunting with google dorks🚀🚀
bughunting tips-and-tricks recon
22
OWASP-BLT / BLT-Flutter
The official OWASP BLT App repository/ Heist 'em bugs!
flutter bughunting owasp social hacktoberfest
Language:Dart 21
gokulapap / bugdork
An Bug Hunters tool to find many Vulnerabilities using Google dorks
vulnerability bughunting google-dorks python3
Language:Python 18
knassar702 / pmg
Extract parameters/paths from urls
bughunting bugbounty bugbounty-tool regex python security
Language:Python 18
DarkCodeOrg / welcome-to-cybersecurity
this is an guide for people aspiring to enter the world of cybersecurity
pentesting hacking bughunting pentest-scripts pentest-books
17
sweetchipsw / Sweetmon_legacy
'SWEETMON' is a fuzzer monitoring service based python3 + django. User can check their fuzzers and crashes on the web. It can reduce repetitive work for fuzz testers. This is a legacy sweetmon. The new sweetmon is now being developed https://github.com/sweetchipsw/sweetmon2
bughunting exploit fuzzer fuzzing sweetchip sweetmon vulnerability
Language:CSS 17
Hunt3r0x / zWATCHER
"zwatcher is a lightweight bash script for monitoring sub/domains or a list of sub/domains and javascript files. It compares HTTP status codes and content length to detect changes and notifies the user when any modifications occur. Easily keep track of your domains' health and security with zwatcher."
bugbounty bugbountytips bughunting cybersecurity hacking information-gathering javascript monitoring recon redteaming subdomains-enumeration tools
Language:Shell 16

bughunting

devanshbatham / Awesome-Bugbounty-Writeups

devanshbatham / FavFreak

tenable / routeros

redhuntlabs / BucketLoot

HightechSec / git-scanner

renatahodovan / grammarinator

seeu-inspace / easyg

danilabs / tools-tbhm

renatahodovan / fuzzinator

thehackingsage / bughunter

devanshbatham / ArchiveFuzz

R0X4R / D4rkXSS

justakazh / DockerExploit

xer0times / SQLi-Query-Tampering

Anon-Artist / R3C0Nizer

xer0times / BugBounty

YasserGersy / cazador_unr

devanshbatham / CertEagle

h0tak88r / S8cN8tes

fergarrui / custom-bytecode-analyzer

tamimhasan404 / FFUF-Tips-And-Tricks

tamimhasan404 / Chart-Of-Wordlist

gilts / wsee

DreyAnd / DeadDNS

thecyberworld / hackliner

joshkar / X-Recon

hackarwiki / bughunting-ar

h0tak88r / subfalcon

nabasteh / Intro-To-Bug-Hunting

tamimhasan404 / Google-Dorks

OWASP-BLT / BLT-Flutter

gokulapap / bugdork

knassar702 / pmg

DarkCodeOrg / welcome-to-cybersecurity

sweetchipsw / Sweetmon_legacy

Hunt3r0x / zWATCHER