bughunting

There are 8 repositories under bughunting topic.

devanshbatham / Awesome-Bugbounty-Writeups
A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference
bugbounty bugbounty-blogs bugbounty-facebook bugbounty-writeups bugbounty-yahoo bugbountytips bughunting bughunting-methodology bughunting-writeups security-writeups
Language:Python 5320
devanshbatham / FavFreak
Making Favicon.ico based Recon Great again !
bugbounty osint reconnaissance recon hacking webappsec information-gathering bughunting web-security
Language:Python 1233
tenable / routeros
RouterOS Security Research Tooling and Proof of Concepts
poc routeros bughunting honeypot scanner exploits
Language:C++ 890
renatahodovan / grammarinator
ANTLR v4 grammar-based test generator
fuzzing fuzzer grammar-based-testing security bughunting antlr4 random-testing test-automation hacktoberfest
Language:Python 362
HightechSec / git-scanner
A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public
bash bughunting git-dumper hacking-tools pentest-tool pentesting security-audit
Language:Shell 351
seeu-inspace / easyg
Here I gather all the resources about hacking that I find interesting
automation bughunting penetration-testing smart-contract-security
Language:Ruby 268
thehackingsage / bughunter
Tools for BugHunting
information-gathering bughunting bugbounty penetration-testing tools mapping discovery exploitation poc reporting
Language:Python 237
danilabs / tools-tbhm
Tools of "The Bug Hunters Methodology V2 by @jhaddix"
bugbounty bughunting security security-tools
Language:Shell 198
renatahodovan / fuzzinator
Fuzzinator Random Testing Framework
fuzzing-framework fuzzing security random-testing bughunting test-automation hacktoberfest
Language:Python 191
h0tak88r / Sec-88
Cyber Security Notes, Methodology, Resources and Tips
bugbounty bughunting methodology penetration-testing security security-testing how-to-hack hackerone-reports writeups appsec bugbountytips websecurity
184
iamunixtz / Lazy-Hunter
LazyHunter is an automated reconnaissance tool designed for bug hunters, leveraging Shodan's InternetDB and CVEDB APIs
bughunter bughunting cves port recon scanner scanner-web cveshunter lazyhunter reconcves
Language:Python 175
justakazh / DockerExploit
Docker Remote API Scanner and Exploit
bugbounty bughunter bughunting cybersecurity docker pentesting scanner security tools 2375 exploit massive
Language:Python 171
devanshbatham / ArchiveFuzz
Hunt down the secrets from the WebArchives for Fun and Profit
bughunting email-enumeration osint security-tools subdomain-enumeration subdomain-scanner web-archive
Language:Python 167
R0X4R / D4rkXSS
A list of useful payloads and Bypass for Web Application Security and Bug Bounty/CTF
bugbounty ethical-hacking xss-vulnerability xss-exploitation xss-filter hacking javascript bughunter bughunting
166
Anon-Artist / R3C0Nizer
R3C0Nizer is the first ever CLI based menu-driven web application B-Tier recon framework.
recon pentesting webapplicationhacking bugbounty bugbounty-tool bughunting scanner-web scripting reconnaissance bash-scripting scans cli workflow
Language:Shell 154
xer0times / SQLi-Query-Tampering
SQLi Query Tampering extends and adds custom Payload Generator/Processor in Burp Suite's Intruder. This extension gives you the flexibility of manual testing with many powerful evasion techniques.
burp-extensions burpsuite burp-plugin burpsuite-pro sqlinjection sqli evasion bugbounty bug-bounty bughunting pentesting pentesting-tools payload-generator
Language:Python 154
YasserGersy / cazador_unr
Hacking tools
hacking hackerone bugbounty bughunting bugcrowd dns http information-gathering-tools subdomains tcp fuzzing owasp directory-lister poc pocgenerator csrf xss sqli rce automation
148
xer0times / BugBounty
Bug Bounty stuffs, payloads, scripts, profiles, tips and tricks, ...
bounty-hunters bug-bounty bugbounty bughunting bughunting-methodology burp-extensions burpsuite burpsuite-extender burpsuite-pro netsparker web-application zaproxy
Language:BitBake 147
joshkar / X-Recon
A utility for detecting webpage inputs and conducting XSS scans.
bugbounty bughunting hunt xss xss-scanner xssscan
Language:Python 142
devanshbatham / CertEagle
Weaponizing Live CT logs for automated monitoring of assets
reconnaissance bughunting subdomain-enumeration subdomain-finder cybersecurity osint ssl-certificates asset-monitoring subdomain-monitor
Language:Python 133
tamimhasan404 / FFUF-Tips-And-Tricks
Describe how to use ffuf different options with examples
bugbounty bughunting dirbrute ffuf penetration-testing recon tips tools
86
fergarrui / custom-bytecode-analyzer
Java bytecode analyzer customizable via JSON rules
analysis analyzer bughunting bytecode callgraph java json security static-analysis
Language:Java 74
tamimhasan404 / Chart-Of-Wordlist
Chart-Of-Wordlist helps to create your own custom wordlist. Also in one repository, you can find a list of awesome wordlist.
brute-force bugbounty bughunting linux penetration-testing recon wordlist
63
th3cyb3rhub / hackliner
HackLiners: CyberSec/BugHunting OneLiners
awesome-oneliner-bugbounty bash bash-script bugbounty bugbounty-tool bugbountyhunting bughunting bughunting-methodology cybersec-onliner cybersecurity hacktoberfest oneliner oneliner-commands oneliners sqli xss
56
gilts / wsee
A CDN Domain Fronting Tool or Websocket Discovery written in Python
bug-bounty bug-hunter bug-hunters bug-hunting bugbounty bugbounty-tool bugbounty-tools bughunting cdn cloudflare cloudflare-checker cloudfront cswsh domain-fronting freenet h2 h2c reverse-proxy websocket ws
Language:Python 54
DreyAnd / DeadDNS
DNS hijacking via dead records automation tool
bughunting bugbounty bugbounty-tool bugbountytips
Language:Python 52
cyinnove / subfalcon
subfalcon is a subdomain enumeration tool that allows you to discover and monitor subdomains for a given list of domains or a single domain. It fetches subdomains from various sources, checks for potential subdomain takeover vulnerabilities, saves findings to a SQLite database, and can notify updates via Discord.
appsec bughunting go golang penetration-testing-tools recon reconnaissance subdomains-enumeration webscrapping
Language:Go 44
hackarwiki / bughunting-ar
هذا المستودع هي محاولة منا لاثراء المحتوي العربي بخصوص البج بونتي ومايحتويه من انواع ثغرات الي تقنيات مختلفة الي مصادر متعددة
bugbounty bughunting arabic arabic-language cybersecurity penetration-testing
Language:HTML 38
iamunixtz / ParamWizard
ParamWizard is a powerful Python-based tool designed for extracting and identifying URLs with parameters from a specified website. It provides a comprehensive way to discover hidden parameters within a web application by crawling and analyzing the URLs of the domain.
bughunting bughunting-tools paramspider-alternative web weburl parameter-crwaling paramwizard web-urls-crwal weburls
Language:Python 33
nabasteh / Intro-To-Bug-Hunting
I provide educational resources in this repository for starting bug hunting from scratch. The content will be updated over time! Also, I would be happy if you introduce new resources to be added
bug-bounty bugbounty bughunting bughunting-methodology bughunting-tools bughunting-writeups js nodejs php python ruby tools vulnerability webapp webhacking
32
DarkCodeOrg / welcome-to-cybersecurity
this is an guide for people aspiring to enter the world of cybersecurity
pentesting hacking bughunting pentest-scripts pentest-books
25
OWASP-BLT / BLT-Flutter
The official OWASP BLT App repository/ Heist 'em bugs!
flutter bughunting owasp social hacktoberfest
Language:Dart 25
tamimhasan404 / Google-Dorks
Speed-up your hunting with google dorks🚀🚀
bughunting recon tips-and-tricks
22
Hunt3r0x / zWATCHER
zwatcher is a lightweight bash script for monitoring sub/domains or a list of sub/domains and javascript files. It compares HTTP status codes and content length to detect changes and notifies the user when any modifications occur. Easily keep track of your domains' health and security with zwatcher.
bugbounty bugbountytips bughunting cybersecurity hacking information-gathering javascript monitoring recon redteaming subdomains-enumeration tools
Language:Shell 20
Hashtag-AMIN / hashtag-Recon
Reconnaissance & Footprinting framework for BugHunters & RedTeamers
automation bash bash-script bugbounty bughunting python3 recon reconnaissance redteam bugbounty-tool penetration-testing web webapp
Language:Shell 18
moeinerfanian / writeup-finder
Writeup finder from medium or other
bugbounty bughunting hacker scripts writeups
Language:Python 18

bughunting

devanshbatham / Awesome-Bugbounty-Writeups

devanshbatham / FavFreak

tenable / routeros

renatahodovan / grammarinator

HightechSec / git-scanner

seeu-inspace / easyg

thehackingsage / bughunter

danilabs / tools-tbhm

renatahodovan / fuzzinator

h0tak88r / Sec-88

iamunixtz / Lazy-Hunter

justakazh / DockerExploit

devanshbatham / ArchiveFuzz

R0X4R / D4rkXSS

Anon-Artist / R3C0Nizer

xer0times / SQLi-Query-Tampering

YasserGersy / cazador_unr

xer0times / BugBounty

joshkar / X-Recon

devanshbatham / CertEagle

tamimhasan404 / FFUF-Tips-And-Tricks

fergarrui / custom-bytecode-analyzer

tamimhasan404 / Chart-Of-Wordlist

th3cyb3rhub / hackliner

gilts / wsee

DreyAnd / DeadDNS

cyinnove / subfalcon

hackarwiki / bughunting-ar

iamunixtz / ParamWizard

nabasteh / Intro-To-Bug-Hunting

DarkCodeOrg / welcome-to-cybersecurity

OWASP-BLT / BLT-Flutter

tamimhasan404 / Google-Dorks

Hunt3r0x / zWATCHER

Hashtag-AMIN / hashtag-Recon

moeinerfanian / writeup-finder