bughunting

There are 7 repositories under bughunting topic.

devanshbatham / Awesome-Bugbounty-Writeups
A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference
bugbounty bugbountytips bughunting bugbounty-writeups security-writeups bugbounty-blogs bugbounty-yahoo bugbounty-facebook bughunting-methodology bughunting-writeups
Language:Python 4378
devanshbatham / FavFreak
Making Favicon.ico based Recon Great again !
bugbounty osint reconnaissance recon hacking webappsec information-gathering bughunting web-security
Language:Python 1073
tenable / routeros
RouterOS Security Research Tooling and Proof of Concepts
poc routeros bughunting honeypot scanner exploits
Language:C++ 844
redhuntlabs / BucketLoot
BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.
automation blackhat bounty bugbounty bughunting cli cloud cloud-security cybersecurity infosec infosectools osint pentesting recon reconnaissance s3 secret-scanning
Language:Go 337
HightechSec / git-scanner
A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public
hacking-tools bash git-dumper pentesting pentest-tool security-audit bughunting
Language:Shell 332
renatahodovan / grammarinator
ANTLR v4 grammar-based test generator
fuzzing fuzzer grammar-based-testing security bughunting antlr4 random-testing test-automation hacktoberfest
Language:Python 328
seeu-inspace / easyg
Here I gather all the resources about hacking that I find interesting
automation penetration-testing bughunting red-teaming
Language:Ruby 261
danilabs / tools-tbhm
Tools of "The Bug Hunters Methodology V2 by @jhaddix"
security-tools security bughunting bugbounty
Language:Shell 192
renatahodovan / fuzzinator
Fuzzinator Random Testing Framework
fuzzing-framework fuzzing security random-testing bughunting test-automation hacktoberfest
Language:Python 185
thehackingsage / bughunter
Tools for BugHunting
bugbounty bughunting discovery exploitation information-gathering mapping penetration-testing poc reporting tools
Language:Python 183
devanshbatham / ArchiveFuzz
Hunt down the secrets from the WebArchives for Fun and Profit
web-archive subdomain-scanner subdomain-enumeration osint email-enumeration bughunting security-tools
Language:Python 162
R0X4R / D4rkXSS
A list of useful payloads and Bypass for Web Application Security and Bug Bounty/CTF
bugbounty ethical-hacking xss-vulnerability xss-exploitation xss-filter hacking javascript bughunter bughunting
155
justakazh / DockerExploit
Docker Remote API Scanner and Exploit
bugbounty bughunter bughunting cybersecurity docker pentesting scanner security tools 2375 exploit massive
Language:Python 146
xer0times / SQLi-Query-Tampering
SQLi Query Tampering extends and adds custom Payload Generator/Processor in Burp Suite's Intruder. This extension gives you the flexibility of manual testing with many powerful evasion techniques.
burp-extensions burpsuite burp-plugin burpsuite-pro sqlinjection sqli evasion bugbounty bug-bounty bughunting pentesting pentesting-tools payload-generator
Language:Python 146
Anon-Artist / R3C0Nizer
R3C0Nizer is the first ever CLI based menu-driven web application B-Tier recon framework.
recon pentesting webapplicationhacking bugbounty bugbounty-tool bughunting scanner-web scripting reconnaissance bash-scripting scans cli workflow
Language:Shell 145
xer0times / BugBounty
Bug Bounty stuffs, payloads, scripts, profiles, tips and tricks, ...
bugbounty burpsuite burp-extensions bug-bounty web-application bughunting bughunting-methodology burpsuite-extender burpsuite-pro bounty-hunters netsparker zaproxy
Language:BitBake 145
YasserGersy / cazador_unr
Hacking tools
hacking hackerone bugbounty bughunting bugcrowd dns http information-gathering-tools subdomains tcp fuzzing owasp directory-lister poc pocgenerator csrf xss sqli rce automation
133
devanshbatham / CertEagle
Weaponizing Live CT logs for automated monitoring of assets
reconnaissance bughunting subdomain-enumeration subdomain-finder cybersecurity osint ssl-certificates asset-monitoring subdomain-monitor
Language:Python 131
h0tak88r / S8cN8tes
Cyber Security Notes, Methodology, Resources and Tips
bugbounty bughunting methodology penetration-testing security security-testing how-to-hack hackerone-reports writeups appsec bugbountytips websecurity
97
fergarrui / custom-bytecode-analyzer
Java bytecode analyzer customizable via JSON rules
bytecode analyzer java security bughunting json callgraph analysis static-analysis
Language:Java 69
tamimhasan404 / FFUF-Tips-And-Tricks
Describe how to use ffuf different options with examples
recon penetration-testing bugbounty bughunting tips tools ffuf dirbrute
62
tamimhasan404 / Chart-Of-Wordlist
Chart-Of-Wordlist helps to create your own custom wordlist. Also in one repository, you can find a list of awesome wordlist.
wordlist brute-force recon bugbounty bughunting penetration-testing linux
53
SQL-Injection
KhetaguriDimitri / SQL-Injection
SQL Injection / SQL инъекциа - Hacking and bypass
sql android audit blackhat bugbounty bughunting cyberattack cybersecurity dorks ethical-hacking ethical-hacking-tools hacking intelligence linux pentest redhat security sql-injection whitehat windows
51
gilts / wsee
A CDN Domain Fronting Tool or Websocket Discovery written in Python
cloudflare cloudflare-checker cloudfront domain-fronting websocket ws cdn cswsh bug-bounty bug-hunter bugbounty bugbounty-tool bughunting bug-hunters bug-hunting bugbounty-tools h2 h2c reverse-proxy freenet
Language:Python 50
DreyAnd / DeadDNS
DNS hijacking via dead records automation tool
bughunting bugbounty bugbounty-tool bugbountytips
Language:Python 49
thecyberworld / hackliner
Hackliner: Cybersec/Bughunting Oneliners
bash bash-script bugbounty bugbounty-tool bugbountyhunting bughunting bughunting-methodology cybersecurity oneliner oneliner-commands oneliners sqli xss awesome-oneliner-bugbounty cybersec-onliner
45
joshkar / X-Recon
A utility for detecting webpage inputs and conducting XSS scans.
bugbounty bughunting hunt xss xss-scanner xssscan
Language:Python 40
hackarwiki / bughunting-ar
هذا المستودع هي محاولة منا لاثراء المحتوي العربي بخصوص البج بونتي ومايحتويه من انواع ثغرات الي تقنيات مختلفة الي مصادر متعددة
bugbounty bughunting arabic arabic-language cybersecurity penetration-testing
Language:HTML 38
h0tak88r / subfalcon
subfalcon is a subdomain enumeration tool that allows you to discover and monitor subdomains for a given list of domains. It fetches subdomains from various sources [crtsh, hackertargetapi, anubis, alienvault, rappiddns, urlscan ] , saves them to a SQLite database, and can notify updates via Discord.
appsec bughunting penetration-testing-tools recon reconnaissance subdomains-enumeration webscrapping go golang
Language:Go 33
nabasteh / Intro-To-Bug-Hunting
I provide educational resources in this repository for starting bug hunting from scratch. The content will be updated over time! Also, I would be happy if you introduce new resources to be added
bug-bounty bugbounty bughunting bughunting-methodology bughunting-tools bughunting-writeups js nodejs php python ruby tools vulnerability webapp webhacking
32
OWASP-BLT / BLT-Flutter
The official OWASP BLT App repository/ Heist 'em bugs!
flutter bughunting owasp social hacktoberfest
Language:Dart 22
tamimhasan404 / Google-Dorks
Speed-up your hunting with google dorks🚀🚀
bughunting tips-and-tricks recon
22
gokulapap / bugdork
An Bug Hunters tool to find many Vulnerabilities using Google dorks
vulnerability bughunting google-dorks python3
Language:Python 18
knassar702 / pmg
Extract parameters/paths from urls
bughunting bugbounty bugbounty-tool regex python security
Language:Python 18
DarkCodeOrg / welcome-to-cybersecurity
this is an guide for people aspiring to enter the world of cybersecurity
pentesting hacking bughunting pentest-scripts pentest-books
17
Hunt3r0x / zWATCHER
"zwatcher is a lightweight bash script for monitoring sub/domains or a list of sub/domains and javascript files. It compares HTTP status codes and content length to detect changes and notifies the user when any modifications occur. Easily keep track of your domains' health and security with zwatcher."
bugbounty bugbountytips bughunting cybersecurity hacking information-gathering javascript monitoring recon redteaming subdomains-enumeration tools
Language:Shell 17