A collection of various awesome lists for hackers, pentesters and security researchers
-
Updated
Dec 31, 2019
#
bug-bounty
Here are 51 public repositories matching this topic...
Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
-
Updated
Dec 31, 2019 - Go
Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
-
Updated
Dec 31, 2019 - Java
kpcyrd
commented
Aug 8, 2019
There's currently no way to learn about newly featured modules besides running quickstart occisionally. We could include the list of featured modules in the update check response.
Open
Fix some structs
Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.
-
Updated
Dec 31, 2019 - Python
GlitchWitchSec
commented
Jun 15, 2019
Operating System: Ubuntu 18.04
Describe the bug
When navigating to the payloads section from a sub-section of the targets page, the sub-section stays highlighted and is no longer clickable.
To Reproduce
Steps to reproduce the behavior:
- Go to a sub-section of a target.
- Click on Payloads
- Click on the same subsection you just left.
- Section does not change. Stays on pay
1
Collection of small security tools created mostly in Python. CTFs, pentests and so on
-
Updated
Dec 30, 2019 - Python
A web crawler (for bug hunting) that gathers more than you can imagine.
-
Updated
Dec 20, 2019 - Python
Keye is a reconnaissance tool that was written in Python with SQLite3 integrated. After adding a single URL, or a list of URLs, it will make a request to these URLs and try to detect changes based on their response's body length.
-
Updated
Dec 29, 2019 - Python
A permutation generation tool written in golang
-
Updated
Dec 21, 2019 - Go
🎯 XML External Entity (XXE) Injection Payload List
-
Updated
Dec 20, 2019
Automatic finder for subdomains vulnerable to takeover. Written in Go, based on @haccer's subjack.
-
Updated
Dec 23, 2019 - Go
This is a simple tool to automate google hacking when doing web penetration testing or bug hunting.
-
Updated
Dec 3, 2019 - Python
Simple Server Side Request Forgery services enumeration tool.
-
Updated
Dec 20, 2019 - Ruby
My collection of custom scripts, plugins, exploits and others small things
-
Updated
Dec 20, 2019 - Perl
❄️ Research project for SubFinder core API V2
-
Updated
Nov 18, 2019 - Go
A python script designed to check if the website if vulnerable of clickjacking and create a poc
-
Updated
Dec 30, 2019 - Python
A comprehensive curated list of available Blockchain Bug Bounty Programs.
-
Updated
Dec 13, 2019
Improve this page
Add a description, image, and links to the bug-bounty topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the bug-bounty topic, visit your repo's landing page and select "manage topics."
Dirsearch has an option that will force the use of hostname and by default it search by IP. I think it should be the opposite. It should search by hostname by default and an option could be used to search by IP.
This behavior is not expected by user that briefly read the help and this may result in not finding files or directories on server using vhost.