My Main App Hacking CheckList
☆35Jun 20, 2026Updated 4 months ago
Alternatives and similar repositories for Main-App-Hacking-CheckList
Users that are interested in Main-App-Hacking-CheckList are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A simple recon pipeline☆40Sep 24, 2026Updated last month
- Burp Suite extension for cross-identity & cross-tenant access-control testing — BAC, IDOR, BOLA, and privilege escalation.☆63Jul 12, 2026Updated 4 months ago
- TokenTwin Checker — Dual Token BAC/IDOR Tester for Burp Suite☆99Aug 24, 2026Updated 2 months ago
- 0xJS is an AI-powered JavaScript Security Tool☆68Apr 16, 2026Updated 6 months ago
- ☆78May 5, 2025Updated last year
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆16Jun 14, 2026Updated 4 months ago
- Stealth hybrid URL mapper☆60Oct 21, 2026Updated 3 weeks ago
- Google Gemini API key discovery and security scanning tool.☆43Nov 2, 2026Updated last week
- BountyLens MCP server — connect Claude Code to your Hunter Tracker☆65Jun 22, 2026Updated 4 months ago
- Burp Suite extension to find hardcoded secrets & hidden endpoints in JavaScript. 150+ detection patterns, active JS fetch, low-noise fals…☆98Sep 10, 2026Updated 2 months ago
- A curated collection of my security research and bug bounty writeups, documenting real-world vulnerabilities, exploitation methods☆27Oct 16, 2026Updated 3 weeks ago
- A tool for detecting subdomain takeover vulnerabilities by checking DNS records☆37May 28, 2026Updated 5 months ago
- Here's an updated Google Dorking list for 2025 Bug Bounty Hunting, incorporating new patterns and, the latest trends.☆26Apr 26, 2025Updated last year
- ☆50Feb 27, 2026Updated 8 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- SSRFHunter☆18Jan 17, 2026Updated 9 months ago
- Is an advanced based security scanner designed to discover sensitive information like API keys, passwords, tokens, and other secrets expo…☆10Updated this week
- xnew is a fast, low-memory CLI that appends only unique lines to files. Built in Go for large datasets, it streams input efficiently and …☆30May 23, 2026Updated 5 months ago
- ☆13Mar 12, 2022Updated 4 years ago
- A python-based vulnerability scanner designed to identify open redirect flaws in website applications.☆26Mar 15, 2026Updated 7 months ago
- Replay any request as another user to find IDOR/BOLA/BFLA, right in the browser.☆30Jun 16, 2026Updated 4 months ago
- API-Pentesting-Checklist☆33Feb 27, 2023Updated 3 years ago
- ☆14Jul 18, 2026Updated 3 months ago
- Sectiv is a skill-driven AI security review for Burp Suite. Pick captured traffic and a review goal (IDOR, XSS, SQLi, SSRF…), and ge…☆112Nov 5, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Fuzzing Infrastructure using afl++ for coverage guided fuzzing including triaging and live dashboard.☆50Jul 23, 2026Updated 3 months ago
- ☆51Aug 17, 2026Updated 2 months ago
- ☆98Oct 17, 2026Updated 3 weeks ago
- A Chrome extension that watches your HackerOne reports and alerts you when their status changes. Its main reason to exist is internal act…☆15Jul 3, 2026Updated 4 months ago
- This repository discusses the subdomain takeover vulnerability and lists of services which are vulnerable to it. It also provides informa…☆14Dec 31, 2023Updated 2 years ago
- This website is dedicated to Awesome.☆13Apr 23, 2020Updated 6 years ago
- Pentest Coverage Tracker is a Burp Suite extension that helps penetration testers monitor testing coverage in real time. It logs discover…☆49Mar 16, 2026Updated 7 months ago
- Guided installation and service management for independent BugTraceAI modules, with local and Docker setups.☆34Oct 31, 2026Updated last week
- A Python tool to resolve domains to IPs, fetch related CVEs, and display open ports☆17Nov 21, 2025Updated 11 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆412Oct 10, 2026Updated last month
- take a list of resolved subdomains and output any corresponding CNAMES en masse.☆17Sep 29, 2026Updated last month
- Monitor your targets and hunt fresh assets in real time.☆193Feb 23, 2026Updated 8 months ago
- Burp Suite extension — passively detects secrets, API keys, credentials, JWTs & PII in HTTP traffic. 160+ detection rules, bulk scan, ent…☆64Updated this week
- http://arcanum-sec.github.io/hyc/ - Hacking Your Career — a roadmap and verified resource library for becoming the strongest cybersecurit…☆22Sep 16, 2026Updated last month
- Collection of documentation, tools, and tips related to vulnerability research.☆284Updated this week
- How To approach recon on real targets — from passive enumeration to origin IP discovery. Covers tools, automation, and the logic behind e…☆442Jul 5, 2026Updated 4 months ago
Are these results useful?