My Main App Hacking CheckList
☆34Jun 20, 2026Updated 4 months ago
Alternatives and similar repositories for Main-App-Hacking-CheckList
Users that are interested in Main-App-Hacking-CheckList are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A simple recon pipeline☆39Sep 24, 2026Updated 3 weeks ago
- Burp Suite extension for cross-identity & cross-tenant access-control testing — BAC, IDOR, BOLA, and privilege escalation.☆61Jul 12, 2026Updated 3 months ago
- Stealth hybrid URL mapper☆52Updated this week
- 0xJS is an AI-powered JavaScript Security Tool☆68Apr 16, 2026Updated 6 months ago
- Pentest Coverage Tracker is a Burp Suite extension that helps penetration testers monitor testing coverage in real time. It logs discover…☆47Mar 16, 2026Updated 7 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Here's an updated Google Dorking list for 2025 Bug Bounty Hunting, incorporating new patterns and, the latest trends.☆25Apr 26, 2025Updated last year
- ☆16Jun 14, 2026Updated 4 months ago
- ☆77May 5, 2025Updated last year
- Burp Suite extension to find hardcoded secrets & hidden endpoints in JavaScript. 150+ detection patterns, active JS fetch, low-noise fals…☆97Sep 10, 2026Updated last month
- TokenTwin Checker — Dual Token BAC/IDOR Tester for Burp Suite☆98Aug 24, 2026Updated last month
- A proof-of-concept PDF file designed for authorized security testing of PDF upload functionality and PDF viewer behavior, including XSS a…☆77Aug 28, 2026Updated last month
- A curated collection of my security research and bug bounty writeups, documenting real-world vulnerabilities, exploitation methods☆27Oct 16, 2026Updated last week
- BountyLens MCP server — connect Claude Code to your Hunter Tracker☆65Jun 22, 2026Updated 4 months ago
- Fuzzing Infrastructure using afl++ for coverage guided fuzzing including triaging and live dashboard.☆50Jul 23, 2026Updated 3 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆13Mar 12, 2022Updated 4 years ago
- A tool for detecting subdomain takeover vulnerabilities by checking DNS records☆35May 28, 2026Updated 4 months ago
- Guided installation and service management for independent BugTraceAI modules, with local and Docker setups.☆35Oct 14, 2026Updated last week
- API-Pentesting-Checklist☆32Feb 27, 2023Updated 3 years ago
- xnew is a fast, low-memory CLI that appends only unique lines to files. Built in Go for large datasets, it streams input efficiently and …☆30May 23, 2026Updated 5 months ago
- Burp Suite extension — passively detects secrets, API keys, credentials, JWTs & PII in HTTP traffic. 160+ detection rules, bulk scan, ent…☆59Aug 24, 2026Updated last month
- SSRFHunter☆18Jan 17, 2026Updated 9 months ago
- Replay any request as another user to find IDOR/BOLA/BFLA, right in the browser.☆29Jun 16, 2026Updated 4 months ago
- A python-based vulnerability scanner designed to identify open redirect flaws in website applications.☆26Mar 15, 2026Updated 7 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A Python tool to resolve domains to IPs, fetch related CVEs, and display open ports☆17Nov 21, 2025Updated 11 months ago
- How To approach recon on real targets — from passive enumeration to origin IP discovery. Covers tools, automation, and the logic behind e…☆431Jul 5, 2026Updated 3 months ago
- ☆410Oct 10, 2026Updated last week
- This website is dedicated to Awesome.☆13Apr 23, 2020Updated 6 years ago
- ☆97Oct 10, 2026Updated last week
- A Chrome extension that watches your HackerOne reports and alerts you when their status changes. Its main reason to exist is internal act…☆15Jul 3, 2026Updated 3 months ago
- Here you can find mostly all disclosed h1 reports☆21Apr 4, 2019Updated 7 years ago
- This repository discusses the subdomain takeover vulnerability and lists of services which are vulnerable to it. It also provides informa…☆13Dec 31, 2023Updated 2 years ago
- Personal Web Application Pentesting Methodology built during my cybersecurity learning journey. Covers reconnaissance, scanning, fuzzing,…☆59Jul 24, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Monitor your targets and hunt fresh assets in real time.☆193Feb 23, 2026Updated 8 months ago
- Collection of scripts and tools used during bug bounty work. This will be the location of my automation scripts created for my own person…☆156Dec 18, 2025Updated 10 months ago
- take a list of resolved subdomains and output any corresponding CNAMES en masse.☆18Sep 29, 2026Updated 3 weeks ago
- High-assurance, artifact-agnostic prompt for authorized security labs, exploit-chain research, PoC validation, and evidence-led reporting…☆45Aug 1, 2026Updated 2 months ago
- Chrome extension to extract domains from Google search results - by ofjaaah☆20Dec 24, 2025Updated 9 months ago
- ☆50Aug 17, 2026Updated 2 months ago
- ☆11Jun 9, 2023Updated 3 years ago