This information provides helpful information to make it easier to discover new attack surface on HackerOne.com.
☆69Jan 24, 2019Updated 7 years ago
Alternatives and similar repositories for helpful-recon-data
Users that are interested in helpful-recon-data are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.☆15Nov 23, 2018Updated 7 years ago
- web cache poison - Top 1 web hacking technique of 2019☆25Feb 24, 2020Updated 6 years ago
- List HackerOne private program assets☆157Jun 24, 2021Updated 5 years ago
- ☆27Feb 16, 2021Updated 5 years ago
- Slides of the talk on Injection attacks in apps with NoSQL Backends, given at null OWASP Bangalore monthly meet on 27th April 2019☆21Apr 28, 2019Updated 7 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- All things Binary Exploitation, Memory, Assembly and Corruptions.☆10Sep 25, 2020Updated 6 years ago
- Facebook Write-ups, PoC, and exploitation codes:☆29Jan 20, 2020Updated 6 years ago
- Reconnaisance Tool☆12Jun 4, 2020Updated 6 years ago
- Tools and datas related to Bug Bounty.☆234Apr 20, 2022Updated 4 years ago
- A bash script that fetches and maintains thousands of DNS resolvers☆64Aug 24, 2020Updated 6 years ago
- ☆11Jul 28, 2020Updated 6 years ago
- Fetch known urls from AlienVault's Open Threat Exchange for given hosts☆63Jul 22, 2019Updated 7 years ago
- Dashboard containing various recon tools☆13Oct 12, 2017Updated 9 years ago
- Broken Link Hijacking Burp Extension☆59Sep 13, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- differer finds how URLs are parsed by different languages in order to help bug hunters break filters☆63May 3, 2020Updated 6 years ago
- Bug Bounty Clipboard☆17Nov 6, 2019Updated 6 years ago
- Miscellaneous one-off scripts, exploits, tools, sample code, ...☆10Feb 13, 2019Updated 7 years ago
- Converts DER certificates from Burp to store into Android cert store☆10Jul 7, 2016Updated 10 years ago
- A simple SSRF-testing sheriff written in Go☆344Oct 31, 2024Updated last year
- Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature☆38Nov 8, 2017Updated 8 years ago
- Pulse SSL VPN Arbitrary File Read burp extension☆25Sep 24, 2019Updated 7 years ago
- -☆11Nov 21, 2020Updated 5 years ago
- Identify vulnerabilities in your API's using the OpenAPI Security Scanner☆12Dec 6, 2018Updated 7 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Tools to gather subdomains from Bug Bounty programs☆63Mar 29, 2018Updated 8 years ago
- Break and Elevation of Privilege the API v2 using JSON Web Token (JWT)☆15Jul 8, 2017Updated 9 years ago
- AutoTriageBot automatically verifies, deduplicates, and suggests payouts for incoming HackerOne reports.☆56Feb 12, 2022Updated 4 years ago
- Enumerate subdomains by parsing Rapid7 FDNS dumps and CA transparency logs☆27Apr 26, 2019Updated 7 years ago
- Some talks about security☆11Sep 22, 2026Updated last month
- Auto Recon Bash Script☆31Dec 31, 2024Updated last year
- Official CTF for 44CON 2019☆17Jul 22, 2023Updated 3 years ago
- Decrypt AES256GCM-encrypted data in Apple Pay Payment Tokens.☆11Nov 30, 2018Updated 7 years ago
- Exploits for some of the vulnerabilities I have discovered☆17Aug 3, 2020Updated 6 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Bass grabs you those "extra resolvers" you are missing out on when performing Active DNS enumeration. Add anywhere from 100-6k resolvers …☆150Apr 12, 2024Updated 2 years ago
- This repository contains all the material from the talk "Practical recon techniques for bug hunters & pentesters" given at Bugcrowd Level…☆60Jan 24, 2019Updated 7 years ago
- A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms ti…☆97Jun 5, 2021Updated 5 years ago
- stuff i'm willing to share with the world lol☆168Oct 17, 2022Updated 4 years ago
- Small tool to log HTTP requests for debugging.☆16May 9, 2020Updated 6 years ago
- Firebase url checker in go☆11Oct 28, 2025Updated last year
- A simple variable based template editor using handlebarjs+strapdownjs. The idea is to use variables in markdown based files to easily rep…☆260Aug 30, 2023Updated 3 years ago