MrEmpy / BugBountyTricks

Related projects: ⓘ

• e1abrador / Burp-Encode-IP
  Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.
  ☆41Updated 6 months ago
• rix4uni / xsschecker
  xsschecker tool checking reflected endpoints finding possible xss vulnerable endpoints.
  ☆19Updated last month
• cosad3s / hfinder
  Help recon of hostnames from specific ASN or CIDR, thanks to Robtex and BGP.HE
  ☆52Updated 7 months ago
• Dancas93 / SSRF-Scanner
  ☆30Updated last year
• mathis2001 / ParamFirstCheck
  ParamFirstCheck identifies in a list of urls those containing a parameter of the top 25 of the most vulnerable parameters for SQLi, LFI, …
  ☆31Updated 9 months ago
• nowak0x01 / WPXStrike
  WPXStrike is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's criticals…
  ☆58Updated 8 months ago
• ExpLangcn / agartha
  a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to …
  ☆48Updated 2 years ago
• aniqfakhrul / lazyParam
  A simple automation tool to detect lfi, rce and ssti vulnerability
  ☆55Updated 2 years ago
• tamimhasan404 / FFUF-Tips-And-Tricks
  Describe how to use ffuf different options with examples
  ☆75Updated last year
• ethicalhackingplayground / dnsresolver
  A Lightning-Fast DNS Resolver written in Rust 🦀
  ☆62Updated 4 months ago
• nico989 / B1pass3r
  Python tool to test known techniques to bypass 403 and 401 HTTP responses.
  ☆36Updated last year
• HernanRodriguez1 / ScanReflectedXSS
  ☆44Updated last year
• Mostafa-Elguerdawi / Automation_Bug_Hunting
  ☆69Updated last year
• rashahacks / wordlists
  ☆41Updated last year
• AmoloHT / TTWAF
  「🧱」Test a list of payloads and see if you can bypass it
  ☆51Updated 2 years ago
• faiyazahmad07 / SSTI_DETECTOR
  This tool allows you to find ssti vulnerability with ease!
  ☆17Updated 2 years ago
• hac01 / Astra-Bot
  Python based Discord bot Which allows you to run tools like nmap and amass from discord
  ☆26Updated last year
• securebinary / o365sprayer
  An offensive security tool used to enumerate and spray passwords for O365 accounts on both Managed and Federated AD services.
  ☆47Updated last year
• iambouali / p1radup
  Process URLs and remove duplicate query parameters.
  ☆28Updated 6 months ago
• Elsfa7-110 / Elsfa7110-Oneliner-bughunting
  ☆52Updated last month
• anmolksachan / JIRAya
  JIRA"YA is a vulnerability analyzer for JIRA instances. It runs active scans to identify vulnerabilities by interacting with the host and…
  ☆30Updated 3 weeks ago
• emadshanab / Oneliner-Bug-Bounty-Collection
  Oneliner Bug Bounty Collection collected from GitHub to all bug bounty hunters
  ☆27Updated 9 months ago
• ethicalhackingplayground / hrekt
  A really fast http prober.
  ☆38Updated 7 months ago
• Chocapikk / LFIHunt
  Advanced Tool To Scan And Exploit Local File Inclusion (LFI) Vulnerabilities
  ☆31Updated last year
• bm402 / apidor
  A tool that automates the search for IDOR vulnerabilities in web apps and APIs
  ☆47Updated 3 years ago
• darklotuskdb / SSTI-XSS-Finder
  XSS Finder Via SSTI
  ☆54Updated last year
• RodricBr / OffSec-MISC
  Offensive Security MISC Annotations and Payloads for Ethical Hackers / Security Researchers
  ☆24Updated 3 weeks ago
• Lu3ky13 / Authorization-Nuclei-Templates
  Authorization-Nuclei-Templates
  ☆33Updated this week
• theVulnerableMMII / oSkan
  This tool is a simple LFI, RFI, RCE, and Joomla Components vulnerability scanner, created by JayCyberSecurity
  ☆21Updated 2 years ago
• System00-Security / findbbprograms
  Check if domain has bug bounty program or not
  ☆28Updated last year