An automated bug hunting tool for comprehensive reconnaissance, including subdomain enumeration, port scanning, vulnerability detection, and report generation.
☆13Jun 24, 2025Updated 8 months ago
Alternatives and similar repositories for BugRecon
Users that are interested in BugRecon are comparing it to the libraries listed below
Sorting:
- ☆15Mar 21, 2025Updated 11 months ago
- 🎯 Chrome Extension - Passive scanner for Dependency Confusion vulnerabilities in npm/PyPI packages☆25Jan 31, 2026Updated last month
- anveshan is a completed script that helps to automate your recon process, It finds subdomains, urls, js files, parameters, screenshots, a…☆30Oct 29, 2024Updated last year
- Url scrapper or extractor from alienvault☆38Mar 1, 2025Updated last year
- My talks and papers☆40Nov 24, 2025Updated 3 months ago
- POC - CVE-2024–4956 - Nexus Repository Manager 3 Unauthenticated Path Traversal☆16Nov 26, 2024Updated last year
- Pentesting APIs, Published by Packt☆17Aug 20, 2024Updated last year
- This repository contains links to all the 100 days tweets that I posted during the #100DaysOfHacking challenge.☆17Apr 11, 2022Updated 3 years ago
- Reconizer is all-in-one subdomain enumeration tool that has capabilities to find the maximum number of subdomains of a root domain.☆18Jul 14, 2024Updated last year
- n8n workflows related to bug bounty☆46Oct 27, 2025Updated 4 months ago
- N0aziXss Origin Recon 🍓☆23Dec 16, 2025Updated 2 months ago
- SubOwner - A Simple tool check for subdomain takeovers.☆116Oct 18, 2024Updated last year
- A collection of Awesome Frida Scripts for MAPT☆20Jan 7, 2023Updated 3 years ago
- Passively check for XSS character encodings☆18Feb 7, 2026Updated 3 weeks ago
- Tools and methods that I personally use for Recon and Exploitations☆49May 1, 2025Updated 10 months ago
- Nuclei templates for drupal vulns... far from perfect☆17Jan 9, 2025Updated last year
- Fuzz every path with goky☆15Jan 4, 2024Updated 2 years ago
- Find The Admin Panel & SQL Injection Endpoints, Using Google Dorks !!!☆24Nov 15, 2024Updated last year
- ☆25Nov 16, 2023Updated 2 years ago
- "Terrible Thick Client" is a vulnerable application developed in C# .NET framework.☆20Jul 9, 2023Updated 2 years ago
- Script to read input from stdin and encode it☆19Aug 23, 2023Updated 2 years ago
- This tool is a simple LFI, RFI, RCE, and Joomla Components vulnerability scanner, created by JayCyberSecurity☆22Apr 26, 2022Updated 3 years ago
- My fuzz repo!☆22Jul 28, 2023Updated 2 years ago
- Intentionally Vulnerable Nodejs Application & APIs☆21Apr 9, 2022Updated 3 years ago
- this repo contains some public methodologies which I found from internet (google,telegram,discord,writeups etc..)☆30May 30, 2024Updated last year
- Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers☆311Mar 31, 2024Updated last year
- Custom nuclei templates for bug hunting.....☆26May 30, 2024Updated last year
- Make exploiting race conditions in web applications highly efficient and ease-of-use.☆27Jun 18, 2025Updated 8 months ago
- ☆27Jul 30, 2021Updated 4 years ago
- My personal collection of nuclei templates made for fuzzing.☆29Sep 6, 2024Updated last year
- Modern real world bug bounty payloads and exploitation techniques with may earn you some $$$.☆29Nov 7, 2023Updated 2 years ago
- Filter URLs to save your time.☆60Jul 29, 2022Updated 3 years ago
- A collection of Nmap NSE scripts that I made.☆30Jan 14, 2013Updated 13 years ago
- Repo for hosting rayder workflows☆63Aug 31, 2023Updated 2 years ago
- An efficient tool To Find click jacking vulnerabilities in easiest way with poc☆27Nov 17, 2021Updated 4 years ago
- assets for www.hahwul.com☆24Updated this week
- XSSGAI is the first-ever AI-powered XSS (Cross-Site Scripting) payload generator. It leverages machine learning and deep learning to crea…☆35Feb 4, 2026Updated 3 weeks ago
- damn-exploitable-android-app-apk☆40Jun 9, 2023Updated 2 years ago
- A powerful JavaScript monitoring tool for bug bounty hunters. Track changes in JavaScript files across websites, detect new attack surfac…☆89Apr 19, 2025Updated 10 months ago