hahwul / awesome-oneliner-bugbounty
A collection of awesome one-liner scripts especially for bug bounty tips.
☆15Updated 4 years ago
Alternatives and similar repositories for awesome-oneliner-bugbounty:
Users that are interested in awesome-oneliner-bugbounty are comparing it to the libraries listed below
- assets for www.hahwul.com☆21Updated this week
- KARMA is a simple bash script automation that can hit Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Po…☆58Updated 3 years ago
- Blind spot is a python tool for blind injection vulnerabilities , SQLi time based , Command injection , code injection , SSTI☆27Updated 4 years ago
- ☆38Updated 4 years ago
- Alternative to XSS Hunter for blind XSS.☆50Updated 2 years ago
- Security test tool for Blind XSS☆26Updated 4 years ago
- ☆42Updated 3 years ago
- A simple tool which makes creating nuclei templates even easier.☆36Updated 8 months ago
- 3klector is an automation Recon tool which collecting information about Acquisitions and ASN which related to Big Scope company☆48Updated 2 years ago
- SubzzZ to find possible subdomains using passive recon. Tool also support Permutations, Mutations, Alterations.☆38Updated 3 years ago
- Bugbounty utility to store list of enumerated subdomains into an sqlite3 db [one liner style / Pipe and save]☆27Updated 4 years ago
- An SSRF detector tool written in golang. I have fixed some errors and added some more payloads to it. But the tool credits go to z0idsec.☆43Updated 4 years ago
- Enhanced 403 bypass header☆21Updated 2 years ago
- a tool that compiles a csv of all h1 program stats☆46Updated last year
- ☆38Updated 3 years ago
- XSS Finder Via SSTI☆54Updated last year
- All The Notes And Tips I FOund In Github And Twitter I Put Them Here☆34Updated 4 years ago
- gup aka Get All Urls parameters to create wordlists for brute forcing parameters.☆17Updated 3 years ago
- A solid recon tool I use personally.☆30Updated last year
- A set of tools, procedures, and playbooks for performing bug bounties☆15Updated 6 years ago
- The format of various s3 buckets is convert in one format. for bugbounty and security testing.☆84Updated last year
- Magic Header Blind Xss tool (deliver blind xss payloads in request headers).☆27Updated 3 years ago
- Automate bug bounty recon using bash alias☆14Updated 6 months ago
- ☆21Updated 4 years ago
- collection of various grep patterns collected from tomnomnom/gf and other places☆21Updated 4 years ago
- jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()…☆10Updated 3 years ago
- ☆33Updated 3 years ago
- ☆20Updated 3 years ago
- IIS shortname scanner + bruteforce☆51Updated last year
- The wordlists that have been compiled using disclosed reports at HackerOne bug bounty platform☆9Updated 4 years ago