honoki / bbrf-server
The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices
☆304Updated 3 months ago
Alternatives and similar repositories for bbrf-server:
Users that are interested in bbrf-server are comparing it to the libraries listed below
- The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices☆622Updated 3 months ago
- Secret and/or credential patterns used for gf.☆238Updated 2 years ago
- Burp extension to create target specific and tailored wordlist from burp history.☆234Updated 3 years ago
- Nuclei templates written by us.☆266Updated 3 years ago
- Pass in a list of URLs with query strings, get back a unique list of URLs and query string combinations☆349Updated 4 years ago
- ☆285Updated 2 years ago
- Js File Scanner☆167Updated 3 years ago
- List of reporting templates I have used since I started doing BBH.☆248Updated 5 months ago
- Gotator is a tool to generate DNS wordlists through permutations.☆465Updated 2 years ago
- IIS shortname scanner written in Go☆323Updated last year
- Turbo Intruder Scripts☆222Updated 4 years ago
- Unofficial documentation for the great tool Param Miner☆176Updated 2 years ago
- Burp Extension for easily creating Wordlists☆210Updated 3 years ago
- Quickly generate context-specific wordlists for content discovery from lists of URLs or paths☆216Updated 2 years ago
- ☆152Updated last year
- Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.☆486Updated last week
- Prototype pollution scanner using headless chrome☆216Updated 2 years ago
- List of fresh DNS resolvers updated daily☆109Updated 2 years ago
- Monitoring framework to detect and report newly found subdomains on a specific target using various scanning tools☆273Updated 7 months ago
- This a adaption of tomnomnom's kxss tool with a different output format☆450Updated last year
- A tool to check a bunch of URLs that contain reflecting params.☆559Updated 6 months ago
- Burpsuite plugin for Interact.sh☆210Updated 7 months ago
- Finding XSS during recon☆256Updated 2 years ago
- A fast and minimal JS endpoint extractor☆336Updated 3 months ago
- Poor (rich?) man's bug bounty pipeline https://dubell.io☆274Updated last year
- Automated learning of regexes for DNS discovery☆363Updated 2 years ago
- ☆370Updated 3 years ago
- De-clutter a list of URLs☆321Updated 3 months ago
- ☆396Updated 3 years ago
- A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.☆501Updated 2 years ago