A curated list of powerful one-liners from different sources
☆11Mar 29, 2025Updated last year
Alternatives and similar repositories for cool-bugbounty-oneliners
Users that are interested in cool-bugbounty-oneliners are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆11Jan 27, 2022Updated 4 years ago
- Dig through the Wayback Machine and find sensitive or forgotten files exposed by web servers over time.☆31Mar 27, 2025Updated last year
- ☆10Apr 8, 2024Updated 2 years ago
- Passive Reconnaissance Techniques Approach helps for penetration testing and bug bounty hunting by gathering information about a target s…☆23Aug 19, 2025Updated last year
- Algopwn is an interactive Python tool for security researchers and bug-bounty hunters to audit Algolia API keys. It detects ACLs, disting…☆11Nov 6, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- This python based tool can be used to discover API keys, access tokens, and other sensitive data in JavaScript files. It can scan JavaScr…☆16Oct 18, 2024Updated 2 years ago
- Hand-made Improved Nuclei Templates!🪴☆13Jun 12, 2023Updated 3 years ago
- ☆11Mar 27, 2024Updated 2 years ago
- Tool for CVE-2022-1388☆12May 13, 2022Updated 4 years ago
- Wordlists for Fuzzing☆11Jul 18, 2020Updated 6 years ago
- ☆46Sep 20, 2024Updated 2 years ago
- Unauthenticated RCE PoC for CVE-2026-48908 — SP Page Builder for Joomla (≤ 6.6.1): arbitrary file upload via asset.uploadCustomIcon. Self…☆18Jun 23, 2026Updated 4 months ago
- Tutorials and Things to Do while Hunting Vulnerability.☆13Aug 30, 2022Updated 4 years ago
- Vite Arbitrary File Read Exploit☆16Jun 25, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)☆18Dec 12, 2025Updated 10 months ago
- This tool provides a sophisticated yet easy-to-use solution for maintaining anonymity during security testing. The timed rotation feature…☆11Jul 16, 2025Updated last year
- Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 - Authenticated (Contributor+) Remote Code Execution☆13Dec 2, 2024Updated last year
- API URL fuzzer that cross-joins hosts and paths into normalized URLs, probes them over HTTP, and reports responding endpoints.☆31Jun 11, 2026Updated 4 months ago
- Scans WordPress sites to find unclaimed plugin slugs on the public directory.☆27Oct 12, 2025Updated last year
- collection of various nuclei templates☆11Apr 18, 2023Updated 3 years ago
- cve-2026-48907 scanner☆64Jun 27, 2026Updated 4 months ago
- A BurpSuite extension for vulnerability Scanning☆31Feb 16, 2024Updated 2 years ago
- Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.14 - Unauthenticated SQL Injection☆22Sep 15, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A dataset of 3500 penetration testing cases.☆13Dec 29, 2023Updated 2 years ago
- 📝 My Bug Bounty Writeups☆11Mar 23, 2026Updated 7 months ago
- TimeVault is a specialized automated tool designed to detect potential information disclosure vulnerabilities in web applications by leve…☆43Jan 29, 2025Updated last year
- A powerful Burp Suite extension that automatically detects JavaScript URLs from HTTP traffic, scans them using TruffleHog for secrets det…☆30Oct 23, 2025Updated last year
- KeySec Hunter is a **Chrome extension** that scans webpages and linked JavaScript files for **user-defined keywords** and **potential sec…☆59Dec 21, 2025Updated 10 months ago
- ☆97Apr 4, 2025Updated last year
- A high-accuracy, behavioral cache poisoning scanner for modern Web APIs☆13Dec 10, 2025Updated 10 months ago
- ☆12Jan 31, 2020Updated 6 years ago
- We will provide here all the resources related to OSINT in the field of Cybersecurity . By THB Team☆14Sep 29, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- FOFA Hacking Queries - API Key Hunter☆50Mar 29, 2026Updated 7 months ago
- Reads in a list of domains or subdomains and crawls them for references to S3 buckets☆11Sep 30, 2026Updated last month
- rlyCTF (relay CTF) challenge to emulate real-world SSRF attacks.☆10Apr 13, 2019Updated 7 years ago
- This script can be used to find html forms in the list of endpoints/urls.☆47Mar 24, 2024Updated 2 years ago
- Learn how to automate XSS, SSRF, LFI, SQLI, NoSQLi☆47Jul 9, 2021Updated 5 years ago
- Ultra-fast hybrid IPv4/IPv6 port scanner with adaptive concurrency, banner grab, TLS sniff, and built-in httpx + nuclei recon pipeline — …☆18Sep 30, 2026Updated last month
- ☆56Jun 28, 2026Updated 4 months ago