leetCipher / bug-bounty-labs
All the labs in this repository simulate real world bugs I found in the wild
☆174Updated 6 months ago
Alternatives and similar repositories for bug-bounty-labs:
Users that are interested in bug-bounty-labs are comparing it to the libraries listed below
- This is a python wrapper around the amazing KNOXSS API by Brute Logic☆238Updated last month
- Automated tool for domains & subdomains gathering☆183Updated last year
- My Priv8 Nuclei Templates☆307Updated 9 months ago
- i will upload more templates here to share with the comunity.☆542Updated 10 months ago
- XSS payloads for bypassing WAF. This repository is updating continuously.☆230Updated 11 months ago
- Top disclosed reports from HackerOne☆148Updated 3 years ago
- ☆235Updated 3 years ago
- ☆128Updated 3 years ago
- 10,000 H1 Disclosed Reports☆104Updated 9 months ago
- Pass in a list of URLs with query strings, get back a unique list of URLs and query string combinations☆349Updated 4 years ago
- User-Agent , X-Forwarded-For and Referer SQLI Fuzzer☆382Updated last year
- A collection of notes for bug bounty hunting☆234Updated last year
- ☆97Updated 2 years ago
- List of reporting templates I have used since I started doing BBH.☆248Updated 5 months ago
- Automatic Bug finder with buprsuite☆165Updated last year
- Burp extension to create target specific and tailored wordlist from burp history.☆234Updated 3 years ago
- Smart context-based SSRF vulnerability scanner.☆347Updated 2 years ago
- ☆125Updated 3 years ago
- ☆162Updated last week
- A comprehensive list of custom filters for Logger++ to identify various vulnerabilities in different API styles☆217Updated 4 months ago
- Finding XSS during recon☆256Updated 2 years ago
- ☆152Updated last year
- xss-payload-list☆113Updated 6 months ago
- Automated Tool for Testing Header Based Blind SQL Injection☆271Updated last year
- Domains belonging to the most reputed public bug bounty programs. [NOT FOR NON-MONETARY OR PRIVATE PROGRAMS]☆215Updated 5 months ago
- 40,000+ Nuclei templates for security scanning and detection across diverse web applications and services☆298Updated last year
- List of Directory Traversal/LFI Payloads Scraped from the Internet☆155Updated last week
- ☆684Updated 4 months ago
- bug bounty disclosed reports☆111Updated 2 weeks ago
- Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.☆486Updated 2 weeks ago