leetCipher / bug-bounty-labsLinks
All the labs in this repository simulate real world bugs I found in the wild
☆197Updated last year
Alternatives and similar repositories for bug-bounty-labs
Users that are interested in bug-bounty-labs are comparing it to the libraries listed below
Sorting:
- This is a python wrapper around the amazing KNOXSS API by Brute Logic☆279Updated last month
- All About Dependency Confusion Attack, (Detecting, Finding, Mitigating)☆300Updated last year
- Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.☆560Updated 11 months ago
- i will upload more templates here to share with the comunity.☆568Updated last year
- ☆249Updated 4 years ago
- Pass in a list of URLs with query strings, get back a unique list of URLs and query string combinations☆393Updated 5 years ago
- My Priv8 Nuclei Templates☆336Updated last year
- Automated tool for domains & subdomains gathering☆191Updated 2 weeks ago
- ☆148Updated 4 years ago
- Useful "Match and Replace" burpsuite rules☆362Updated 2 years ago
- Burp extension to create target specific and tailored wordlist from burp history.☆255Updated 4 years ago
- Finding XSS during recon☆271Updated 3 years ago
- XSS payloads for bypassing WAF. This repository is updating continuously.☆264Updated last year
- Top disclosed reports from HackerOne☆161Updated 4 years ago
- User-Agent , X-Forwarded-For and Referer SQLI Fuzzer☆382Updated 2 years ago
- A subdomain fuzzing tool☆172Updated last year
- The repo contains all the the notes, slides, and study material for my workshop at DEFCON 32 at the Bug Bounty Village☆198Updated last year
- 10,000 H1 Disclosed Reports☆118Updated last year
- This a adaption of tomnomnom's kxss tool with a different output format☆516Updated 2 years ago
- A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues☆373Updated 2 years ago
- Collected fuzzing payloads from different resources☆126Updated 3 weeks ago
- Smart context-based SSRF vulnerability scanner.☆361Updated 3 years ago
- This is go CLI tool for send fast Multiple get HTTP request.☆283Updated 3 years ago
- A comprehensive list of custom filters for Logger++ to identify various vulnerabilities in different API styles☆234Updated last year
- ☆179Updated 5 months ago
- bash script for Subdomain Enumeration☆398Updated 6 months ago
- Never forget where you inject.☆298Updated 5 months ago
- De-clutter a list of URLs☆383Updated last week
- xss-payload-list☆127Updated last year
- MapperPlus facilitates the extraction of source code from a collection of targets that have publicly exposed .js.map files.☆286Updated last year