m4ll0k / Awesome-Bugbounty-Writeups
A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference
☆40Updated 4 years ago
Alternatives and similar repositories for Awesome-Bugbounty-Writeups
Users that are interested in Awesome-Bugbounty-Writeups are comparing it to the libraries listed below
Sorting:
- Advanced Reconnaissance and Web Application Discovery☆81Updated 3 years ago
- ☆65Updated 2 years ago
- ☆76Updated last year
- ☆100Updated last year
- The project aims at creating target-specific wordlists for any web application that you are testing.☆66Updated 2 years ago
- Prototype Pollution Scanner☆117Updated 4 years ago
- HTTP parameter discovery suite.☆63Updated 4 years ago
- golang tool to scan domains or single domains with know security issues against xmlrpc☆62Updated last year
- A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or L…☆132Updated 4 years ago
- A blazing fast & feature rich Amazon S3 bucket enumerator.☆97Updated 2 years ago
- KARMA is a simple bash script automation that can hit Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Po…☆59Updated 3 years ago
- Check List☆79Updated 2 years ago
- ☆50Updated 3 years ago
- ☆113Updated 2 years ago
- Extract JavaScript files from burp suite project with ease.☆89Updated 3 years ago
- Summary of almost all paid bounty reports on H1☆40Updated 4 years ago
- Dotmil subdomain discovery tool that scrapes domains from official DoD website directories and certificate transparency logs☆96Updated 4 years ago
- LFI Payloads List coolected from github repos☆78Updated 5 years ago
- Describe how to use ffuf different options with examples☆87Updated 2 years ago
- Simple fork from degoogle original project with bug hunting purposes☆87Updated 2 years ago
- Find subdomains and takeovers.☆85Updated 2 years ago
- This extension adds a search bar to the Repeater tab that can be used to highlight all repeater tabs where the request and/or response ma…☆79Updated last year
- The Web Security Testing Guide is a comprehensive open source guide to testing the security of web applications and web services.☆29Updated 2 years ago
- I collected it to help the bug hunter get a reward☆58Updated 2 years ago
- A Burp Suite extension for CSRF proof of concepts.☆51Updated 2 years ago
- ☆78Updated 2 years ago
- A simple Bash one liner with aim to automate CRLF vulnerability scanning.☆69Updated 4 years ago
- Prototype pollution scanner using headless chrome☆218Updated 2 years ago
- Small tool to automate SSRF wordpress and XMLRPC finder☆81Updated 2 years ago
- ☆154Updated 2 years ago