maurosoria / bugbounty-toolsLinks
Random tools I've written for bug bounties
β79Updated 8 months ago
Alternatives and similar repositories for bugbounty-tools
Users that are interested in bugbounty-tools are comparing it to the libraries listed below
Sorting:
- π An ultimate collection wordlists of the best-known CMSβ92Updated last year
- SQLi Query Tampering extends and adds custom Payload Generator/Processor in Burp Suite's Intruder. This extension gives you the flexibilβ¦β154Updated 5 years ago
- Command line tool for testing CRLF injection on a list of domains.β165Updated last year
- SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript filesβ35Updated 4 years ago
- All known and unknown public POC's for wordpress themes and pluginsβ78Updated 4 years ago
- Generates target specific word lists for Fuzzing with fuffβ112Updated 5 years ago
- X-Forwarded-For [403 forbidden] enumerationβ96Updated last year
- Host Header Injection Scannerβ49Updated 5 years ago
- A Python based scanner to find potential SSRF parameters in a web application.β70Updated 4 years ago
- Host Header Injection Checkerβ83Updated 3 years ago
- Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilitiesβ125Updated 2 years ago
- Create your Custom Wordlist For Fuzzingβ201Updated last year
- β59Updated 2 years ago
- Intelligent XSS detection tool that uses human techniques for looking for reflected cross-site scripting (XSS) vulnerabilitiesβ150Updated 3 years ago
- Nuubi Tools (Information-ghatering|Scanner|Recon.)β88Updated 5 years ago
- A collection of tools I wrote for bug bounty or hacking and don't mind publishing itβ120Updated last year
- A Payload Injector for bugbounties written in goβ70Updated 5 years ago
- A simple Bash one liner with aim to automate CRLF vulnerability scanning.β69Updated 5 years ago
- A combined wordlists for files and directory discoveryβ127Updated 4 years ago
- Payloads to be used with Burp Suite Intruder. (Originally found on swisskeyrepo-PayloadsAllTheThings)β85Updated 5 years ago
- golang tool to scan domains or single domains with know security issues against xmlrpcβ61Updated 2 years ago
- LFI Payloads List coolected from github reposβ85Updated 5 years ago
- A very (very) FAST and simple subdomain finder based on online & free services. Without any configuration requirements.β115Updated this week
- Shodan subdomain finderβ67Updated 5 years ago
- CRLF and open redirect fuzzerβ112Updated 4 years ago
- Handy bash and python scripts for bug bounty hunting!β47Updated 4 years ago
- Hunt down the secrets from the WebArchives for Fun and Profitβ163Updated 3 years ago
- Toolkit to detect and keep track on Blind XSS, XXE & SSRFβ292Updated 6 years ago
- xss vulnerability scanner and input fuzzing tool.β60Updated 2 years ago
- List of domains in scope for bug bounties (HackerOne, Bugcrowd, etc.)β74Updated 4 years ago