notmarshmllow / Bug-Hunting-With-Bash

Related projects: ⓘ

• Dheerajmadhukar / subzzZ
  SubzzZ to find possible subdomains using passive recon. Tool also support Permutations, Mutations, Alterations.
  ☆37Updated 3 years ago
• evanRubinsteinIT / BugBounty-Oneliners
  ☆24Updated this week
• vikrantbatra05 / HuntTheBug
  Basic Recon For Bug Bounty Hunter - "HuntTheBug" is Basic Scripts For Sub Domain Enumeration> Live Domain Enumeration > Sub Domain Hijack…
  ☆48Updated 2 years ago
• bsysop / blind-ssrf-chains
  An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability
  ☆16Updated 3 years ago
• Ravaan21 / Chandrahasa
  A solid recon tool I use personally.
  ☆31Updated last year
• smaul0 / Bug-Bounty-Resources
  Write-ups of All types Bugs
  ☆18Updated 2 years ago
• emadshanab / Burp-Bounty-free-Profiles-Collection
  ☆43Updated 3 years ago
• tamimhasan404 / Gau-Expose
  It grep subdomains, email/username, build custom wordlist etc from gau results
  ☆45Updated last year
• BrownBearSec / Utils-and-Wrappers
  A repo for tools, utils, and wrappers that are to small to put in their own repo.
  ☆23Updated last year
• zeronine9 / Blind_SPOT
  Blind spot is a python tool for blind injection vulnerabilities , SQLi time based , Command injection , code injection , SSTI
  ☆27Updated 3 years ago
• Ravirajrao / HackerOne-Reports
  Cool HackerOne Reports
  ☆17Updated last year
• akincibor / 403-bypass
  Enhanced 403 bypass header
  ☆21Updated 2 years ago
• 0xRTH / IISRecon
  IIS shortname scanner + bruteforce
  ☆46Updated 7 months ago
• NitinYadav00 / gf-patterns
  Some of the gf patterns which i use
  ☆37Updated 2 years ago
• akshaysharma016 / aem-detector
  ☆21Updated last year
• darklotuskdb / SSTI-XSS-Finder
  XSS Finder Via SSTI
  ☆54Updated last year
• ahmad0x1 / Acquisitions
  Python Script to Print the name of the companies that are acquired by a Target Company and the Time of Acquisition.
  ☆24Updated 2 years ago
• MShahine / Bug-Bounty-Recon
  All The Notes And Tips I FOund In Github And Twitter I Put Them Here
  ☆29Updated 4 years ago
• Dheerajmadhukar / karma_v1
  KARMA is a simple bash script automation that can hit Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Po…
  ☆58Updated 3 years ago
• Sybil-Scan / TLDbrute
  A simple utility to generate domain names with all possible TLDs
  ☆23Updated last year
• eslam3kl / 3klector
  3klector is an automation Recon tool which collecting information about Acquisitions and ASN which related to Big Scope company
  ☆49Updated 2 years ago
• obheda12 / BugBounty
  RepoToStoreBugBountyInfo
  ☆10Updated 4 years ago
• six2dez / resolvers_reconftw
  Resolvers updated daily for reconftw
  ☆46Updated last year
• OdinF13 / Bug-Bounty-Scripts
  Script for Bug Bounty
  ☆28Updated 3 years ago
• emadshanab / Blind-XSS-burp-match-and-replace
  ☆27Updated 9 months ago
• emadshanab / Extract-and-Probe-all-the-ips-associated-with-same-host-via-httpx
  ☆12Updated 2 years ago
• Hxzeroone / quoted-printable-Parser
  A Burp Suite extension to parse Content-Transfer-Encoding: quoted-printable emails received in Burpcollaborator's SMTP
  ☆28Updated 4 years ago
• r00tkie / grep-pattern
  collection of various grep patterns collected from tomnomnom/gf and other places
  ☆20Updated 3 years ago
• eternyle / ShodanIsh
  Shodan Favicon Hash Generator By Aziz Hakim @eternyle
  ☆24Updated 3 months ago
• 0xPugal / bugbounty_profile
  Automate bug bounty recon using bash alias
  ☆14Updated last month