oneplus-x / The-Bug-Hunters-Methodology
Welcome! This repo is a conglomeration of tips, tricks, tools, and data analysis to use while doing web application security assessments, and more specifically towards bug hunting in bug bounties.
☆13Updated 6 years ago
Alternatives and similar repositories for The-Bug-Hunters-Methodology:
Users that are interested in The-Bug-Hunters-Methodology are comparing it to the libraries listed below
- commands☆27Updated 4 years ago
- S3 Recon tips and tricks collected from different resources,Sorry if i missed to mention all resources owners☆27Updated 3 years ago
- Collection of web app methodology from initial recon into exploit known vulnerability. Used when conducting Bug Bounty, Penetration Testi…☆13Updated 3 years ago
- It grep subdomains, email/username, build custom wordlist etc from gau results☆48Updated 2 years ago
- An Automation Tool Written in Python which uses Twitter and GitHub API☆16Updated 3 years ago
- KARMA is a simple bash script automation that can hit Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Po…☆58Updated 3 years ago
- ☆32Updated 2 years ago
- 3klector is an automation Recon tool which collecting information about Acquisitions and ASN which related to Big Scope company☆48Updated 2 years ago
- Basic Recon For Bug Bounty Hunter - "HuntTheBug" is Basic Scripts For Sub Domain Enumeration> Live Domain Enumeration > Sub Domain Hijack…☆52Updated 3 years ago
- IIS shortname scanner + bruteforce☆51Updated last year
- s3 brute force tool☆44Updated 3 years ago
- Stuff for bug bounty☆28Updated 2 years ago
- Cool HackerOne Reports☆20Updated 2 years ago
- Check List☆78Updated 2 years ago
- I collected it to help the bug hunter get a reward☆58Updated 2 years ago
- Automated blind-xss search for Burp Suite☆23Updated 3 years ago
- Mini recon script to identify the links and sensitive information from a particular link☆19Updated 4 years ago
- This is GitHub_Dorks and some tips i collect from different resources.Recon_Api is tip when you find token or api without knowing what to…☆21Updated 3 years ago
- A small script for my recon during bug hunting. Needs some modifications☆17Updated 5 years ago
- Noobish Recon Automation☆21Updated last year
- ☆12Updated 2 years ago
- ShoLister is a tool that collects all available subdomains for specific hostname or organization from Shodan. The tool is designed to be …☆58Updated 2 years ago
- SubzzZ to find possible subdomains using passive recon. Tool also support Permutations, Mutations, Alterations.☆38Updated 4 years ago
- AWS S3 open bucket poc automated script.☆57Updated 3 years ago
- 🎯 SQL Injection Payload List☆10Updated 3 years ago
- ☆75Updated 11 months ago
- Basic Bash Script to scrape all subdomains from crtsh in a single run☆18Updated 2 years ago
- #JavascriptRecon #bugbounty☆21Updated 3 years ago
- Bash Script to Hunt all the targets/Subdomains from Chaos by Project Discovery Team☆34Updated 4 years ago
- This is a comprehensive Subdomain Enumeration Guide that traces back to my GitBook.☆31Updated 2 weeks ago