random-robbie / bugbounty-scans

Related projects ⓘ

Alternatives and complementary repositories for bugbounty-scans

• internetwache / CT_subdomains
  An hourly updated list of subdomains gathered from certificate transparency logs
  ☆341Updated 3 years ago
• ehsahil / recon-my-way
  This repository created for personal use and added tools from my latest blog post.
  ☆347Updated last year
• fransr / bountyplz
  Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported)
  ☆443Updated 5 years ago
• fransr / template-generator
  A simple variable based template editor using handlebarjs+strapdownjs. The idea is to use variables in markdown based files to easily rep…
  ☆249Updated last year
• 0xbharath / censys-enumeration
  A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys
  ☆151Updated last year
• lc / theftfuzzer
  TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.
  ☆308Updated last year
• s0md3v / MyPapers
  Repository for hosting my research papers
  ☆502Updated 6 months ago
• cujanovic / CRLF-Injection-Payloads
  Payloads for CRLF Injection
  ☆215Updated 3 weeks ago
• zseano / JS-Scan
  a .js scanner, built in php. designed to scrape urls and other info
  ☆210Updated 7 years ago
• jakejarvis / subtake
  Automatic finder for subdomains vulnerable to takeover. Written in Go, based on @haccer's subjack.
  ☆146Updated 4 years ago
• EdOverflow / megplus
  Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]
  ☆302Updated 6 years ago
• dark-warlord14 / JSScanner
  You can read the writeup on this script here
  ☆267Updated 4 years ago
• Cillian-Collins / subscraper
  Reconnaissance tool which scans javascript files for subdomains and then iterates over all javascript files hosted on subsequent subdomai…
  ☆221Updated 4 years ago
• Shashank-In / TravisLeaks
  A tool to find sensitive keys and passwords in Travis logs
  ☆142Updated 3 years ago
• neex / gifoeb
  exploit for ImageMagick's uninitialized memory disclosure in gif coder
  ☆278Updated 7 years ago
• cheetz / sslScrape
  SSLScrape | A scanning tool for scaping hostnames from SSL certificates.
  ☆329Updated 3 years ago
• 0xspade / Automated-Scanner
  Trying to make automated recon for bug bounties
  ☆250Updated 3 years ago
• lc / secretz
  secretz, minimizing the large attack surface of Travis CI
  ☆321Updated 2 years ago
• random-robbie / keywords
  ☆353Updated 2 years ago
• nashcontrol / bounty-monitor
  Leverage certificate transparency live feed to monitor for newly issued subdomain certificates (last 90 days, configurable), for domains …
  ☆220Updated last year
• zseano / InputScanner
  ☆234Updated 6 years ago
• jobertabma / relative-url-extractor
  A small tool that extracts relative URLs from a file.
  ☆730Updated 4 years ago
• daeken / SSRFTest
  SSRF testing tool
  ☆241Updated last year
• mandatoryprogrammer / xsshunter_client
  Correlated injection proxy tool for XSS Hunter
  ☆249Updated last year
• ZephrFish / Wordlists
  Various Payload wordlists
  ☆235Updated 4 years ago
• 1hack0 / Facebook-Bug-Bounty-Write-ups
  Hunting Bugs for Fun and Profit
  ☆264Updated 4 years ago
• wish-i-was / femida
  Automated blind-xss search for Burp Suite
  ☆277Updated 5 years ago
• allyomalley / dnsobserver
  A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for…
  ☆188Updated 4 years ago
• JordyZomer / autoSubTakeover
  A tool used to check if a CNAME resolves to the scope address. If the CNAME resolves to a non-scope address it might be worth checking ou…
  ☆131Updated last year