securitycipher / Bug-Bounty-Resources
Dive into a handpicked selection of tools, guides, and tips tailored for beginners in Bug Bounty and Penetration Testing. 🐛🛡️
☆26Updated 3 months ago
Related projects ⓘ
Alternatives and complementary repositories for Bug-Bounty-Resources
- A powerful bash script for massive XSS scanning leveraging Brute Logic's KNOXSS API☆58Updated last month
- Oneliner Bug Bounty Collection collected from GitHub to all bug bounty hunters☆27Updated 11 months ago
- A Lightning-Fast DNS Resolver written in Rust 🦀☆65Updated this week
- Bypass Reset Password Code Lead to Account Takeover☆22Updated 2 months ago
- A collection of Bug Bounty Tips collected from GitHub to all bug bounty hunters☆26Updated 11 months ago
- Fast subdomains enumeration tool for penetration testers and bug bounty hunters☆20Updated 9 months ago
- Mind map for certifcation, vulnerability finding and recon for bug bounty and professional works.☆21Updated 8 months ago
- ☆42Updated last year
- This is a Kind of Dictionary which contains all kinds of Web Application and Network Security Vulnerabilities and other security concepts…☆19Updated 3 months ago
- Process URLs and remove duplicate query parameters.☆27Updated 8 months ago
- A basic tool to check for XSS vulnerabilities. It takes a list of URLs and checks if the parameter values appear in the response.☆27Updated 3 months ago
- ☆51Updated last month
- Modern real world bug bounty payloads and exploitation techniques with may earn you some $$$.☆25Updated last year
- A simple automation tool to detect lfi, rce and ssti vulnerability☆55Updated 2 years ago
- Authorization-Nuclei-Templates☆37Updated 2 months ago
- Filter URLs to save your time.☆59Updated 2 years ago
- A simple plugin to export JS files from one or multiple targets☆39Updated last year
- ☆57Updated 3 months ago
- Unwaf is a Go tool designed to help identify WAF bypasses using passive techniques, such as: SPF records and DNS history. By default, Unw …☆75Updated 3 months ago
- PoC for XSS in org.webjars:swagger-ui [3.14.2, 3.36.2]☆52Updated last year
- Private Nuclei Templates☆88Updated last year
- Fast Bug Bounty Script☆36Updated last year
- Supertruder but better☆33Updated last year
- A really fast http prober.☆39Updated 9 months ago
- ☆34Updated last week
- Tools for bug bounty☆26Updated 8 months ago
- A repository to host the subdomain wordlists from my blog https://medium.com/@nynan/what-i-learnt-from-reading-217-subdomain-takeover-bug…☆40Updated 2 years ago
- Advanced Tool To Scan And Exploit Local File Inclusion (LFI) Vulnerabilities☆31Updated last year
- A tool that automates the search for IDOR vulnerabilities in web apps and APIs☆50Updated 3 years ago
- ☆20Updated last year