xdavidhu / awesome-google-vrp-writeups
🐛 A list of writeups from the Google VRP Bug Bounty program
☆1,148Updated last week
Related projects ⓘ
Alternatives and complementary repositories for awesome-google-vrp-writeups
- Community curated list of public bug bounty and responsible disclosure programs.☆1,053Updated this week
- Collection of Facebook Bug Bounty Writeups☆610Updated last month
- This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location☆1,225Updated 3 years ago
- XSS payloads designed to turn alert(1) into P1☆1,341Updated last year
- GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep☆1,218Updated 2 months ago
- Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3☆1,820Updated 10 months ago
- This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.☆1,597Updated 2 years ago
- List of Google Dorks for sites that have responsible disclosure program / bug bounty program☆1,215Updated last year
- ☆523Updated 3 years ago
- ☆1,177Updated 2 years ago
- This script grab public report from hacker one and make some folders with poc videos☆874Updated last year
- BBT - Bug Bounty Tools (examples💡)☆1,722Updated 7 months ago
- A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..e…☆936Updated 4 months ago
- SecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to crea…☆527Updated 2 years ago
- ☆742Updated 4 months ago
- ☆1,019Updated 2 weeks ago
- A Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use.☆875Updated 11 months ago
- Automation for javascript recon in bug bounty.☆901Updated last year
- A repository that includes all the important wordlists used while bug hunting.☆1,209Updated last year
- An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects☆946Updated 2 years ago
- declutters url lists for crawling/pentesting☆1,205Updated 3 weeks ago
- ☆990Updated 2 years ago
- ☆661Updated last month
- A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon☆1,059Updated 9 months ago
- PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit.☆1,065Updated 3 months ago
- The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices☆615Updated this week
- A script to set up a quick Ubuntu 17.10 x64 box with tools I use.☆1,166Updated 4 months ago
- Scope gathering tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!☆1,028Updated last month
- Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist☆1,255Updated 4 months ago
- A fuzzer for detecting open redirect vulnerabilities☆713Updated 4 months ago