bugbounty

An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.

Mobile Hacker's Weapons / A collection of cool tools used by Mobile hackers. Happy hacking , Happy bug-hunting

80k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

An IIS short filename enumeration tool

Subdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second

Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).

A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

Twitter vulnerable snippets

🔨 List all IP ranges from: Google (Cloud & GoogleBot), Bing (Bingbot), Amazon (AWS), Microsoft, Oracle (Cloud), GitHub, Facebook (Meta), OpenAI (GPTBot) and other with daily updates.

Awesome cloud enumerator

"Can I take over DNS?" — a list of DNS providers and how to claim vulnerable domains.

JSON Web Token Hack Toolkit

MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats.

Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

Mantis is a security framework that automates the workflow of discovery, reconnaissance, and vulnerability scanning.

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)

基于ARL-V2.6.2修改后的版本

1337 Wordlists for Bug Bounty Hunting

AIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox and a Textual TUI. It is designed to automate security assessments, penetration testing, and bug bounty reconnaissance — without any API keys or cloud dependency.

SpiderSuite (web security crawler) releases, wiki and roadmap

Subdomain and target enumeration tool built for offensive security testing

This Repository is a collection of different ethical hacking tools and malware's for penetration testing and research purpose written in python, ruby, rust, c++, go and c.

AppSec Payloads Arsenal for Pentration Tester and Bug Bounty Hunters

「🔑」A tool used to hunt down API key leaks in JS files and pages

A Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use.

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/or bug bounty targets!

A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.