akbruster Goto Github PK

kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

kiterunner

Contextual Content Discovery Tool

lfi-files

Wordlist to bruteforce for LFI

log4jnuclei

Log4j for nuclei

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

microsubs

A collection of code for interacting with API sources directly to improve your understanding of those services.

nerdbug

Full Nuclei automation script with logic explanation.

nuclei-burp-plugin

Nuclei plugin for BurpSuite

onelistforall

Rockyou for web fuzzing

online-shopping-system-advanced

Demo site

osmedeus-base

Build your own reconnaissance system with Osmedeus Next Generation

owasp-testing-checklist

OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.

pdtm

ProjectDiscovery's Open Source Tool Manager

pentest-book

practical-recon-levelup0x02

This repository contains all the material from the talk "Practical recon techniques for bug hunters & pentesters" given at Bugcrowd LevelUp 0x02 virtual conference

public-bugbounty-programs

Community curated list of public bug bounty and responsible disclosure programs.

puredns

Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.

reconaizer

A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomains and more!

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

resolvers

The most exhaustive list of reliable DNS resolvers.

resources-for-beginner-bug-bounty-hunters

ripgen

Rust-based high performance domain permutation generator.

scantastic-tool

It's bloody scantastic

scilla

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

scoper

This is a Burp Suite extension that allows users to easily add web addresses to the Burp Suite scope.

scripts

Scripts I use during pentest engagements.

secretfinder

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

servicenow

ServiceNow widge-simple-list misconfiguration scanner