zubemx's Projects
All about bug bounty (bypasses, payloads, and etc)
A big list of Android Hackerone disclosed reports and other resources.
apk.sh makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK.
Scanning APK file for URIs, endpoints & secrets.
Resources for Application Security including Web, API, Android, iOS and Thick Client
AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.
A curated list of various bug bounty tools
A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.
A collection of awesome one-liner scripts especially for bug bounty tips.
Awesome list of step by step techniques to achieve Remote Code Execution on various apps!
A curated list of Smart Contract Security materials and resources For Researchers
Security Tool to Look For Interesting Files in S3 Buckets
A recursive internet scanner for hackers.
The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices
A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
A tool for parsing breached passwords
Automatically brute force all services running on a target.
Bug Bounty ~ Awesomes | Books | Cheatsheets | Checklists | Tools | Wordlists | More
Ressources for bug bounty hunting
These are my checklists which I use during my hunting.
A repository that includes all the important wordlists used while bug hunting.
Bug Bounty Tools used on Twitch - Recon
BUG BOUNTY WRITEUPS - OWASP TOP 10 š“š“š“š“ā
A list of interesting payloads, tips and tricks for bug bounty hunters.
My small collection of reports templates
aquatone results for sites with bug bountys
A Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use.
Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.