This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports
翻译 - 此仓库包含适用于报告的漏洞赏金平台范围(例如Hackerone / Bugcrowd / Intigriti / etc)的每小时更新的数据转储
Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting
翻译 - Sudomy是一个子域枚举工具,使用bash脚本创建,可以快速全面地分析域并收集子域。以HTML或CSV格式报告输出
Tips and Tutorials for Bug Bounty and also Penetration Tests.
Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.
BUG BOUNTY WRITEUPS - OWASP TOP 10 🔴🔴🔴🔴✔
This project crawls bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) hourly and dumps them into the bounty-targets-data repo
This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference
#网络爬虫#Jie stands out as a comprehensive security assessment and exploitation tool meticulously crafted for web applications. Its robust suite of features encompasses vulnerability scanning, information gath...
Bugcrowd’s baseline priority ratings for common security vulnerabilities
DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it
翻译 - DirDar是一个工具,用于搜索(403禁止访问)目录来破坏它并在其上获得目录清单
Find exposed API keys based on RegEx and get exploitation methods for some of keys that are found
翻译 - 根据 RegEx 查找暴露的 API 密钥,并获取找到的一些密钥的利用方法
Bugbounty scope tool
List of reporting templates I have used since I started doing BBH.
Monitoring framework to detect and report newly found subdomains on a specific target using various scanning tools
Python library and CLI for the Bug Bounty Recon API
Domains belonging to the most reputed public bug bounty programs. [NOT FOR NON-MONETARY OR PRIVATE PROGRAMS]
⚡Chrome extension allows you to create lists of Google and Github dork to open multiple tabs with one click, import "scope/out of scope" from #HackerOne #Bugcrowd #Intigriti ...
Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities
Cryptography Tool | RSA Attacks