avrocks Goto Github PK

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

awesome-bugbounty-builder

Awesome Bug bounty builder Project

bazz-recon

My Recon Automation Script

bbht

A script to set up a quick Ubuntu 17.10 x64 box with tools I use.

bug-bounty-dorks

List of Google Dorks for sites that have responsible disclosure program / bug bounty program

bug-bounty-dorks-and-platforms

This are some Dorks and Platform to find the Bug Bounty Programs.

bugbountydorks

This repo contains all the Bug Bounty Dorks sourced from different awesome sources and compiled at one place

clickjackingpoc

A Proof of Concept for Clickjacking Attacks

d4rkxss

A list of useful payloads and Bypass for Web Application Security and Bug Bounty/CTF

dirsearch

Web path scanner

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

gf

A wrapper around grep, to help you grep for things

javavulnbank

jfscan

JF⚡can - Super fast port scanning & service discovery using Masscan and Nmap. Scan large networks with Masscan and use Nmap's scripting abilities to discover information about services. Generate report.

kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

learn250

learn365

This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.

my-wordlists

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sqltinj

Automation: Bash script wrapper to find and verify time base sql injection

subdomz

All in One Subdomain Enumeration Tool

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

trishul

Burp Extension written in Jython to hunt for common vulnerabilities found in websites. Developed by Gaurav Narwani to help people find vulnerabilities and teach how to exploit them.

trufflehog

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

wfuzz

Web application fuzzer

wordlist

xss-strike