bugbountydude Goto Github PK

4-zero-3

403/401 Bypass Methods + Bash Automation + Your Support ;)

403bypasser

403 bypasser

admin-finder

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

agartha

a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to spot authentication/authorization issues, and converts Http requests to Javascript for further XSS exploitation and more.

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

allthingsssrf

This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

amass

In-depth Attack Surface Mapping and Asset Discovery

anew

A tool for adding new lines to files, skipping duplicates

api-securityempire

API Security Projecto aims to present unique attack & defense methods in API Security field

apkleaks

Scanning APK file for URIs, endpoints & secrets.

apktool

A tool for reverse engineering Android apk files

aquatone

A Tool for Domain Flyovers

arjun

HTTP parameter discovery suite.

assetfinder

Find domains and subdomains related to a given domain

assets-from-spf

A Python script to parse net blocks & domain names from SPF record

auth_analyzer

Burp Extension for testing authorization issues. Automated request repeating and parameter value extraction on the fly.

authz0

🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.

autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

awesome-api-security

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

awesome-bug-bounty

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

awesome-bugbounty-tools

A curated list of various bug bounty tools

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

awesome-payloads

awesome-rce-techniques

Awesome list of techniques to achieve Remote Code Execution on various apps!

awesome-waf

🔥 Everything about web-application firewalls (WAF).

awesomexss

Awesome XSS stuff

aws-scanner

Scans a list of websites for Cloudfront or S3 Buckets

axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!