junior0x00 Goto Github PK

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

awesome-google-vrp-writeups

🐛 A list of writeups from the Google VRP Bug Bounty program

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

bug-bounty-methodology

These are my checklists which I use during my hunting.

bug-bounty-testing-essential-guideline-startup-bug-hunters

Bug Bounty Testing Essential Guideline : Startup Bug Hunters

bug-bounty-village-defcon32-workshop

The repo contains all the the notes, slides, and study material for my workshop at DEFCON 32 at the Bug Bounty Village

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

dorks

this small space contains a file updated in February 2024 containing the updated list, I also added a nice python script

howtohunt

Collection of methodology and test case for various web vulnerabilities.

hunt

internalallthethings

Active Directory and Internal Pentest Cheatsheets

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

massive-web-application-penetration-testing-bug-bounty-notes

Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes

onedorkforall

An insane list of all dorks taken from everywhere from various different sources.

onelistforall

Rockyou for web fuzzing

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

secretfinder

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

udork

uDork is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or directories, find IoT devices, detect versions of web applications, and so on.

vulnerability-checklist

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

web-attack-cheat-sheet

Web Attack Cheat Sheet

web3-security-library

Information about web3 security and programming tutorials/tools

wordlists

Automated & Manual Wordlists provided by Assetnote