kingofbugbounty Goto Github PK

airixss

Finding XSS during recon

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

assetfinder

Find domains and subdomains related to a given domain

axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

bbrf-client

The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices

bug-bounty-toolz

BBT - Bug Bounty Tools

bugbounty-checklist

Tips and Tutorials for Bug Bounty and also Penetration Tests.

bugbuntu

BugBuntu Linux

discovery-header-bug-bounty

Discovery Header Bug Bounty to DoD

dockerhunt

faraday_plugins

Security tools report parsers for FaradaySEC

freq

This is go CLI tool for send fast Multiple get HTTP request.

gitdorker

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

gotator

Gotator is a tool to generate DNS wordlists through permutations.

hackerone

404

hacks

A collection of hacks and one-off scripts

haktldextract

Extract domains/subdomains from URLs en masse

hostilesubbruteforcer

jid

json incremental digger

kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

kingrecon_dod

nuclearpond-ofjaaah

Nuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

osint-brazuca

Repositório criado com intuito de reunir informações, fontes(websites/portais) e tricks de OSINT dentro do contexto Brasil.

page-fetch

Fetch web pages using headless Chrome, storing all fetched resources including JavaScript files. Run arbitrary JavaScript on many web pages and see the returned values

parrot-core

Files to include in the package parrot-core.

rayder-workflows

Repo for hosting rayder workflows

samlists

Free, libre, effective, and data-driven wordlists for all!

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

secretfinder

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files