Projects in Awesome Lists by rix4uni
A curated list of projects in awesome lists by rix4uni .
https://github.com/rix4uni/scope
An automated GitHub Actions-based crawler that fetches and updates public scopes from popular bug bounty platforms (like Hackerone/Bugcrowd/Intigriti/etc) (updates every 10 minutes)
bug-bounty bugbounty bugbountytips bugcrowd hackenproof hackerone hacking infosec intigriti osint osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools vrp yeswehack
Last synced: 06 Mar 2026
https://github.com/rix4uni/medium-writeups
This repository updates latest Bug Bounty medium writeups every 10 minutes, https://readmedium.com/Medium_URL, https://archive.ph/Medium_URL, https://freedium.cfd/Medium_URL
bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance reconnaissance-bugbounty-writeups security security-tools threat-intelligence
Last synced: 15 Apr 2025
https://github.com/rix4uni/wordlist
Custom wordlist, updated regularly
bug-bounty bugbounty bugbountytips fuzzing hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence wordlist
Last synced: 26 Jul 2025
https://github.com/rix4uni/xssrecon
XSSRecon automates the process of testing URL parameters for reflection of a test payload rix4uni and further checks how special characters are handled (allowed, blocked, or converted).
bug-bounty bugbounty bugbountytips hacking infosec masshuntxss osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools vulnerability xss xss-automation xssrecon
Last synced: 04 Mar 2026
https://github.com/rix4uni/uforall
uforall is a fast url crawler this tool crawl all URLs number of different sources, alienvault,WayBackMachine,urlscan,commoncrawl
alienvault bugbounty commoncrawl crawler osint recon reconnaissance urlscan wayback
Last synced: 15 Apr 2025
https://github.com/rix4uni/nucleihub-templates
This repo collects nuclei template from 600+ github repos, updates every 6 hours.
bug-bounty bugbounty bugbountytips exploits fingerprint hacking infosec nuclei nuclei-templates osint osint-resources penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence vulnerability-detection
Last synced: 27 Feb 2026
https://github.com/rix4uni/cvemapping
This repo Gathers all available cve exploits from github.⚠️ Be careful Malware.
bug-bounty bugbounty bugbountytips cve exploits hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence
Last synced: 15 Apr 2025
https://github.com/rix4uni/email-inventory
Email OSINT for public bug bounty programs, Email list updated regularly.
Last synced: 15 Apr 2025
https://github.com/rix4uni/xsschecker
xsschecker tool checking reflected endpoints finding possible xss vulnerable endpoints.
bugbounty masshuntxss recon reconnaissance vulnerability xss xss-automation xsschecker
Last synced: 15 Apr 2025
https://github.com/rix4uni/subdog
subdog is a subdomain enumeration tools, this tool collect number of different sources to create a list of root subdomains
bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools subdomain subdomain-enumeration threat-intelligence wayback-machine
Last synced: 15 Apr 2025
https://github.com/rix4uni/resolvers
List of Fresh DNS resolvers updates every 1 hour
bug-bounty bugbounty bugbountytips dns hacking infosec network osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance resolver resolvers security security-tools threat-intelligence
Last synced: 07 Feb 2026
https://github.com/rix4uni/socialfinder
Hunt down social media accounts by username across social networks using httpx
bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence
Last synced: 19 Feb 2026
https://github.com/rix4uni/gitxpose
Discover GitHub repositories and hunt for leaked credentials with style
bugbounty enumeration github-osint github-repository-search github-user-search osint penetration-testing penetration-testing-tools pentesting pentesting-tools recon reconnaissance security
Last synced: 01 Mar 2026
https://github.com/rix4uni/pyxss
Simple XSS vulnerability checker tool very useful with xsschecker.
bugbounty masshuntxss recon reconnaissance vulnerability xss xss-automation xsschecker xssvalidator
Last synced: 21 Nov 2025
https://github.com/rix4uni/tldscan
A high-performance domain scanner that discovers active domains by testing multiple Top-Level Domains (TLDs) for given domain names.
bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence tldfinder tldscanner
Last synced: 20 Apr 2026
https://github.com/rix4uni/pvreplace
Accept URLs on stdin, replace all query string values with a user-supplied value
bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence
Last synced: 15 Apr 2025
https://github.com/rix4uni/unew
A tool combined of 2 commands features in 1 sort and tee for adding new lines to files, skipping duplicates
bug-bounty bugbounty bugbountytips duplicates hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence
Last synced: 15 Apr 2025
https://github.com/rix4uni/originip
originip finds origin ip from dig, shodan, censys, securitytrails, viewdns, hunter how, fofa, zoomeye.
bug-bounty bugbounty bugbountytips hacking infosec origin-ip originipfinder osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence
Last synced: 15 Oct 2025
https://github.com/rix4uni/techfinder
A high-performance technology detection tool built with Go, leveraging the projectdiscovery wappalyzergo library to identify web technologies and frameworks.
bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools technology threat-intelligence
Last synced: 19 Jun 2026
https://github.com/rix4uni/msarjun
Mass-scale hidden parameter discovery using Arjun. A high-performance wrapper that parallelizes Arjun for efficient parameter discovery across multiple targets.
api-fuzzer api-fuzzing api-testing arjun bug-bounty bugbounty bugbountytips content-discovery hacking infosec osint osint-tool parameter-discovery penetration-testing pentest-tool pentesting recon reconnaissance security security-tools
Last synced: 07 Apr 2026
https://github.com/rix4uni/ftpx
ftpx is a small CLI utility to attempt FTP logins using either a single username with a password wordlist, or a file of username:password pairs.
bruteforce ftp ftp-default-credentails ftp-password ftp-username ftpbruteforcer password password-generator
Last synced: 05 Feb 2026
https://github.com/rix4uni/targets-filter
Converting trickest and chaos bbp targets in json, updates every 12 hour
bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence
Last synced: 06 Mar 2026
https://github.com/rix4uni/SubDog
subdog is a subdomain enumeration tools, this tool collect number of different sources to create a list of root subdomains
recon reconnaissance subdomain subdomain-enumeration wayback-machine
Last synced: 12 Jul 2025
https://github.com/rix4uni/portmap
portmap is a fast portscan tool, uses shodan public data for port scan used internetdb.shodan.io and api.shodan.io/shodan/host
bug-bounty bugbounty bugbountytips hacking infosec internetdb osint osint-resources penetration-testing pentest-tool pentesting port-enumeration portscanner recon reconnaissance scan-ports security security-tools shodan threat-intelligence
Last synced: 28 Aug 2025
https://github.com/rix4uni/jsmanager
A high-performance Go tool for discovering and extracting JavaScript files from domains. JSManager aggregates results from multiple reconnaissance tools and verifies JavaScript URLs in parallel.
Last synced: 15 Jun 2026
https://github.com/rix4uni/haktrailsfree
Get 10k subdomains in securitytrails using cookie without apikey.
bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools subdomain-enumeration subdomains threat-intelligence
Last synced: 09 May 2025
https://github.com/rix4uni/linkinspector
linkinspector is a fast command-line tool for inspecting URLs and retrieving HTTP status codes, content lengths, and content types. It supports filtering and matching responses, and can process URLs from stdin or files.
bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence
Last synced: 17 Feb 2026
https://github.com/rix4uni/gf-patterns
grep parameters (allparam,idor,lfi,rce,redirect,sqli,ssrf,ssti,xss)
bug-bounty bugbounty bugbountytips gf gf-patterns hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence
Last synced: 12 Feb 2026
https://github.com/rix4uni/commoncrawlscans
A high-performance Go tool for scanning CommonCrawl index files, extracting URLs, and filtering them by file extensions. This tool processes CommonCrawl data concurrently and efficiently extracts URLs matching specific file types.
Last synced: 14 Jan 2026
https://github.com/rix4uni/paramfinder
Find input and textarea hidden parameters in html.
bug-bounty bugbounty bugbountytips hacking hidden-parameters infosec osint osint-resources osint-tool parameters penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence
Last synced: 20 Jan 2026
https://github.com/rix4uni/jscrawler
Fetches javascript file from a list of URLS or subdomains.
bugbounty hacking javascript pentesting recon reconnaissance urls
Last synced: 18 Apr 2026
https://github.com/rix4uni/org2asn
Extract ASN and IPs in bgp.he.net
bug-bounty bugbounty bugbountytips hacking infosec org-finder osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence
Last synced: 16 Mar 2026
https://github.com/rix4uni/burpsuite-config
Useful "Match and Replace" & "TLS Pass Through" in Burpsuite Rules
bug-bounty bugbounty bugbountytips burp burpsuite hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence
Last synced: 02 Aug 2025
https://github.com/rix4uni/lfifinder
A fast and efficient Local File Inclusion (LFI) vulnerability scanner written in Go. This tool automates the process of testing URLs for LFI vulnerabilities by replacing parameter values with payloads and checking responses.
Last synced: 17 Jul 2026
https://github.com/rix4uni/dlevel
Filter list of subdomains by level.
bugbounty domain-level enumeration infosec infosectools penetration-testing penetration-testing-tools pentesting pentesting-tools recon reconnaissance security subdomain subdomain-enumeration subdomain-finder subdomain-level subdomain-scanner
Last synced: 31 Jan 2026
https://github.com/rix4uni/dirless
dirless is a CLI tool to match, highlight, and categorize URLs using configurable regex patterns.
bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence
Last synced: 16 Feb 2026
https://github.com/rix4uni/favinfo
favinfo scrapes favicon in HTML code and many other different ways.
bugbounty favicon favicon-generator favicon-hash favicon-hash-generator favicon-recon recon recon-tool reconnaissance
Last synced: 05 Jun 2026
https://github.com/rix4uni/ip2org
Find org name using ip address
bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence
Last synced: 11 Jul 2025
https://github.com/rix4uni/certinfo
Scrape domain names from SSL certificates of arbitrary hosts
bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance scrape security security-tools ssl threat-intelligence tls
Last synced: 09 May 2025
https://github.com/rix4uni/pentestingtools
A vast collection of security tools for ethical hackers and security researchers
bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence
Last synced: 09 May 2025
https://github.com/rix4uni/waybackzips
waybackzips - find backup files using web.archive.org
Last synced: 31 Mar 2025
https://github.com/rix4uni/timelimitx
timelimitx is alternative advanced version of timeout command.
bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence timeout
Last synced: 13 Feb 2026
https://github.com/rix4uni/gxss
A tool to check a bunch of URLs that contain reflecting params.
bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence
Last synced: 14 Jul 2026
https://github.com/rix4uni/wordgen
Easy wordlist generator tool for backup files.
backup-files bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence wordlist-generator
Last synced: 30 Jan 2026
https://github.com/rix4uni/whoxysubs
Scrape whoxy subdomains without api key.
bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance scrape security security-tools subdomains threat-intelligence
Last synced: 31 Mar 2025
https://github.com/rix4uni/cspfinder
Discover new target domains using Content Security Policy
bugbounty content-security-policy csp golang hacking recon reconnaissance security
Last synced: 02 Feb 2026
https://github.com/rix4uni/gf
A wrapper around grep, to help you grep for things
bug-bounty bugbounty bugbountytips gf gf-patterns hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence
Last synced: 13 Feb 2026
https://github.com/rix4uni/bxssreplace
A specialized Go tool for replacing blind XSS usernames in payloads, specifically designed for use with the ezXSS service.
Last synced: 13 Jan 2026
https://github.com/rix4uni/rcert
Recursive Certificate_Subject_Alternative_Name Scan
bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance scrape security security-tools ssl threat-intelligence tls
Last synced: 21 Jul 2026
https://github.com/rix4uni/builtwithsubs
Scrape builtwith relationships without cookie and api key.
bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance scrape security security-tools subdomains threat-intelligence
Last synced: 11 Aug 2025
https://github.com/rix4uni/ddorky
DDROKY Dorks Hunter extract sensitive links/urls using Google Dorks
Last synced: 31 Mar 2025
https://github.com/rix4uni/bug-bounty-tampermonkey-scripts
bug-bounty bugbounty bugbountytips crunchbase-paywall google-dorking hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools tampermonkey threat-intelligence
Last synced: 30 Jun 2025
https://github.com/rix4uni/gorker
Google dorking with Selenium.
bug-bounty bugbounty bugbountytips dorking google-dorking hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence
Last synced: 31 Mar 2025
https://github.com/rix4uni/robotxt
Extract endpoints marked as Allow and Disallow in robots.txt
bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance robots-txt security security-tools threat-intelligence
Last synced: 08 Feb 2026
https://github.com/rix4uni/parasplit
Split wildcards.txt and Run parallelly
Last synced: 08 Sep 2025
https://github.com/rix4uni/wordpress-plugins
Scrape all wordpress plugins (updates every 6 hour)
bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance scraper-wordpress-plugin-addon security security-tools threat-intelligence wordpress wordpress-plugin wordpress-scraper
Last synced: 22 Mar 2025
https://github.com/rix4uni/pathcrawler
Discover new paths via scanning html.
bug-bounty bugbounty bugbountytips crawler hacking infosec osint osint-resources osint-tool pathcrawler penetration-testing pentest-tool pentesting recon reconnaissance scrape security security-tools threat-intelligence
Last synced: 17 Feb 2026
https://github.com/rix4uni/gitrepoenum
Download all github repositories of a org, user, fetch all member of a org, then Find leaked credentials.
bugbounty enumeration github-osint github-repository-search github-user-search osint penetration-testing penetration-testing-tools pentesting pentesting-tools recon reconnaissance security
Last synced: 09 May 2025
https://github.com/rix4uni/zerobounce
A Go CLI tool to verify email addresses through format validation, MX record checks, and SMTP verification.
Last synced: 15 Jun 2026
https://github.com/rix4uni/gobuild
A lightweight Go cross-compilation tool that automatically builds and packages your Go applications for multiple platforms, **You can easily upload these releases on github**.
Last synced: 02 Apr 2026
https://github.com/rix4uni/ipfinder
IP Finder tool, ipfinder collects ip address from different sources like Shodan, Zoomeye, Viewdns, dig command, etc.
bug-bounty bugbounty bugbountytips dig hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools shodan threat-intelligence viewdns zoomeye
Last synced: 16 Dec 2025
https://github.com/rix4uni/gosqli
gosqli is a fast and simple tool for detecting blind SQL injection vulnerabilities. It supports scanning URLs with custom payloads, parallel requests, and response time-based verification.
bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools sql-injection sqli threat-intelligence
Last synced: 29 Oct 2025
https://github.com/rix4uni/emailautomation
A powerful Go-based tool for automating bug bounty report emails. This tool processes markdown files, extracts target domains, finds email addresses, and sends beautifully formatted HTML emails to recipients.
Last synced: 13 Jan 2026
https://github.com/rix4uni/nucleihubquery
A bash script that extracts `shodan-query, google-query, censys-query, fofa-query, hunter-query, zoomeye-query` in nucleihub-templates.
bug-bounty bugbounty bugbountytips censys fofa google hacking hunter infosec nuclei nuclei-templates nucleihub-templates osint pentesting recon reconnaissance security security-tools shodan zoomeye
Last synced: 08 Apr 2025
https://github.com/rix4uni/nsfwdetector
A tool to detect website for NSFW content based on a keyword list like `porn`, `adult`, `xxx`, `hentai`.
Last synced: 31 Mar 2025
https://github.com/rix4uni/junkcleaner
A bash script that delete's Windows and Windows Subsystem for Linux (WSL) temporary files.
Last synced: 10 Jun 2025
https://github.com/rix4uni/tldinfo
Accurately separates a URL’s subdomain, domain, and public suffix, using the Public Suffix List (PSL).
bug-bounty bugbounty bugbountytips country-codes hacking infosec osint penetration-testing pentest-tool pentesting publicsuffix publicsuffixlist python recon reconnaissance security security-tools suffix tld tldextract
Last synced: 31 Mar 2025
https://github.com/rix4uni/arinrange
Net Range scraping on whois.arin.net
bug-bounty bugbounty bugbountytips hacking infosec net-range osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance scrape security security-tools threat-intelligence
Last synced: 31 Mar 2025
https://github.com/rix4uni/wppdm
bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance scraper-wordpress-plugin-addon security security-tools threat-intelligence wordpress wordpress-plugin wordpress-scraper
Last synced: 28 Apr 2026
https://github.com/rix4uni/proxychains_setup
proxychains and tor (change ip ~2 seconds)
bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence
Last synced: 05 Oct 2025
https://github.com/rix4uni/gocl
gocl is similar tool like go install command that install's go tools.
bug-bounty bugbounty bugbountytips go golang golang-tools hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence tools
Last synced: 31 Mar 2025
https://github.com/rix4uni/vulntechx
vulntechx finds vulnerabilities based on tech stack using nuclei tags or fuzzing with ffuf.
Last synced: 31 Mar 2025
https://github.com/rix4uni/webpentestinglabs
XSS, SQLI, LFI, RCE Practice Labs in php
bug-bounty bugbounty bugbountytips hacking infosec labs osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools sqli threat-intelligence vulnerable-labs xss
Last synced: 31 Mar 2025
https://github.com/rix4uni/bugbountydata
List of Public Bug Bounty and Responsible Disclosure Programs
Last synced: 02 Aug 2025
https://github.com/rix4uni/stoppiracy
A powerful Go tool that combines the functionality of `nsfwdetector`, `favinfo`, and `emailextractor` into a single unified tool. Process domains efficiently with just **one HTTP request** per domain while collecting keywords, favicons, and emails simultaneously.
Last synced: 13 Jan 2026
https://github.com/rix4uni/sshbruteforce
SSHBruteForce - A faster & simpler way to bruteforce SSH server
brute-force bruteforce password ssh ssh-default-credentails ssh-password ssh-password-generator ssh-username sshbruteforce
Last synced: 31 Mar 2025
https://github.com/rix4uni/ipranges
Get Target specific IP ranges using https://ipinfo.io/products/ranges-api without apikey.
Last synced: 31 Mar 2025
https://github.com/rix4uni/programminglangaugetesting
Testing all programming langauge speed
Last synced: 31 Mar 2025
https://github.com/rix4uni/urlflux
A fast web crawler for gathering URLs, JavaScript files, and hidden parameters.
Last synced: 15 Jun 2026