Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

Bug Bounty

A bug bounty program is a deal offered by many websites, organizations and software developers by which individuals can receive recognition and compensation for reporting bugs, especially those pertaining to security exploits and vulnerabilities.

https://github.com/aviksaikat/bug-bounty-essentials

All the tools you need for webapp pentesting & bug bouty hunting

bug-bounties bug-bounty-tools bugbounty bugbounty-tool linux tools

Last synced: 24 Jan 2025

https://github.com/x00tex/duckscripts

Collection of script i wrote during bug bounty hunting.

android-application apkpure-scraper bugbounty subdomain-enumeration

Last synced: 22 Jan 2025

https://github.com/spheronfdn/argo-bounty-issue

🐞ArGo Bug Bounty Program

bounty bugbounty

Last synced: 21 Jan 2025

https://github.com/arshadkazmi42/is-broken-link-github

Github Links Broken Status Checker

blc broken-links bugbounty github links python script

Last synced: 15 Dec 2024

https://github.com/h3xploit0x1/1line-bash

Collection Of Line BASH Useful for BugBounty.

bash bugbounty hacking

Last synced: 22 Jan 2025

https://github.com/pvnotpv/url-tree

Tool to generate a tree from a list of urls with color for each nodes.

bugbounty endpoint-discovery mitmproxy-addons pentesting pentesting-tools recon reconnaissance tree urls

Last synced: 22 Jan 2025

https://github.com/tigthor/hacktoolkit

Simplified Tool for Global Hackers. From Information Gathering to Exploitation and maintaining access

automation bugbounty hacking pentest pentest-tool

Last synced: 22 Jan 2025

https://github.com/lord3ver/gctsubdomains

Discover subdomains in Certificate Transparency logs using Google's Transparency Report

bugbounty go osint penetration-testing pentest recon subdomain subdomain-enumeration

Last synced: 21 Nov 2024

https://github.com/haccer/xmail

Go tool that detects which email addresses have domains which are able to be registered

account-takeover bug-bounty bugbounty cyber email go golang infosec osint pentesting redteam redteam-tools security

Last synced: 11 Nov 2024

https://github.com/pwnb0y/BugBounty-Scripts

Quick scripts to make life easier of a Hacker 😎

bash-script bugbounty vps-setup

Last synced: 23 Oct 2024

https://github.com/shreyaschavhan/bugbountywriteups

This Repository will contain Bug Bounty Write-Up that I read on daily basis!

bounty bounty-hunters bug-bounty bugbounty bugcrowd hackerone hackers payloads synack tools writeups

Last synced: 23 Oct 2024

https://github.com/bruston/sonar

Subdomain enumeration via the JSON API provided by https://sonar.omnisint.io/ which uses the Rapid7 dataset.

bugbounty infosec

Last synced: 23 Oct 2024

https://github.com/mathis2001/gitdiscloser

Python recon tool for Github information disclosure research

bugbounty github pentesting recon

Last synced: 09 Jan 2025

https://github.com/x00tex/rsiw

Collection of script i wrote during bug bounty hunting.

android-application apkpure-scraper bugbounty subdomain-enumeration

Last synced: 08 Feb 2025

https://github.com/jeninsutradhar/bug-bounty-command-arsenal

A comprehensive collection of 100 essential commands for ethical hacking and bug bounty hunting. This arsenal covers various aspects of security testing, including domain enumeration, vulnerability scanning, and more.

bug-bounty bug-bounty-tools bugbounty command-line ethical-hacking linux

Last synced: 09 Jan 2025

https://github.com/rtfmkiesel/drivebyte

A blazingly fast, cross-os cli tool to discover and take automated screenshots of websites

bugbounty chrome chromium discovery golang

Last synced: 27 Nov 2024

https://github.com/pocdork/gitdomain

Discover endpoints using companies GitHub Repositories name

bugbounty bugbounty-tool hacking infosec

Last synced: 21 Nov 2024

https://github.com/mrofisr/wordlist

Wordlist Collection for Security

bruteforce bugbounty database hacking wordlist

Last synced: 23 Jan 2025

https://github.com/rix4uni/org2asn

Extract ASN and IPs in bgp.he.net

bugbounty org-finder recon reconnaissance

Last synced: 07 Feb 2025

https://github.com/codeb0ss/cve-2023-20073-

Mass Exploit - CVE-2023-20073 - Cisco VPN Routers - [Unauthenticated Arbitrary File Upload and Stored XSS]

0day bug bugbounty cisco codeb0ss codeboss cve cve-2023-20073 exploit hackerone mass mass-exploit uncodeboss vpn-router

Last synced: 12 Jan 2025

https://github.com/qyfashae/bug_bounty_scripts

My private bug bounty scripts i have written under the years for real time projects within bug bounty hunting and penetration testing(red team).

bug-bounty-tools bugbounty bugbounty-tools exploits exploits-scripts hacking penetration-testing pentesting python-exploits

Last synced: 12 Jan 2025

https://github.com/n0kovo/random-agent

Simply output a random user-agent. Use it with tools that don't have a --random-agent flag. Like `random-agent` or $(random-agent)

appsec bug-bounty bug-bounty-tools bugbounty bugbounty-tool bugbountytools fuzzer fuzzing infosec infosectools pentesting pentesting-tools redteam-tools web-app-security webfuzzer

Last synced: 30 Dec 2024

https://github.com/acuciureanu/wp-plugins-analyzer

A WordPress plugins analyzer which is still work in progress anyway

bugbounty bugbounty-tool wordpress-security-scanner

Last synced: 19 Jan 2025

https://github.com/hunthubspace/cve-2024-0757-exploit

A PoC Exploit for CVE-2024-0757 - Insert or Embed Articulate Content into WordPress Remote Code Execution (RCE)

bugbounty cve ethical-hacking exploit penetration-testing web

Last synced: 31 Jan 2025

https://github.com/mrnazu/tryhackme-ctf-s

Capture the Flag (CTF) is a cybersecurity competition that is used as a test of security skills.

bugbounty burpsuite csrf ctf-writeups idor openredirect rce recon sqlinjection tryhackme webhacking xss-vulnerability xxe-injection

Last synced: 18 Jan 2025

https://github.com/proditis/bugbounty-journal

The journal of a unix geek taking its first steps into the BugBounty world...

bugbounty funny journal

Last synced: 01 Feb 2025

https://github.com/hellblack55/dobby

This script finds subdomains and URLs, filters them into .js, .json, and sensitive categories, and helps streamline your security assessments and bug hunting.

bash bash-script bug bug-bounty bugbounty bugbounty-tool

Last synced: 08 Feb 2025

https://github.com/rundtstykker/subdomain-crawler-application-security-

A simple & lightweight domain crawler that uses a pre-defined wordlist to discover subdomains on specified domain

bugbounty python subdomain

Last synced: 07 Jan 2025

https://github.com/b1narygl1tch/awesome-oauth-sec

OAuth2.0 and OpenID from an information security perspective

bugbounty information-security infosec oauth2 security

Last synced: 19 Dec 2024

https://github.com/xthezealot/saar

Saar is a bug bounty script combining the best tools for a smooth recon workflow

bugbounty dns http hunting nuclei pentesting recon redteam scanner security subdomain vulnerability

Last synced: 09 Feb 2025

https://github.com/mateofumis/xunifedparams.py

Python script for Unify all Parameters with all URLs.

bugbounty bugbountytips hacking hacking-tool pentesting python

Last synced: 06 Feb 2025

https://github.com/ranskyth/steet

ferramenta automatizada para web recon

bugbounty bughunter hacker hacking hacking-tool recon

Last synced: 10 Jan 2025

https://github.com/abhinandan-khurana/l337_5ub0v3r

A python tool to check subdomain takeover vulnerability

bugbounty cybersecurity docker pentesting python3

Last synced: 10 Jan 2025

https://github.com/hunthubspace/subscope

SubScope is a Python-based command-line tool that helps you manage domains and subdomains in workspaces using an SQLite database.

automation bugbounty bugbounty-tool database ethical-hacking exploit penetration-testing python sqlite web web-penetration-testing

Last synced: 31 Jan 2025

https://github.com/mathis2001/Reflection

Reflected parameters checker for a list of urls. (Beta version needing a lot of improvement)

bugbounty parameters pentest reflected

Last synced: 23 Oct 2024

https://github.com/opcod3r/godan

Shodan tool subdomains with rotation keys.. 🎩

bugbounty bugbounty-tool golang pentest recon security shodan subdomains

Last synced: 02 Jan 2025

https://github.com/mamad4ever/next-dork

Useful Google Dorks for Bug Bounty

bug-bounty bug-bounty-tools bugbounty google-dorks

Last synced: 01 Feb 2025

https://github.com/mathis2001/qrecipe

QRecipe is a simple python script that have been designed to fuzz Android and iOS apps QR code readers for multiple vulnerabilities depending on the given wordlist.

android-application appsec bugbounty fuzzing ios-app pentest qrcode qrcode-generator tool

Last synced: 09 Jan 2025

https://github.com/acuciureanu/log-name-generator

A tool which enhances fuzzing with date-formatted log file names.

bugbounty bugbounty-tool bugbountytips content-discovery fuzzing wordlist wordlist-generator

Last synced: 19 Jan 2025

https://github.com/topscoder/aisubs

Leverage the power of AI to find hard to find subdomains.

ai bugbounty bugbounty-tools chatgpt infosec security subdomain subdomain-finder

Last synced: 12 Jan 2025

https://github.com/Retr0-45809/autorecon

An automation tool to perform multiple reconnaissance attacks on a domain instantly

bugbounty bugbountyautomation reconnaissance

Last synced: 23 Oct 2024

https://github.com/andreystepanov/pentesterland-writeups

Pentester Land's curated collection of bug bounty writeups in formatted JSON

bugbounty bugbounty-writeups pentesterland pentesting writeups

Last synced: 09 Jan 2025

https://github.com/n0kovo/dnsplz

A simple Bash script that resolves a list of domains from stdin to IP addresses and prints them to stdout

bug-bounty bugbounty dns dns-enum dns-enumeration dns-lookup dns-lookups dns-reconnaissance dns-requests dns-resolver

Last synced: 30 Dec 2024

https://github.com/0xrobiul/FInstall

It's An Automation Script Which Will Automatically Install Tools For Bug Hunting/Web-Application Penetration Testing!

bugbounty cyber-security hacking penetration-testing pentesting

Last synced: 23 Oct 2024

https://github.com/remonsec/remonsec.github.io

My personaal blog website

bugbounty cybersecurity infosec

Last synced: 29 Jan 2025

https://github.com/sumidcyber/secureye

🔒 SecurEye: Web Security Simplified SecurEye helps you keep your website safe with log analysis and IP/port scanning. Get protected now on GitHub!

bugbounty bugbounty-tools ip ip-port-scanning ipscanner log-analysis log-analytics port portscanner python python3 web-scanner webserver website wifi-hacking

Last synced: 29 Jan 2025

https://github.com/sa7mon/vulnchest

A collection of vulnerable applications for research purposes

bugbounty cve infosec

Last synced: 12 Jan 2025

https://github.com/hunthubspace/ssm-subscopemongo

SubScopeMongo is a Python-based command-line tool that helps you manage domains and subdomains in workspaces using an MongoDB database.

automation bugbounty bugbounty-tool cybersecurity database ethical-hacking mongodb penetration-testing python

Last synced: 31 Jan 2025

https://github.com/hunthubspace/torwatch

TorWatch is a powerful bash script for monitoring the availability of websites through the Tor network. It manages IP address rotation, blocks IP addresses if the site is inaccessible, and logs activities for tracking events.

bash-scripting bugbounty exploit penetration-testing tor web-penetration-testing

Last synced: 31 Jan 2025

https://github.com/adarshaddee/httpsx

Bug Bounters and others can also use this tool to make make any link accessible on browser.

adarsh-addee adarshaddee bug-bounty bugbounty codarsh cyber-security cybersecurity hackers hacking https httpsx mr-idealhat mridealhat

Last synced: 27 Dec 2024

https://github.com/subnwa/erc-cli

It is a CLI source that works ergonomically and systematically within the system. These errors are added to the database with customization. In addition, it ensures that the bugs that occur in the system do not create system vulnerabilities.

bit bits bugbounty cargo cli creates db error-handling lang line rust terms

Last synced: 16 Jan 2025

https://github.com/gustavogss/scanner-penetration

Ferramenta de scanner a procura de portas abertas em um host - desenvolvida em Python

bugbounty portscanner python3

Last synced: 26 Jan 2025

https://github.com/mrnazu/directory-scanner-tool

Directory brute forcing is a web application technology used to find and identify possible hidden directories in websites. This is done with the aim of finding forgotten or unsecured web directories to see if they are vulnerable to exploitation.

bruteforce bugbounty directory directory-bruteforce hacking hidden-directory information-disclosure pentesting python3 url-fuzzer web-hacking-tool

Last synced: 18 Jan 2025

https://github.com/arshadkazmi42/wbm

Waybackmachine to pull all wayback urls of input domain

bugbounty wayback-machine

Last synced: 08 Feb 2025

https://github.com/rix4uni/certinfo

Scrape domain names from Certificate Subject Alternative Name

bugbounty recon reconnaissance scrape ssl tls

Last synced: 07 Feb 2025

https://github.com/eagleeggs/bugbounties

Authorized dislosures of bugbounties that have been resolved

bugbounty bugcrowd fitbit penetration-testing security

Last synced: 10 Jan 2025

https://github.com/rix4uni/scope

An automated GitHub Actions-based crawler that fetches and updates public scopes from popular bug bounty platforms (like Hackerone/Bugcrowd/Intigriti/etc) (updates every 10 minutes)

bug-bounty bugbounty bugbountytips bugcrowd hackenproof hackerone hacking infosec intigriti osint osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools vrp yeswehack

Last synced: 07 Feb 2025

https://github.com/rix4uni/cspfinder

Discover new target domains using Content Security Policy

bugbounty content-security-policy csp golang hacking recon reconnaissance security

Last synced: 07 Feb 2025

https://github.com/hackshiv/jsurlextractor

A simple bash script to extract more urls from js endpoints

bugbounty endpoints extractor javascript jsextractor

Last synced: 11 Jan 2025

https://github.com/mathis2001/EzComments

EzComments is a tool allowing you to get all html and js comments of each url given to him

bugbounty comments pentest recon

Last synced: 23 Oct 2024

https://github.com/cbrnrd/lacewing

🦗Your neighborhood bug bounty assistant

bug bugbounty bugcrowd hackerone ruby rubygems

Last synced: 31 Jan 2025

https://github.com/hoshigakikisame/hostprobe

Host Probe is a Python script that simplifies host discovery using ICMP ping. It enables users to determine the status of a list of IP addresses or domain names, helping identify hosts that are online (UP) or offline (DOWN).

bugbounty cybersecurity prober

Last synced: 07 Jan 2025

https://github.com/jsmoreira02/lfi-hunter

Automated tool to bypass filtering systems and exploit Local File Inclusion, created for Bug Bounty tests and better optimization during the hack (and with special attention to CTFs)

bugbounty ctf-tools cybersecurity hacking-tool lfi-exploitation

Last synced: 19 Jan 2025

https://github.com/GabrielCS0/security-trails

This is a tool to automate the search for subdomains on the website securitytrails.com

bugbounty pentesting python recon subdomains

Last synced: 23 Oct 2024

https://github.com/rudsarkar/phar-vulnerability

Code for exploiting phar vulnerability for educational purpose for my Medium blog

bugbounty php phpphar source-code

Last synced: 19 Jan 2025

https://github.com/emrekybs/leaks

bash script to check data leakage on websites

bugbounty discovery leask reconnaissance webpentesting

Last synced: 19 Jan 2025

https://github.com/carloocchiena/subdomain_scanner

A simple script that ping up to 10K most common subdomains in a target website and returns a list of finding.

bugbounty networking scanner vulnerability-scanners

Last synced: 26 Jan 2025

https://github.com/shingareom/pentestingtools

This repository contains a collection of tools designed for automating penetration testing, while also being valuable for manual testing. Leveraging these tools can enhance both the efficiency and effectiveness of your security assessments.

bugbounty pentesting-tools webpentest

Last synced: 19 Jan 2025

https://github.com/mathis2001/jsembed

Simple Python tool to embed JavaScript code in different types of files (pdf and svg for now)

bugbounty fileupload javascript pdf pentest svg xss

Last synced: 09 Jan 2025

https://github.com/y-mo4n1ngst3r/evillan

A tool for create encoded payloads and test them on targets

bugbounty bugbounty-tools cybersecurity hacking-tool offensive-security pentesting

Last synced: 09 Feb 2025

https://github.com/vin-hacks/querywatch

Simple script to detect changes in a GraphQL api where introspection is enabled.

api bash bash-script bugbounty cybersecurity graphql tool

Last synced: 23 Jan 2025

https://github.com/rtfmkiesel/geopipe

A pipeline tool to filter domains by server location

bugbounty golang maxmind

Last synced: 26 Jan 2025

https://github.com/cak/foot

Foot is a library that fetches a list of URLs and silly walks through each site to gather information.

bugbounty crawler scraping

Last synced: 14 Jan 2025

https://github.com/sysevil/rusho

subdomain tool cli for shodan by Rust lang

bugbounty hacking hacking-tool recon reconnaissance rust rust-lang subdomain-enumeration

Last synced: 09 Feb 2025

Bug Bounty Awesome Lists
awesome-hacker-search-engines 510 Awesome-Bugbounty-Writeups 604 awesome-bugbounty-tools 339 WebHackersWeapons 408 awesome-mobile-security 246 awesome-hacking-lists 11,214 awesome-vulnerable-apps 88 MobileHackersWeapons 71 netlas-cookbook 234 awesome-bbht 80 Awesome-OSINT-For-Everything 1,196 awesome-cicd-attacks 82 awesome-cybersec 301 Awesome-HTTPRequestSmuggling 44 awesome-security 57 awesome-oauth-sec 54 awesome-thm-rooms 97
Bug Bounty Categories
Python 3,011 Cross Site Scripting (XSS) 1,921 Others 1,566 Go 1,149 Java 853 Shell 688 JavaScript 630 Uncategorized 538 C 520 Weapons 451 Remote Code Execution (RCE) 446 C# # 428 C++ 388 Subdomain Takeover 316 HTML 259 Android 244 PHP 228 PowerShell 228 Cross Site Request Forgery (CSRF) 187 TypeScript 164