awesome-bugbounty-tools

A curated list of various bug bounty tools

bug-bounty-roadmap

This roadmap is designed for beginners and combines the technical skills you need with the non-technical skills you need to succeed as a bug bounty hunter. It covers everything you need to know about cybersecurity and responsible disclosure.

burp-suite-pro

Activate Burp Suite Pro for Windows with Key-Generator and Key-Loader (Updated jdk)

cname-checker

Tired of checking CNAME records manually for your bulk subdomains? Let the CNAME Checker do it for you!

ctf-tools

Useful CTF Tools

cve-2013-4710-webview-rce-vulnerability

Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly implement the WebView class, which allows remote attackers to execute arbitrary methods of Java objects or cause a denial of service (reboot) via a crafted web page, as demonstrated by use of the WebView.addJavascriptInterface method, a related issue to CVE-2012-6636.

dnsreaper

dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!

fastbugbounty

Fast Bug Bounty Script

httpstatus

A bash script to scan URLs, Identify the status code and sort the according to the status codes.

jyfyi

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentesting-bible

Learn ethical hacking.Learn about reconnaissance,windows/linux hacking,attacking web technologies,and pen testing wireless networks.Resources for learning malware analysis and reverse engineering.

pwn

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

snip3r69

Config files for my GitHub profile.

spring-shell-vuln

Spring has Confirmed the RCE in Spring Framework. The team has just published the statement along with the mitigation guides for the issue. Now, this vulnerability can be tracked as CVE-2022-22965.

tailwindcssproject

test

vishwactf2k23

wordlist

Small but effective wordlist for brute-forcing and discovering hidden things.

xss-payload-list

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List