gwen001/bugbountytips

Stars
67
Rank 462,689 (Top 10 %)
Language
CSS
License
MIT License
Created over 4 years ago
Updated about 2 years ago

gwen001/bugbountytips

gwen001

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Webapp to search tips on Twitter through #bugbountytips

pentest-tools

A collection of custom security tools for quick needs.

github-search

A collection of tools to perform searches on GitHub.

github-subdomains

Find subdomains on GitHub.

s3-buckets-finder

Find AWS S3 buckets and test their permissions.

cloudflare-origin-ip

Try to find the origin IP of a webapp protected by Cloudflare.

BB-datas

Tools and datas related to Bug Bounty.

github-endpoints

Find endpoints on GitHub.

offsectools_www

A vast collection of security tools and resources curated by the community.

DataExtractor

A Burp Suite extension to extract datas from source code while browsing.

related-domains

Find related domains of a given domain.

dnspy

Find subdomains and takeovers.

vhost-brute

A PHP tool to brute force vhost configured on a server.

actarus

Actarus is a custom tool for bug bounty

github-regexp

Basically a regexp over a GitHub search.

gitlab-subdomains

Find subdomains on GitLab.

myrecon.py

My recon script

keyhacks.sh

Automation of tokens/api keys testing.

google-search

Returns results from Google search.

bxss

Alternative to XSS Hunter for blind XSS.

BBstats

Bug Bounty statistics tool.

BBvuln

A listing of the most common vuln that you can link in your PoCs

testxss

PHP tool to test XSS

favicon-hashtrick

Python script implementing the favicon hash trick to find subdomains.

detectify-cves

Find CVEs that don't have a Detectify modules.

csp-analyzer

Analyze Content-Security-Policy header of a given URL.

gitgrep

Webapp to perform regexp search over GitHub search.

dnsexpire

Test domain expiration dates.

apk-analyzer

Analyze an APK archive.

extract-endpoints

Extract endpoints from source files.

urlgrabber

PHP tool to grab urls of a specific site.

gitpillage

Extract data from a .git directory.

shotTheWorld

PHP tool that takes screenshots of a given ips/ports combo list and then try to guess the service.

graphql-introspection-analyzer

Graphql introspection query analyzer.

php-stegano-lsb

Hide file using Least Significant bits method.

testidor

PHP tool to test IDOR

dotfiles

3rdparty-services

PHP tool to test 3rd party service validity

gwen001

autoknoxss

Custom PHP tool to automate calls to KNOXSS

act_custom

Custom scripts for Actarus

testcrlf

PHP tool to test CRLF

icmp-send-file

send file with ping

ipsites

PHP tool to find websites hosted by a given ip

thegarden

Vulnerable web application made with Laravel.

testcors

PHP tool to test CORS

testionion

PHP script to find onion websites

10degres.net_jenkins

http://10degres.net

testcsrf

PHP tool to test CSRF

ultimate-open-redirect

PHP tool to test open redirect

testssrf

PHP tool to test SSRF

MyPhpDirb

GoBuster like written in PHP

setricks

Small search engine tool usefull to find the position of a given website

gwen001.github.io

Silence is golden.

testgo

poc_subto

github-stargizer

View stars evolution of GitHub repositories.