b1luuu Goto Github PK

arno

An automation tool to install the most popular tools for bug bounty or pentesting.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

bbdomains.txt

burp_bug_finder

Automatic Bug finder with buprsuite

cctv

Close-Circuit Telegram Vision revolutionizes location tracking with its open-source design and Telegram API integration. Offering precise tracking within 50-100 meters, users can monitor others in real-time for logistics or safety, redefining how we navigate our surroundings

cloudbunny

CloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye.

content-type-research

Content-Type Research

digitalinnovation.github.io

entrypoint_enum

Web Crawler for Identifying Entry Points

exploits

extractsplittedapps

form_finder

This script can be used to find html forms in the list of endpoints/urls.

fuzzing-templates

Community curated list of nuclei templates for finding "unknown" security vulnerabilities.

gitgraber

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

hacktools

My personal dotfiles

hakip2host

hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.

hakoriginfinder

Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!

jspector

A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues

kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

matchandreplace

Match and Replace script used to automatically generate JSON option file to BurpSuite

n0kovo_subdomains

An extremely effective subdomain enumeration wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.

nrich

nuclei-bug-hunter

i will upload more templates here to share with the comunity.

nuclei-wordfence-cve

You just found a hidden gem 💎 This repo contains a massive amount (8000+) of WordPress related Nuclei templates. Updated daily!

one-liners

A collection of awesome one-liners for bug bounty hunting.

pdtm

ProjectDiscovery's Open Source Tool Manager

penetration-list

Penetration-List: A comprehensive resource for testers, covering all types of vulnerabilities and materials used in Penetration Testing. Includes payloads, dorks, fuzzing materials, and offers in-depth theory sections. Visit our Medium profile for more information.

quickcert

A better way of querying certificate transparency logs

radare2

unix-like reverse engineering framework and commandline tools

reconaizer

A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomains and more!