nazmul-ethi Goto Github PK

active-ip

🕵️‍♂️🔍 A tool with several scanning techniques that extracts live IP addresses from a list of IP addresses or CIDR notations.

aem-hacker

agartha

a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to spot authentication/authorization issues, and converts Http requests to Javascript for further XSS exploitation.

allforone

amass

In-depth attack surface mapping and asset discovery

automation

Learn how to automate XSS, SSRF, LFI, SQLI, NoSQLi

awesome-bugbounty-builder

Awesome Bug bounty builder Project

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

bbfuzzing.txt

bbscope

Scope gathering tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

bug-bounty-beginner-roadmap

This is a resource factory for anyone looking forward to starting bug hunting and would require guidance as a beginner.

bug-bounty-checklist

Ressources for bug bounty hunting

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bug-bounty-wordlists

A repository that includes all the important wordlists used while bug hunting.

bug_bounty_tools_and_methodology

Bug Bounty Tools used on Twitch - Recon

bypass-401-and-403

cloudflair

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

command_injection

Automated All-in-One OS Command Injection Exploitation Tool.

dalfox

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

dfuf

Dump files via Directory Traversal / LFI in a breeze with the help of ffuf

exploit

extract-all-url-endpoints-from-an-application

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

ffuf

Fast web fuzzer written in Go

galaxy-bugbounty-checklist

Tips and Tutorials for Bug Bounty and also Penetration Tests.

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

ghauri-sqli

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

gospider

Gospider - Fast web spider written in Go

hacker101

Hacker101

hacks

A collection of hacks and one-off scripts

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.