MPaandeey's Stars
B3nac/InjuredAndroid
A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.
maverickNerd/BugForaging
This repo includes my analysis of some public reports.
PentestPad/subzy
Subdomain takeover vulnerability checker
michenriksen/aquatone
A Tool for Domain Flyovers
shifa123/shodandorks
jakejarvis/awesome-shodan-queries
🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩💻
lc/subjs
Fetches javascript file from a list of URLS or subdomains.
dwisiswant0/findom-xss
A fast DOM based XSS vulnerability scanner with simplicity.
dwisiswant0/unew
A tool for append URLs, skipping duplicates/paths & combine parameters.
antichown/subdomain-takeover
Subdomain Takeover Scanner | Subdomain Takeover Tool | by 0x94
smaranchand/bucky
Bucky (An automatic S3 bucket discovery tool)
ksharinarayanan/SSRFire
An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects
dwisiswant0/crlfuzz
A fast tool to scan CRLF vulnerability written in Go
shenwei356/rush
A cross-platform command-line tool for executing jobs in parallel
owasp-amass/amass
In-depth attack surface mapping and asset discovery
ethicalhackingplayground/wordlistgen
Generates target specific word lists for Fuzzing with fuff
tomnomnom/anew
A tool for adding new lines to files, skipping duplicates
lc/gau
Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
KathanP19/Gxss
A tool to check a bunch of URLs that contain reflecting params.
dwisiswant0/bounty-targets-alert
It's an watcher for new scopes added to bounty-targets-data and send you alert to Slack.
KathanP19/JSFScan.sh
Automation for javascript recon in bug bounty.
KathanP19/HowToHunt
Collection of methodology and test case for various web vulnerabilities.
dwisiswant0/awesome-oneliner-bugbounty
A collection of awesome one-liner scripts especially for bug bounty tips.
christophetd/CloudFlair
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
projectdiscovery/httpx
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
KingOfBugbounty/KingOfBugBountyTips
Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..
michenriksen/gitrob
Reconnaissance tool for GitHub organizations
hahwul/WebHackersWeapons
⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting
1ndianl33t/Gf-Patterns
GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep
nahamsec/crtndstry
Yet another subdomain finder