navidof5

navidof5's Stars

• RevoltSecurities/Subdominator

  SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty

  Language:Python47892

• CZ-NIC/knot-resolver

  Knot Resolver - resolve DNS names like it's 2025

  Language:C36659

• junegunn/fzf

  :cherry_blossom: A command-line fuzzy finder

  Language:Go66.7k2.4k

• mgdm/htmlq

  Like jq, but for HTML.

  Language:Rust7.2k116

• BishopFox/jsluice

  Extract URLs, paths, secrets, and other interesting bits from JavaScript

  Language:Go1.5k100

• Proviesec/google-dorks

  Useful Google Dorks for WebSecurity and Bug Bounty

  1k190

• sw33tLie/sns

  IIS shortname scanner written in Go

  Language:Go31843

• rix4uni/uforall

  uforall is a fast url crawler this tool crawl all URLs number of different sources, alienvault,WayBackMachine,urlscan,commoncrawl

  Language:Go378

• pikpikcu/nodesub

  Nodesub is a command-line tool for finding subdomains in bug bounty programs

  Language:JavaScript13724

• 0xSolanaceae/proXXy

  A super simple asynchronous multithreaded proxy scraper; scraping & checking ~500k HTTP, HTTPS, SOCKS4, & SOCKS5 proxies.

  Language:Python14619

• jhaddix/SubreconGPT

  Language:Python10221

• caido/caido

  🚀 Caido releases, wiki and roadmap

  1.2k57

• trufflesecurity/trufflehog

  Find, verify, and analyze leaked credentials

  Language:Go17.7k1.7k

• zricethezav/h1domains

  HackerOne "in scope" domains

  Language:Python416119

• r0oth3x49/ghauri

  An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

  Language:Python3.2k324

• kkrypt0nn/wordlists

  📜 A collection of wordlists for many different usages

  1.4k253

• tennc/fuzzdb

  Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

  Language:HTML1.4k626

• Medicean/SublimeXssEncode

  Converts characters from one encoding to another using a transformation.

  Language:Python359

• 0xacb/recollapse

  REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

  Language:Python96599

• n0kovo/n0kovo_subdomains

  An extremely effective subdomain enumeration wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.

  57079

• 3ndG4me/KaliLists

  Repo of all the default wordlists included in Kali. Convienent if you're using something other than Kali.

  Language:HTML21592

• xajkep/wordlists

  Infosec Wordlists and more.

  Language:Python786237

• hakluke/hakip2host

  hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.

  Language:Go43563

• gwen001/github-subdomains

  Find subdomains on GitHub.

  Language:Go685101

• cyspad/Weaponize-Your-Burp

  Weaponize Your Burp is a repository for automation your Bug Bounty Hunting mindset in Burp Suite

  7715

• khanjanny/check-list

  This checklist may help you to have a good methodology for bug bounty hunting When you have done a action, don't forget to check ;) Happy hunting !

  44

• Cgboal/DomainParser

  A very high performance Domain Name parser package in Go.

  Language:Go4515

• saeidshirazi/Awesome-Smart-Contract-Security

  A curated list of Smart Contract Security materials and resources For Researchers

  736129

• owasp-amass/amass

  In-depth attack surface mapping and asset discovery

  Language:Go12.2k1.9k

• resyncgg/ripgen

  Rust-based high performance domain permutation generator.

  Language:Rust27930