Pinned Repositories
AdminBomber
bruteforce the admin panel
advanced-sql-injection-for-awae
all-about-apikey
Detailed information about API key / OAuth token (Description, Request, Response, Regex, Example)
Arjun
HTTP parameter discovery suite.
BBTz
BBT - Bug Bounty Tools (examplesđź’ˇ)
Breacher
An advanced multithreaded admin panel finder written in python.
broken-link-checker
Find broken links, missing images, etc within your HTML.
xr0r's Repositories
xr0r/BBTz
BBT - Bug Bounty Tools (examplesđź’ˇ)
xr0r/Breacher
An advanced multithreaded admin panel finder written in python.
xr0r/BSQLi
timebased blind sqli with 99% success rate
xr0r/bugbounty
xr0r/BurpJSLinkFinder
Burp Extension for a passive scanning JS files for endpoint links.
xr0r/Conferences
Conference presentation slides
xr0r/de4js
JavaScript Deobfuscator and Unpacker
xr0r/dmarc-subdomains
Tool to parse subdomains from dmarc.live
xr0r/docs
xr0r/Dorks
Bug Bounty Dorks
xr0r/favicon-hash.kmsec.uk
Cloudflare Worker to get favicon hashes for Shodan hunting
xr0r/G-dorks
google dorks for locate important files, information and accesses
xr0r/google-dorks-bug-bounty
A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting
xr0r/gungnir
CT Log Scanner
xr0r/hackyx
xr0r/LazySql
xr0r/linkfinder-
xr0r/lol
xr0r/mapperplus
MapperPlus facilitates the extraction of source code from a collection of targets that have publicly exposed .js.map files.
xr0r/payloads
xr0r/priv8-Nuclei
this repo contains all nuclei templates for particular vulnerability that i used mosty while hunting..
xr0r/recollapse
REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications
xr0r/Ryacinex1
1
xr0r/sheye
Opensource assets and vulnerability scanning tool
xr0r/SQL_Injection-Techniques
Advanced SQL Injection Techniques for Bug Bounty Hunters
xr0r/SQLiDetector
Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14 payloads and checking for 152 regex patterns for different databases.
xr0r/subfalcon
subfalcon is a subdomain enumeration tool that allows you to discover and monitor subdomains for a given list of domains. It fetches subdomains from various sources [crtsh, hackertargetapi, anubis, alienvault, rappiddns, urlscan ] , saves them to a SQLite database, and can notify updates via Discord.
xr0r/subOv88r
Simple go tool for analyzing list of subdomains for subdomain takeover vulnerability
xr0r/temp-mail
TempMail is a simple web application that allows you to generate temporary email addresses and view the emails received by these addresses.
xr0r/tib3rius.github.io