l34r00t
Follow
Stars
Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found.
Full Nuclei automation script with logic explanation.
All The Notes And Tips I FOund In Github And Twitter I Put Them Here
The SpecterOps project management and reporting engine
Some wordlists collected form github to all bug bounty hunters.
Bambdas collection for Burp Suite Professional and Community.
HuntersEye is designed for Bug Bounty Hunters, and Security Researchers to monitor new subdomains and certificates for specified domains. The primary goal is to streamline and expedite the process …
Ultimate Wordlist for Web Content Discovery
Web Crawler for Identifying Entry Points
Burp Scanner extension to fingerprint and actively scan instances of the Adobe Experience Manager CMS. It checks the website for common misconfigurations and security holes.
Burpsuite Plugin to detect Directory Traversal vulnerabilities
A curated list of amazingly awesome Burp Extensions
Parse OpenAPI documents into Burp Suite for automating OpenAPI-based APIs security assessments (approved by PortSwigger for inclusion in their official BApp Store).
An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.
A big list of Android Hackerone disclosed reports and other resources.
KingOfBugbounty / SecretFinder
Forked from m4ll0k/SecretFinderSecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files
Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple target during web applications penetration testing.
A curated list of various bug bounty tools
Script en Bash que te permite convertir una distribución de Linux en un entorno de trabajo profesional de manera automática.