bugcrowd

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

Tips and Tutorials for Bug Bounty and also Penetration Tests.

BUG BOUNTY WRITEUPS - OWASP TOP 10 🔴🔴🔴🔴✔

Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.

This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference

This project crawls bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) hourly and dumps them into the bounty-targets-data repo

Bugcrowd’s baseline priority ratings for common security vulnerabilities

DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it

Find exposed API keys based on RegEx and get exploitation methods for some of keys that are found

Python library and CLI for the Bug Bounty Recon API

List of reporting templates I have used since I started doing BBH.

Hacking tools

Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities

Advanced external automation on bug bounty programs by running the best set of tools to perform scanning and finding out vulnerabilities.

⚡Chrome extension allows you to create lists of Google and Github dork to open multiple tabs with one click, import "scope/out of scope" from #HackerOne #Bugcrowd #Intigriti ...

Cryptography Tool | RSA Attacks

It's an watcher for new scopes added to bounty-targets-data and send you alert to Slack.

Credentials Checking Framework

Simple Script to install recommended Bug Bounty Hunting Tools In Your Linux Disto