Repository navigation
Bug Bounty
- Website
- Wikipedia
- 维基百科
A bug bounty program is a deal offered by many websites, organizations and software developers by which individuals can receive recognition and compensation for reporting bugs, especially those pertaining to security exploits and vulnerabilities.
A collection of various awesome lists for hackers, pentesters and security researchers
A list of resources for those interested in getting started in bug bounties
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
The all-in-one browser extension for offensive security professionals 🛠
A Workflow Engine for Offensive Security
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
Applied offensive security with Rust - https://kerkour.com/black-hat-rust
A Security Tool for Bug Bounty, Pentest and Red Teaming.
A collection of awesome one-liner scripts especially for bug bounty tips.
Semi-automatic OSINT framework and package manager
This challenge is Inon Shkedy's 31 days API Security Tips.
Collection of quality safety articles. Awesome articles.
🕵️ OSINT Tools for gathering information and actions forensics 🕵️
Subdomain Takeover tool written in Go
A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying and exploiting vulnerabilities.
一款信息泄漏利用工具，适用于.git/.svn/.DS_Store泄漏和目录列出