This repository updates latest Bug Bounty medium writeups every 10 minutes, https://readmedium.com/Medium_URL, https://archive.ph/Medium_URL, https://freedium.cfd/Medium_URL

List of Fresh DNS resolvers updates every 1 hour

Mass-scale hidden parameter discovery using Arjun. A high-performance wrapper that parallelizes Arjun for efficient parameter discovery across multiple targets.

This repo Gathers all available cve exploits from github.⚠️ Be careful Malware.

List of all strava challenges, (updates every 6 hours).

Scrape all wordpress plugins (updates every 6 hour)

A bash script that extracts `shodan-query, google-query, censys-query, fofa-query, hunter-query, zoomeye-query` in nucleihub-templates.

Custom wordlist, updated regularly

This repo collects nuclei template from 600+ github repos, updates every 6 hours.

Hunt down social media accounts by username across social networks using httpx

Converting trickest and chaos bbp targets in json, updates every 12 hour

A powerful and efficient Go-based tool for extracting archived URLs from the Wayback Machine with advanced filtering capabilities, rate limiting, and automatic retries.

An automated GitHub Actions-based crawler that fetches and updates public scopes from popular bug bounty platforms (like Hackerone/Bugcrowd/Intigriti/etc) (updates every 10 minutes)

A powerful subdomain enumeration tool that aggregates data from multiple sources to create comprehensive lists of root subdomains.

A powerful Go tool for finding origin IPs of domains by querying multiple security APIs and validating results with built-in HTTP client.

xsschecker tests endpoints for reflected XSS by injecting payloads and checking responses. It prints vulnerable if the payload is reflected, otherwise not vulnerable.

uforall is a fast url crawler this tool crawl all URLs number of different sources, alienvault,WayBackMachine,urlscan,commoncrawl

certinfo is a powerful SSL certificate scraping tool that extracts domain names from SSL certificates of arbitrary hosts. It supports both basic certificate data extraction and recursive subdomain …

Remove outofscope subdomains from https://github.com/rix4uni/scope/blob/main/data/outofscope.txt or a local outofscope.txt file.

High-speed Go email scraper that crawls sites and internal links concurrently to collect email addresses for reconnaissance, research, or sales intelligence.

A tool to detect website for NSFW content based on a keyword list like `porn`, `adult`, `xxx`, `hentai`.

A powerful Go-based tool for generating search engine queries from Nuclei templates across multiple search engines and severity levels.

A lightweight Go cross-compilation tool that automatically builds and packages your Go applications for multiple platforms, **You can easily upload these releases on github**.

A high-performance domain scanner that discovers active domains by testing multiple Top-Level Domains (TLDs) for given domain names.