SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty

This Tool To Test Machine Keys In View State

♥

HackerOne资产更新 | 每日更新HackerOne资产，对HackerOne的资产进行爬行和整理，SRC资产更新仅会增加，不会进行删除，每天更新的可以进行差异化对比来获取到新的项目资产范围

URLs

Burp suite Custom Extensions

An insane list of all dorks taken from everywhere from various different sources.

timebased blind sqli with 99% success rate

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous …

This tool will check for Sensitive Data Leakage with some useful patterns/RegEx. The patterns are mostly targeted on waybackdata and filter everything accordingly.

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

CeWL is a Custom Word List Generator

Generates combination of domain names from the provided input.

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

Extract URLs, paths, secrets, and other interesting bits from JavaScript

My Priv8 Nuclei Templates

Configuration file parsing and convenience routines

CT Log Scanner

Generates permutations, alterations and mutations of subdomains and then resolves them