ScanT3r - Module based Bug Bounty Automation Tool

Collection of steganography tools - helps with CTF challenges

POC列表

This extension will help you to detect GET/POST based XSS vulnerability in any website easily

A collection of awesome security hardening guides, tools and other resources

PoC for CVE-2022-40684 - Authentication bypass lead to Full device takeover (Read-only)

OWASP Web Application Security Testing Checklist

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static a…

Nuclei plugin for BurpSuite

Potentially dangerous files

Exploit code for Jira Mobile Rest Plugin SSRF (CVE-2022-26135)

Bug Bounty Tools used on Twitch - Recon

Scan files for secrets just easy

A collection of awesome one-liner scripts especially for bug bounty tips.

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

Tutorials and Things to Do while Hunting Vulnerability.

Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228

Finding XSS during recon

List of reporting templates I have used since I started doing BBH.

Client Side Prototype Pollution Scanner

Prototype Pollution and useful Script Gadgets

Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple target during web applications penetration testing.

Web Attack Cheat Sheet

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.