Starred repositories
Zzl is a reconnaissance tool that collects subdomains from SSL certificates in IP ranges
This repo contains different variants of Bug Bounty & Security & Pentest & Tech related Articles
this is my approach to bug bounty. i have inspired this from a lot of security researchers. i will update this repo incrementally
6
Updated Oct 8, 2023
this repo contains some public methodologies which I found from internet (google,telegram,discord,writeups etc..)
A comprehensive bug bounty methodology compiled from extensive research, covering web application reconnaissance, checklists, and methods for identifying various bugs. This guide aims to help bug h…
Bug Bounty Tools used on Twitch - Recon
These are my checklists which I use during my hunting.
List of Google Dorks for sites that have responsible disclosure program / bug bounty program
This is a compiled cheatsheet from my experience of OSCP 2023 journey. Won't say it is all-rounded but a good starting point if you wanna start your OSCP study. It covered all the tools, common iss…
best tool for finding SQLi,CRLF,XSS,LFi,OpenRedirect
high-performance and configurable tool to cut CDN domains and exclude them from HTTP port-scanning process.
Curated UTF-8 URL-encoded character dictionary for injection testing, fuzzing, and bypass techniques against web applications and APIs, focused on null byte injection, double encoding, and input va…
🐛 A list of writeups from the Google VRP Bug Bounty program
Raven is a powerful and customizable web crawler written in Go.
Here you can find mostly all disclosed h1 reports
🔍 gowitness - a golang, web screenshot utility using Chrome Headless
This tool allows you to find ssti vulnerability with ease!
This is a multi-use bash script for Linux systems to audit wireless networks.