Automatically brute force all services running on a target.

an asynchronous target enumeration tool

Find interesting Amazon S3 Buckets by watching certificate transparency logs.

BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-…

Ressources for bug bounty hunting

Beginner Guide to Bug Bounty Hunting

I built some bash functions to help me while doing mundane and repetitive tasks using BBRF, Nuclei or other Bug bounty tool.

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

Bug Bounty Roadmaps

The scripts I write to help me on my bug bounty hunting

A list of edge cases that occur in bug bounty programs, conversations on how they should be handled. The goal is to standardise the way that specific situations are handled in bug bounties.

BBT - Bug Bounty Tools

A repository that includes all the important wordlists used while bug hunting.

A Colab For Bug Hunting!

All Things Bug Bounty

A list of interesting payloads, tips and tricks for bug bounty hunters.

Run all your bug bounty VPN profiles in parallel and expose them via multiple local SOCKS proxies.

Real world bug bounty wordlists

All the Dorks for researching the Public reports and programs compiled at one place.

List of reporting templates I have used since I started doing BBH.

Open source education content for the researcher community

Buggyapp is an vulnerable android application. This app can be used by pentesters, security researchers to practice Android application pentesting. This is build for beginners to learn basics about…

Static code analysis tool based on Elasticsearch

Building ActiveDirectory Lab for practicing various attack vectors used during Red Team engagement.

Fixes Burp Suite's poor TLS stack. Bypass WAF, spoof any browser.

Burp Bounty profiles compilation, feel free to contribute!

Burp Suite plugin to copy regex matches from selected requests and/or responses to the clipboard.

A collection of scripts to extend Burp Suite

Burp Extensions