vaib25vicky/awesome-mobile-security
An effort to build a single place for all useful android and iOS security related stuff. All references and tools are belong to their respective owners. I'm just maintaining it.
#android #android_security #awesome #awesome_list #bugbounty #hacking #hacking_tools #ios #ios_security #malware #malware_research #mobile #mobile_security #pentesting #redteam #resources #reverse_engineering #security_tools
Stars: 110 Issues: 0 Forks: 11
https://github.com/vaib25vicky/awesome-mobile-security

projectdiscovery/naabu
A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests
Language: Go
#bugbounty #port_enumeration #portscanner #security_tools
Stars: 183 Issues: 3 Forks: 13
https://github.com/projectdiscovery/naabu

smodnix/31-days-of-API-Security-Tips
This challenge is Inon Shkedy's 31 days API Security Tips.
#api_pentest #api_security #bug_bounty #bugbounty #bugbountytips #infosec #pentest #security
Stars: 294 Issues: 0 Forks: 34
https://github.com/smodnix/31-days-of-API-Security-Tips

projectdiscovery/nuclei
Nuclei is a fast tool for configurable targeted scanning based on templates offering massive extensibility and ease of use.
Language: Go
#bugbounty #content_bruteforcing #content_discovery #infosec #pentest_tool #security #web
Stars: 139 Issues: 5 Forks: 22
https://github.com/projectdiscovery/nuclei

devanshbatham/ParamSpider
Mining parameters from dark corners of Web Archives
Language: Python
#bugbounty #content_discovery #fuzzing #osint #parameter #parameter_finder #urls_parameters
Stars: 241 Issues: 1 Forks: 50
https://github.com/devanshbatham/ParamSpider

devanshbatham/Awesome-Bugbounty-Writeups
A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference
Language: Python
#bugbounty #bugbounty_blogs #bugbounty_facebook #bugbounty_writeups #bugbounty_yahoo #bugbountytips #bughuntin_writeups #bughunting #bughunting_methodology #security_writeups
Stars: 247 Issues: 0 Forks: 44
https://github.com/devanshbatham/Awesome-Bugbounty-Writeups

devanshbatham/FavFreak
Making Favicon.ico based Recon Great again !
Language: Python
#bugbounty #bughunting #hacking #information_gathering #osint #recon #reconnaissance #web_security #webappsec
Stars: 125 Issues: 0 Forks: 31
https://github.com/devanshbatham/FavFreak

dwisiswant0/awesome-oneliner-bugbounty
A collection of awesome one-liner scripts especially for bug bounty tips.
#awesome #bash #bugbounty #bugbountytips #one_liners
Stars: 101 Issues: 0 Forks: 37
https://github.com/dwisiswant0/awesome-oneliner-bugbounty

utkusen/urlhunter
a recon tool that allows searching on URLs that are exposed via shortener services
Language: Go
#bugbounty #intelligence #osint #recon #security
Stars: 161 Issues: 2 Forks: 13
https://github.com/utkusen/urlhunter

ihebski/DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️
Language: Jupyter Notebook
#blueteam #bugbounty #cheatsheet #credentials_gathering #cybersecurity #default_password #infosec #pentest #pentesting #security
Stars: 167 Issues: 0 Forks: 22
https://github.com/ihebski/DefaultCreds-cheat-sheet

sickcodes/no-sandbox
No Sandbox - Applications That Run Chromium and Chrome Without The Sandbox. TL;DR exploits in these browser based applications are already sandboxed escaped: https://no-sandbox.io/
#0day #bug #bugbounty #chrome #chromium #exploit #rce #research
Stars: 91 Issues: 2 Forks: 8
https://github.com/sickcodes/no-sandbox

Puliczek/CVE-2021-44228-PoC-log4j-bypass-words
🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - A trick to bypass words blocking patches
Language: Java
#bugbounttips #bugbounty #bugbounty_writeups #cve #cve_2021_44228 #cybersecurity #exploit #hacking #log4j #payload #pentest #pentesting #red_team #security #security_writeups #writeups
Stars: 191 Issues: 0 Forks: 38
https://github.com/Puliczek/CVE-2021-44228-PoC-log4j-bypass-words

Puliczek/awesome-list-of-secrets-in-environment-variables
🦄🔒 Awesome list of secrets in environment variables 🖥️
#blue_team #bugbounttips #bugbounty #cve_2021_44228 #cybersecurity #exploit #log4j #pentesting #poc #red_team #security #security_writeups #writeups
Stars: 139 Issues: 0 Forks: 9
https://github.com/Puliczek/awesome-list-of-secrets-in-environment-variables

cyprosecurity/API-SecurityEmpire
API Security Projecto aims to present unique attack & defense methods in API Security field
#apisecurity #bugbounty #cybersecurity #information_security #penetration_testing
Stars: 208 Issues: 0 Forks: 28
https://github.com/cyprosecurity/API-SecurityEmpire

Puliczek/CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera
🎩 🤟🏻 [P1-$10,000] Google Chrome, Microsoft Edge and Opera - vulnerability reported by Maciej Pulikowski - System environment variables leak - CVE-2022-0337
Language: HTML
#bugbounty #bugbounty_writeups #bugbountytips #cve #cve_2022_0337 #cybersecurity #exploit #hacking #payload #pentest #pentesting #red_team #security #security_writeups #writeups
Stars: 131 Issues: 0 Forks: 22
https://github.com/Puliczek/CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera

utkusen/socialhunter
crawls the website and finds broken social media links that can be hijacked
Language: Go
#bug_bounty #bugbounty #osint #redteam #redteaming
Stars: 97 Issues: 0 Forks: 8
https://github.com/utkusen/socialhunter

Impact-I/reFlutter
Flutter Reverse Engineering Framework
Language: Python
#bugbounty #mobile_security #reverse_engineering #ssl_pinning
Stars: 196 Issues: 34 Forks: 12
https://github.com/Impact-I/reFlutter

edoardottt/awesome-hacker-search-engines
A list of search engines useful during Penetration testing, vulnerability assessments, red team operations, bug bounty and more
#awesome #awesome_list #awesome_lists #bugbounty #dns #domain #exploit #hacking #hacking_tools #osint #osint_tool #redteam #redteaming #search_engine #security #security_tools #url #vulnerabilities #vulnerability #wifi_network
Stars: 412 Issues: 0 Forks: 20
https://github.com/edoardottt/awesome-hacker-search-engines

aydinnyunus/exifLooter
finds geolocation on all image urls and directories
Language: Go
#bug_bounty #bugbounty #cyber_security #exif #exif_metadata #exiftool #golang #hack #hacking #image #metadata #metadata_extraction #osint #redteam #security
Stars: 139 Issues: 1 Forks: 4
https://github.com/aydinnyunus/exifLooter

hisxo/ReconAIzer
A Burp Suite extension to add OpenAI to Burp to help you with your Bug Bounty recon!
Language: Python
#bugbounty #burp_extensions #burpsuite #openai #openai_api
Stars: 267 Issues: 2 Forks: 36
https://github.com/hisxo/ReconAIzer