Xxe Injection Payload Listπ― XML External Entity (XXE) Injection Payload List
Stars: β 304 (-91.66%)
Mutual labels: infosec, payloads, bugbounty
PayloadsPayload Arsenal for Pentration Tester and Bug Bounty Hunters
Stars: β 421 (-88.45%)
Mutual labels: bugbounty, payloads
Go DorkThe fastest dork scanner written in Go.
Stars: β 274 (-92.48%)
Mutual labels: infosec, bugbounty
H2csmugglerHTTP Request Smuggling over HTTP/2 Cleartext (h2c)
Stars: β 292 (-91.99%)
Mutual labels: infosec, bugbounty
SubcertSubcert is an subdomain enumeration tool, that finds all the subdomains from certificate transparency logs.
Stars: β 58 (-98.41%)
Mutual labels: infosec, bugbounty
gwdomainssub domain wild card filtering tool
Stars: β 38 (-98.96%)
Mutual labels: infosec, bugbounty
CloudbruteAwesome cloud enumerator
Stars: β 268 (-92.65%)
Mutual labels: infosec, bugbounty
goverviewgoverview - Get an overview of the list of URLs
Stars: β 93 (-97.45%)
Mutual labels: infosec, bugbounty
T1tl3A simple python script which can check HTTP status of branch of URLs/Subdomains and grab URLs/Subdomain title
Stars: β 14 (-99.62%)
Mutual labels: infosec, bugbounty
PastebinMarkdownXSSXSS in pastebin.com and reddit.com via unsanitized markdown output
Stars: β 84 (-97.69%)
Mutual labels: infosec, bugbounty
targetsA collection of over 5.1 million sub-domains and assets belonging to public bug bounty programs, compiled into a repo, for performing bulk operations.
Stars: β 85 (-97.67%)
Mutual labels: infosec, bugbounty
security-policy-specification-standardThis document proposes a way of standardising the structure, language, and grammar used in security policies.
Stars: β 24 (-99.34%)
Mutual labels: infosec, bugbounty
WordlistsInfosec Wordlists
Stars: β 271 (-92.56%)
Mutual labels: infosec, payloads
AstraAstra is a tool to find URLs and secrets inside a webpage/files
Stars: β 187 (-94.87%)
Mutual labels: infosec, bugbounty
MegplusAutomated reconnaissance wrapper β TomNomNom's meg on steroids. [DEPRECATED]
Stars: β 268 (-92.65%)
Mutual labels: infosec, bugbounty
doraFind exposed API keys based on RegEx and get exploitation methods for some of keys that are found
Stars: β 229 (-93.72%)
Mutual labels: infosec, bugbounty
lit-bb-hack-toolsLittle Bug Bounty & Hacking ToolsβοΈ
Stars: β 180 (-95.06%)
Mutual labels: infosec, bugbounty
osmedeus-workflowCommunity Workflow for the Osmedeus Engine that describes basic reconnaissance methodology for you to build your own
Stars: β 26 (-99.29%)
Mutual labels: infosec, bugbounty
PentestingMisc. Public Reports of Penetration Testing and Security Audits.
Stars: β 24 (-99.34%)
Mutual labels: infosec, bugbounty