All Projects → iamthefrogy → nerdbug

iamthefrogy / nerdbug

Licence: other
Full Nuclei automation script with logic explanation.

Programming Languages

shell
77523 projects

Projects that are alternatives of or similar to nerdbug

Bulwark
An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.
Stars: ✭ 113 (-26.14%)
Mutual labels:  application-security, bugbounty, appsec
Rfi Lfi Payload List
🎯 RFI/LFI Payload List
Stars: ✭ 202 (+32.03%)
Mutual labels:  application-security, bugbounty, appsec
JWTweak
Detects the algorithm of input JWT Token and provide options to generate the new JWT token based on the user selected algorithm.
Stars: ✭ 85 (-44.44%)
Mutual labels:  application-security, bugbounty, appsec
Virtual-Host
Modified Nuclei Templates Version to FUZZ Host Header
Stars: ✭ 38 (-75.16%)
Mutual labels:  nuclei, bugbounty, nuclei-templates
Blind-SSRF
Nuclei Templates to reproduce Cracking the lens's Research
Stars: ✭ 111 (-27.45%)
Mutual labels:  nuclei, bugbounty, nuclei-templates
cent
Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place
Stars: ✭ 315 (+105.88%)
Mutual labels:  nuclei, bugbounty, nuclei-templates
Cheatsheetseries
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
Stars: ✭ 19,302 (+12515.69%)
Mutual labels:  application-security, appsec
Watchdog
Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.
Stars: ✭ 345 (+125.49%)
Mutual labels:  application-security, bugbounty
Command Injection Payload List
🎯 Command Injection Payload List
Stars: ✭ 658 (+330.07%)
Mutual labels:  application-security, bugbounty
gha-setup-scancentral-client
GitHub Action to set up Fortify ScanCentral Client
Stars: ✭ 15 (-90.2%)
Mutual labels:  application-security, appsec
Securityrat
OWASP SecurityRAT (version 1.x) - Tool for handling security requirements in development
Stars: ✭ 115 (-24.84%)
Mutual labels:  application-security, appsec
Web Methodology
Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki
Stars: ✭ 142 (-7.19%)
Mutual labels:  application-security, appsec
Whatweb
Next generation web scanner
Stars: ✭ 3,503 (+2189.54%)
Mutual labels:  application-security, appsec
Application Security Engineer Interview Questions
Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer
Stars: ✭ 267 (+74.51%)
Mutual labels:  application-security, appsec
Juice Shop
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
Stars: ✭ 6,270 (+3998.04%)
Mutual labels:  application-security, appsec
juice-shop
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
Stars: ✭ 7,533 (+4823.53%)
Mutual labels:  application-security, appsec
ObserverWard 0x727
Cross platform community web fingerprint identification tool
Stars: ✭ 529 (+245.75%)
Mutual labels:  nuclei, nuclei-templates
ncl
nuclei framework scripts
Stars: ✭ 25 (-83.66%)
Mutual labels:  nuclei, nuclei-templates
Bucket-Flaws
Bucket Flaws ( S3 Bucket Mass Scanner ): A Simple Lightweight Script to Check for Common S3 Bucket Misconfigurations
Stars: ✭ 43 (-71.9%)
Mutual labels:  application-security, bugbounty
sqlinjection-training-app
A simple PHP application to learn SQL Injection detection and exploitation techniques.
Stars: ✭ 56 (-63.4%)
Mutual labels:  application-security, appsec

nerdbug - Hunt while you are sleeping

Made with ❤️ ❤️ ❤️ from frogy

An automation tool that downloads CHAOS project discovery data every hour compares it with the master domain list, identifies new domains, runs Nuclei on it and automatically provides you with the final result via notify and publish it to a variety of supported platforms like Telegram, Discord, Slack, etc. Cron job automation is already implemented.

Automation

  • Requirements: Go Language 1.17.+, Python 3.+, jq

  • Tools used - You must need to install these tools to use this script

    Make sure these tools are downloaded and binaries are copied in the /usr/bin folder.

  • Installation

    apt install jq
    git clone https://github.com/iamthefrogy/nerdbug.git && cd nerdbug/ 
    chmod +x cron.sh
    chmod +x nerdbug.sh
    
    When you install the chaospy tool, place the binary in the nerdbug folder.
  • Usage

    1. First time users - Download the chaos data into text file and save it as alltargets.txtls. Plenty of methods out there for this.
    
    2. Set the integer value within the cron.sh file. It is a number of hours you want to automate this script in the background. Currently set to 3600 seconds means an hour. (SCREEN).    
    
    3. Set up and edit Notify Provider Config (default provider config file can be created at $HOME/.config/notify/provider-config.yaml) to suit your needs (support single / multiple providers where do you want to send the notification to)
    4. Open nerdbug.sh and set the provider in which is currently set as notify -provider <<provider to send the notification to (eg. telegram,discord,slack)>>
    
    screen -S nerdbug
    
    ./cron.sh
    
    exit screen

Thanks to the authors of the tools used in this script.

Warning: This is just a research project. Kindly use it with caution and at your own risk.

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].