Scripts for hunting bugs.

Reconky is an great Content Discovery bash script for bug bounty hunters which automate lot of task and organized in the well mannered form which help them to look forward.

Ultimate List Of Bug Bounty Tools

A CDN Domain Fronting Tool or Websocket Discovery written in Python

Subdisco finder is a tool designed in java and uses Open-source intelligence (OSINT) in order to enumerate subdomains of websites

bug bounty tools list

Subsleuth is a powerful subdomain bruteforcing for bug bounty hunters and penetration testers to discover subdomains and enhance their web security testing.

A tool using mass, naabu,httpx subfinder,chaos,uncover,asnmap,shuffledns and dns search to enumerate subdomains for a given domain ,

🕵️‍♂️🔍 A tool with several scanning techniques that extracts live IP addresses from a list of IP addresses or CIDR notations.

CRLF Bug scanner for WebPentesters and Bugbounty Hunters

This extension will help you to detect GET/POST based XSS vulnerability in any website easily

In the context of web application penetration testing, Google Dorks can be used to find vulnerabilities and sensitive information in websites. This involves searching for specific keywords or file types that can indicate the presence of vulnerabilities or sensitive information, such as login pages, database files, and backups.

Gain the edge in hidden subdomain discovery with Subtracker.

Generate a cross join, also known as a Cartesian product, from the lines of the specified files. This process is useful for creating fuzzing payloads.

My private bug bounty scripts i have written under the years for real time projects within bug bounty hunting and penetration testing(red team).

HEGO Hunting Wiki | Offensive Cybersecurity Checklist

A tool for spider multiple URLs & check for sensitive variables in code.

Recon time the recon tool for bug hunting

A curated list of awesome Burp Extensions for bug hunter. groups by vulnerability types

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Online tips and explain the commands, for the better understanding of new hunters..