Bug-bounty Libraries

12 Components & Libraries

Sortby

Bug-bounty Libraries

Web path scanner

An advanced web path brute-forcer Choose one of these installation options: dirsearch allows you to pause the scanning progress with CTRL+C, from here, you can save the progress (and continue later),…

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

Sublert is a security and reconnaissance tool that was written in Python to leverage certificate transparency for the sole purpose of monitoring new subdomains deployed by specific organizations and …

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

Small security related tools created in Python and Bash for CTF players, bug bounty hunters, pentesters and developers.

Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14 payloads and checking for 152 regex patterns for different databases.

Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14 payloads and checking for 152 regex patterns for differ…

Bypass 4xx HTTP response status codes and more. Based on PycURL and Python Requests.

Bypass 4xx HTTP response status codes and more. Based on PycURL and Python Requests. Script uses multithreading and is based on brute forcing, and as such, might have false positive results. Script h…

Python Interactive Deepweb-oriented Rapid Intelligent Link Analyzer

Current Release: v0.1.0 (2020.11.08) Scan single clearweb site Scan single onion site Fast batch scan with custom User-Agent License: GNU General Public License, version 2

Burp Suite extension for bypassing client-side encryption for pentesting and bug bounty

Pycript is a Burp Suite extension that enables users to encrypt and decrypt requests and response for manual and automated application penetration testing. It also allows users to create custom encry…

Self-hosted passive subdomain continous monitoring tool.

Why opt for sub.Monitor? This program offers easy setup due to its utilization of SQLite for storing all identified domains (removing the necessity for prior database management). Moreover, it boasts…

Pentest: Subdomains enumeration tool for penetration testers.

Tugarecon is a python tool designed to enumerate subdomains using modules. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Bruteforce wa…

A web crawler (for bug hunting) that gathers more than you can imagine.

N.Y.A.W.C is a Python library that enables you to test your payload against all requests of a certain domain. It crawls all requests (e.g. GET, POST or PUT) in the specified scope and keeps track of …

Keye is a reconnaissance tool that was written in Python with SQLite3 integrated. After adding a single URL, or a list of URLs, it will make a request to these URLs and try to detect changes based on their response's body length.

Keye is a reconnaissance tool that was written in Python with SQLite3 integrated. After adding a single URL, or a list of URLs, it will make a request to these URLs and try to detect changes based on…

This application was created as a POC for how to scan your local network traffic for HTTP requests and then inject various javascript cryptocurrency miners into the response payloads

INTRO: Miner in the Middle is a script that allows you to inject javascript miners into targets on your local network. It does this using python, scapy and netfilterqueue. When you run the applicatio…

Related tags

vuejs

reinforcement-learning

microbial-genetic-algorithm

evolution-strategy

evolutionary-algorithm

machine-learning

neural-nets