Bugbounty Libraries

29 Components & Libraries

Sortby

Bugbounty Libraries

Web path scanner

An advanced web path brute-forcer Choose one of these installation options: dirsearch allows you to pause the scanning progress with CTRL+C, from here, you can save the progress (and continue later),…

A recursive internet scanner for hackers.

Special features include: Below are some short help sections to get you up and running. Targets can be any of the following: Similar to Amass or Subfinder, BBOT supports API keys for various third-pa…

A collection of custom security tools for quick needs.

‼ A big clean occured in 2022-11 ‼ Some useless/not working scripts have been archived and some others have been moved to their own repository to get more visibility, feel free to check them: Test CO…

💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

Used for penetration testing and/or red-teaming etc. I created this tool because i needed a third party tool to generate a bunch of PDF files with various links. Output will be written as: test1.pdf,…

pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching

Scripts are written for Python 3.6+. Clone the git repository and install the requirements. Dork categories: Note that this may not appear natural to Google if you:

A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.

A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing. This library will allow the user to bypass IP-based rate-lim…

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

Small security related tools created in Python and Bash for CTF players, bug bounty hunters, pentesters and developers.

EmailAll is a powerful Email Collect tool — 一款强大的邮箱收集工具

邮箱信息收集主要来源如下：更新PhoneBook、Snov模块更新GithubApi模块后续还会更新~ 参考了以下优秀的工具，并修改而来: 感谢这些师傅们的分享！！！感谢网上开源的各大项目！！！本工具仅能在取得足够合法授权的企业安全建设中使用，在使用本工具过程中，您应确保自己所有行为符合当地的法律法规。如您在使用本工具的过程中存在任何非法行为，您将自行承担所有后果，本工具所有开发…

JSshell - JavaScript reverse/remote shell

Requirements: Any OS + Python 2 or Python 3 Updated in the new version of JShell 3.1: This is a step-by-step example of how to use JSshell. First, we need to generate a reverse JS shell payload and s…

Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14 payloads and checking for 152 regex patterns for different databases.

Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14 payloads and checking for 152 regex patterns for differ…

JF⚡can - Super fast port scanning & service discovery using Masscan and Nmap. Scan large networks with Masscan and use Nmap's scripting abilities to discover information about services. Generate report.

JFScan is a wrapper that leverages the speed of Masscan and Nmap's fingerprinting capabilities. JFScan accepts targets in the form of URLs, domains, or IPs (including CIDR). You can specify a file wi…

Dome - Subdomain Enumeration Tool. Fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports.

Dome is a fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports. This tool is recommended for bug bounty hunters and pentester in their …

A heavily armed customizable phishing tool for educational purpose only

A heavily armed customizable phishing tool for educational purpose only. It contains phishing email templates of mostly used social media platforms. I have made 3 youtube videos, they delete it, so i…

Fast and customizable vulnerability scanner For JIRA written in Python

Jira-Lens 🔍 is a Python Based vulnerability Scanner for JIRA. Jira is a proprietary issue tracking product developed by Atlassian that allows bug tracking and agile project management. This tool Perf…

All in One Recon Tool for Bug Bounty

The purpouse of this tool is helping bug hunters and pentesters during reconnaissance It can be used in any system with python3 You can easily install AORT using pip: If you want to install it from s…

Burp Suite extension for bypassing client-side encryption for pentesting and bug bounty

Pycript is a Burp Suite extension that enables users to encrypt and decrypt requests and response for manual and automated application penetration testing. It also allows users to create custom encry…

Self-hosted passive subdomain continous monitoring tool.

Why opt for sub.Monitor? This program offers easy setup due to its utilization of SQLite for storing all identified domains (removing the necessity for prior database management). Moreover, it boasts…

Jbin will gather all the URLs from the website and then it will try to expose the secret data from them such as API keys, API secrets, API tokens and many other juicy information.

Jbin will gather all the URLs from the website and then it will try to expose the secret data from them. It collects both URLs and JS links to scrape secrets out of it. Also if you are looking for a …

Pentest: Subdomains enumeration tool for penetration testers.

Tugarecon is a python tool designed to enumerate subdomains using modules. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Bruteforce wa…

Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities

Project Eagle is a plugin based vulnerabilities scanner with threading support used for detection of low-hanging bugs on mass scale This mode is only for checking online targets

LFITester is a Python3 program that automates the detection and exploitation of Local File Inclusion (LFI) vulnerabilities on a server.

• This tool is for educational purposes only. • We are not responsible for any illegal usage of this tool. LFITester is a Python3 tool which tests if a server is vulnerable to Local File Inclusion (L…

Bug's feed is a local hosted portal where you can search for the latest news, videos, CVEs, vulnerabilities...

Except those to twitter, youtube, oxford and bugcrowd (this may change in the future). 🥢 You can define the port on the .env file

Bug's feed is a local hosted portal where you can search for the latest news, videos, CVEs, vulnerabilities...

Except those to twitter, youtube, oxford and bugcrowd (this may change in the future).

This application was created as a POC for how to scan your local network traffic for HTTP requests and then inject various javascript cryptocurrency miners into the response payloads

INTRO: Miner in the Middle is a script that allows you to inject javascript miners into targets on your local network. It does this using python, scapy and netfilterqueue. When you run the applicatio…

All In One, Fast, Easy Recon Tool

Use grepaddr to extract (grep) all kinds of addresses from stdin like URLs (incl. IPv4/IPv6), IP addresses & ranges (IPv4/IPv6), e-mail addresses, MAC addresses.

GrepAddr takes input from stdin and extracts different kinds of addresses from stdin like URLs, IP addresses, e-mail addresses, MAC addresses and more. Essentially it's grep, but for interesting addr…

simple recon tool to help you for searching vulnerability on web server

some feature on development, i think will error if u using current update, will fix it ASAP simple recon tool to help you searching vulnerability on web server. maybe xD well this tool have function …

simple recon tool to help you for searching vulnerability on web server

simple recon tool to help you searching vulnerability on web server. maybe xD if you are using kali, parrot, You don't need to install it manually, this tool will install itself

Related tags