take0versget Goto Github PK

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

awesome-bugbounty-tools

A curated list of various bug bounty tools

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

awesome-censys-queries

A collection of fascinating and bizarre Censys Search Queries

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

awesome-shodan-queries

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

back-me-up

This tool will check for Sensitive Data Leakage with some useful patterns/RegEx. The patterns are mostly targeted on waybackdata and filter everything accordingly.

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

bug-bounty-writeups

Repository of Bug-Bounty Writeups

bugbounty

Bugbounty Resources

cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

cloakquest3r

Uncover the true IP address of websites safeguarded by Cloudflare & Others

crlfuzz

A fast tool to scan CRLF vulnerability written in Go

cve

Gather and update all available and newest CVEs with their PoC.

cve-2022-26134

cve-2022-35914-poc

exploit-grafana-cve-2021-43798

This is a proof-of-concept exploit for Grafana's Unauthorized Arbitrary File Read Vulnerability (CVE-2021-43798).

fuzz4bounty

Awesome wordlists for Bug Bounty Hunting

fuzzing-templates

Community curated list of nuclei templates for finding "unknown" security vulnerabilities.

grafana-cve-2021-43798

Grafana Unauthorized arbitrary file reading vulnerability

hackerone-reports

Top disclosed reports from HackerOne

hackerone-reports-1

Top disclosed reports from HackerOne

hackerone-reports-2

Top disclosed reports from HackerOne

howtohunt

Collection of methodology and test case for various web vulnerabilities.

howtohunt-1

Collection of methodology and test case for various web vulnerabilities.

inventory

Asset inventory on public bug bounty programs.

karma_v2

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

kingofbugbountytips-1

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..