bugbountytricks 开源项目推荐（25 个）

0xmaximus /Galaxy-Bugbounty-Checklist

Bug赏金以及渗透测试的提示和教程。

robotshell /magicRecon

MagicRecon是一个功能强大的shell脚本，可以最大限度地提高目标的侦察和数据收集过程，并找到常见的漏洞，所有这些都可以将以有组织的方式获得的结果保存在目录中并以各种格式保存。

Neelakandan-A /BugBounty_CheatSheet

BugBounty_CheatSheet

kh4sh3i /bug-bounty-writeups

A curated list of available Bug Bounty & Disclosure Programs and Write-ups.

twseptian /bug-bounty-testing-essential-guideline-startup-bug-hunters

该项目在 GitHub 上没有填写描述

kljunowsky /CVE-2023-36845

Juniper Firewalls CVE-2023-36845 - RCE

YazeedOliwah /Black_Viru5_Recon_v1.0

These Repositories About My Recon Methodology To Give Some Idea For Other Hunter How To Do Recon

securi3ytalent /bug-bounty-tips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Online tips and explain the commands, for the better understanding of new hunters..

S1N6H /Barcha

Barcha is your Swiss‑Army knife for SQL Injection reconnaissance 🔍. Written in Go, it automates: Shodan enumeration of SSL hosts 🕵️‍♂️ Liveness & redirect checks (ignores bad certs) 🔄 Automated Ghauri tests for each host 🛡️ SQLite logging of every scan 🔖

topscoder /fourohme

FourOhMe is a tool for testing HTTP headers on a website in order to try to bypass 40* HTTP codes. Written in Go, so easy to install and fast out of the box.

kljunowsky /HuntersEye

HuntersEye is designed for Bug Bounty Hunters, and Security Researchers to monitor new subdomains and certificates for specified domains. The primary goal is to streamline and expedite the process of monitoring newly registered subdomains and SSL certificates related to specified target domains.

ReverseTEN /NucProbe

Automate Nuclei scans and streamline bug hunting workflows

3mmarx /Medium-Miner

a medium scraper that you need.

forshaur /ddork

automate seed controlled discovery of less-known self-hosted bug bounty programs instead of crowded public lists. | | Ddork recursively enumerates competitors of a company and probes them for any existing bug bounty program.

imhego /pointer

Pointer is a Fast Simple Lightweight Tool for Endpoint Discovery.

electro0nes /wayback-cdx-filter

Wayback CDX Domain Filter

filipkarc /PoC-ubuntutouch-pin-privesc

CVE-2022-40297 - Proof of Concept: Privilege escalation in Ubuntu Touch 16.04 - by PIN Bruteforce

securi3ytalent /bugbounty-CVE-Report

Bug bounty Report/ CVS and buig bounty tips

anonmoty /XXStrike

XSStrike based XSS scanner with custom features. Detects XSS vulnerabilities in web applications.

mYnk0x /OneLiner

OneLiner