bughunting 开源项目推荐（119 个）

devanshbatham /Awesome-Bugbounty-Writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

devanshbatham /FavFreak

Making Favicon.ico based Recon Great again !

tenable /routeros

RouterOS Security Research Tooling and Proof of Concepts

renatahodovan /grammarinator

ANTLR v4 grammar-based test generator

HightechSec /git-scanner

A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public

h0tak88r /AutoAR

AutoAR is an automated security reconnaissance tool, ASM and Discord bot for bug bounty hunters and penetration testers. It automates gathering subdomains, scanning ports, detecting technologies, mapping GitHub repositories, fuzzing, testing vulnerabilities, and AI analysis.

seeuinscope /easyg

Here I gather all the resources about hacking that I find interesting

h0tak88r /Sec-88

Cyber Security Notes, Methodology, Resources and Tips

thehackingsage /bughunter

Tools for BugHunting

Mr-Destroyer /ZimZilla

THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING

iamunixtz /Lazy-Hunter

LazyHunter is an automated reconnaissance tool designed for bug hunters, leveraging Shodan's InternetDB and CVEDB APIs

danilabs /tools-tbhm

“The Bug Hunters Methodology V2，@jhaddix”的工具

renatahodovan /fuzzinator

Fuzzinator Random Testing Framework

justakazh /DockerExploit

Docker Remote API Scanner and Exploit

R0X4R /D4rkXSS

A list of useful payloads and Bypass for Web Application Security and Bug Bounty/CTF

joshkar /X-Recon

A utility for detecting webpage inputs and conducting XSS scans.

devanshbatham /ArchiveFuzz

Hunt down the secrets from the WebArchives for Fun and Profit

xer0times /SQLi-Query-Tampering

SQLi Query Tampering extends and adds custom Payload Generator/Processor in Burp Suite's Intruder. This extension gives you the flexibility of manual testing with many powerful evasion techniques.

YasserGersy /cazador_unr

Hacking tools

Anon-Artist /R3C0Nizer

R3C0Nizer is the first ever CLI based menu-driven web application B-Tier recon framework.