Jason Haddix

tbhm. The Bug Hunters Methodology

pentest-bookmarks. a collection of handy bookmarks

domain. Setup script for Regon-ng

awsScrape. A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.

KingOfBugBountyTips.

SecLists. SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

SubreconGPT. Python

bug-bounty-reference. Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

scripts. Usefull stuff from around teh internetz

CSPReconGO. Go

HUNT. Python

XSS.png. A XSS mind map ;)

sslScrape. SSLScrape | A scanning tool for scaping hostnames from SSL certificates.

LinkFinder. A python script that finds endpoints in JavaScript files

lazyrecon. This script is intended to automate your reconnaissance process in an organized fashion

can-i-take-over-xyz. "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

CloudBrute. Awesome cloud enumerator

ios_sh. ios source grepper

sus_params. Python

amass. In-depth DNS Enumeration and Network Mapping

nuclei-templates. Community curated list of template files for the nuclei engine to find security vulnerability and fingerprinting the targets.

system_prompts_leaks. Collection of extracted System Prompts from popular chatbots like ChatGPT, Claude & Gemini

megplus. Automated reconnaissance wrapper — TomNomNom's meg on steroids.

mywebappscripts. A collection of all the lists, scripts and techniques I use while doing web application penetration tests.

asnrecon. ASN reconnaissance script

Amass-1. In-depth Attack Surface Mapping and Asset Discovery

pwnwiki.github.io. PwnWiki - The notes section of the pentesters mind.

hackerone_wordlist. The wordlists that have been compiled using disclosed reports at HackerOne bug bounty platform

bugcrowd-levelup-subdomain-enumeration. This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bucrowd LevelUp 2017 virtual conference

LazyFuzzer. Ease-of-use extension for Web Application penetration testing

massdns. A high-performance DNS stub resolver for bulk lookups

deepdarkCTI. Collection of Cyber Threat Intelligence sources from the deep and dark web

karma_v2. ⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)

www-project-top-25-parameters. OWASP Foundation Web Respository

security-template. A static website template for security pages.

brutesubs. An automation framework for running multiple open sourced subdomain bruteforcing tools (in parallel) using your own wordlists via Docker Compose

waybackunifier. See the history of a file from above

ScanCannon. Combines the speed of masscan with the reliability and detailed enumeration of nmap

research. Hello and welcome to my GitHub account. If you'd like to know more about me, this is likely the best place to start

OWASP-VWAD. The OWASP Vulnerable Web Applications Directory Project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.

RustScan. 🤖 The Modern Port Scanner 🤖

xssHunterExtension. Chrome Extension for XSS Hunter Payloads

JSParser. Python

GraphRunner. A Post-exploitation Toolset for Interacting with the Microsoft Graph API

JS-Scan. a .js scanner, built in php. designed to scrape urls and other info

disclose. Driving safety, simplicity, and standardization in vulnerability disclosure.

TTSL. Tool to scrape LinkedIn

nowafpls. Burp Plugin to Bypass WAFs through the insertion of Junk Data

SecurityTools. A repo for collecting and organizing security tools of various types. As new ones come out, they get added to the list.

meetup. ⭐️ Repositorio oficial de Angular Medellín ⭐️