Shiv Chouhan

Bug-Bounty-Roadmaps. Bug Bounty Roadmaps

Gf-Patterns. GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

Bugbounty-Resources. A list of resources for those interested in getting started in bug bounties inspired from https://github.com/nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters

urlprobe. Urls status code & content length checker

All-in-one_BugBounty_PDF_bundles.

1ndiList. Recon Custom WordList Ganerator

BugBounty_Profile. Recon_profile

1ndi-hacks. Bug Bounty Tools

1ndiwordlist. Bug Bounty Recon wordlist Generator

dotfiles. .bash_profile , .bashrc , .vimrc etc

1ndiSpider. Fast Web Crawler

EchoPwn. Recon Automation for hackers by hackers

Command-Mobile-Penetration-Testing-Cheatsheet. Mobile penetration testing android & iOS command cheatsheet

1ndiSubs. Subdomain Enumeration Tool

bugbounty-cheatsheet. A list of interesting payloads, tips and tricks for bug bounty hunters.

hacking-methodologies. Hack

recox. Master script for web reconnaissance

fff. The Fairly Fast Fetcher. Requests a bunch of URLs provided on stdin fairly quickly.

Awesome-Bugbounty-Writeups. A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

meg. Fetch many paths for many hosts - without killing the hosts

1ndiRecon. All-in-one Bug bounty Recon

gf. A wrapper around grep, to help you grep for things

ParamSpider. Mining parameters from dark corners of Web Archives

Sublist3r. Fast subdomains enumeration tool for penetration testers

awesome-design. 🌟Curated design resources

gahttp. Async / concurrent HTTP requests for Go

recon-pipeline. An automated target reconnaissance pipeline.

awesome-bug-bounty. A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

fuzzmost. all manner of wordlists

ptools. Go

dnsdig. Perform Multiple Dns queries

Bountystrike-sh. Poor (rich?) man's bug bounty pipeline

gmapsapiscanner. Python

Subrake. A powerful Subdomain Scanner & Validator for Reconnaissance.

quiver. Quiver is the tool to manage all of your tools. It's an opinionated and curated collection of commands, notes and scripts for bug bounty hunting and penetration testing.

gwdomains. sub domain wild card filtering tool

Arjun. HTTP parameter discovery suite.

cf-check. Check an IP is Owned by Cloudflare

Bash-Hacks.

generator-burp-extension. Everithing you need about Burp Extension Generation

gowhois. Go

dalfox. DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang

jwtbin. Generate JWT Tokens using a Secret and Command Line Options (claims/expiration)

bhg. Code samples for No Starch Press Black Hat Go

SSRFmap. Automatic SSRF fuzzer and exploitation tool

Awesome-Asset-Discovery. List of Awesome Asset Discovery Resources

BurpBounty. Burp Bounty (Scan Check Builder in BApps Store) is a extension of Burp Suite that improve an active and passive scanner by yourself. This extension requires Burp Suite Pro.

dirsearch. Web path scanner

SMBrute. SMB Protocol Bruteforce