Ben Sadeghipour

Resources-for-Beginner-Bug-Bounty-Hunters. A list of resources for those interested in getting started in bug bounties

lazyrecon. This script is intended to automate your reconnaissance process in an organized fashion

bbht. A script to set up a quick Ubuntu 17.10 x64 box with tools I use.

JSParser. Python

lazys3. Ruby

nahamsec.training. The labs for my Udemy course (https://www.udemy.com/course/intro-to-bug-bounty-by-nahamsec)

HostileSubBruteforcer. Ruby

recon_profile. Shell

crtndstry. Yet another subdomain finder

SundayStreams. Data from my Sunday streams

SecLists. SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

recondata. use at your own risk

burpy. Portable and flexible web application security assessment tool.It parses Burp Suite log and performs various tests depending on the module provided and finally generate a HTML report.

juice-shop. OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

intrigue-core. Intelligence gathering framework

hacker101. Source code for Hacker101.com - a free online web and mobile security class.

todo-goof. Java

wordpress-test. PHP

libricons. An icon font for everyone.

apexparser. Go

test. test

nahamsec.github.io. HTML

HTB-Test. test

nahamsec-site-preview. HTML