Awesome

בס״ד

<div align="center"> <h2 align="center"><a href="https://github.com/Anlominus">⚜️ Aภl๏miuภuຮ ⚜️</a></h2> <img align="center" width="100" src="https://user-images.githubusercontent.com/51442719/172729066-1293d382-4a31-4f03-8c23-ab0ea5f611a0.png">

</div>

Bug Bounty

Awesomes

Books

Cheatsheets

Checklists

Tools

Wordlists

More

GitHub Bounty

GitHub Security Bug Bounty

Software security researchers are increasingly engaging with internet companies to hunt down vulnerabilities.

Our bounty program gives a tip of the hat to these researchers and provides rewards of $30,000 or more for critical vulnerabilities.

Awesomes

Awesome Bug Bounty Tools

A curated list of various bug bounty tools

https://github.com/vavkamil/awesome-bugbounty-tools
Awesome Bug Bounty

A comprehensive curated list of Bug Bounty Programs and write-ups from the Bug Bounty hunters.
Awesome CTF

A curated list of Capture The Flag (CTF) frameworks, libraries, resources, softwares and tutorials. This list aims to help starters as well as seasoned CTF players to find everything related to CTFs at one place.
Awesome Bug Bounty Builder

Awesome Bug bounty builder Project - ALL common Tools for find your Vulnerabilities.

Books

Hacking-Books Here Are Some Popular Hacking PDF
The Threat Hunter Playbook ~ The Threat Hunter Playbook
The Threat Hunter Playbook is a community-driven, open source project to share detection logic, adversary tradecraft and resources to make detection development more efficient. All the detection documents in this project follow the structure of MITRE ATT&CK categorizing post-compromise adversary behavior in tactical groups and are available in the form of interactive notebooks. The use of notebooks not only allow us to share text, queries and expected output, but also code to help others run detection logic against pre-recorded security datasets locally or remotely through BinderHub cloud computing environments.

Cheatsheets

Bug Bounty Cheat Sheet

A list of interesting payloads, tips and tricks for bug bounty hunters.
Bug Bounty Cheat Sheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

Cheacklists

Galaxy-Bugbounty-Checklist <br>

Tips and Tutorials for Bug Bounty and also Penetration Tests.

Tools

Bug Bounty Methodology & Tools

Here are some of the tools that we use when we perform Live Recon Passive ONLY on Twitch:

Recon-ng https://github.com/lanmaster53/recon-ng
httpx https://github.com/projectdiscovery/httpx
isup.sh https://github.com/gitnepal/isup
Arjun https://github.com/s0md3v/Arjun
jSQL https://github.com/ron190/jsql-injection
Smuggler https://github.com/defparam/smuggler
Sn1per https://github.com/1N3/Sn1per
Spiderfoot https://github.com/smicallef/spiderfoot
Nuclei https://github.com/projectdiscovery/nuclei
Jaeles https://github.com/jaeles-project/jaeles
ChopChop https://github.com/michelin/ChopChop
Inception https://github.com/proabiral/inception
Eyewitness https://github.com/FortyNorthSecurity/EyeWitness
Meg https://github.com/tomnomnom/meg
Gau - Get All Urls https://github.com/lc/gau
Snallygaster https://github.com/hannob/snallygaster
NMAP https://github.com/nmap/nmap
Waybackurls https://github.com/tomnomnom/waybackurls
Gotty https://github.com/yudai/gotty
GF https://github.com/tomnomnom/gf
GF Patterns https://github.com/1ndianl33t/Gf-Patterns
Paramspider https://github.com/devanshbatham/ParamSpider
XSSER https://github.com/epsylon/xsser
UPDOG https://github.com/sc0tfree/updog
JSScanner https://github.com/dark-warlord14/JSScanner
Takeover https://github.com/m4ll0k/takeover
Keyhacks https://github.com/streaak/keyhacks
S3 Bucket AIO Pwn https://github.com/blackhatethicalhacking/s3-buckets-aio-pwn
BHEH Sub Pwner Recon https://github.com/blackhatethicalhacking/bheh-sub-pwner
GitLeaks https://github.com/zricethezav/gitleaks
Domain-2IP-Converter https://github.com/blackhatethicalhacking/Domain2IP-Converter
Dalfox https://github.com/hahwul/dalfox
Log4j Scanner https://github.com/Black-Hat-Ethical-Hacking/log4j-scan
Osmedeus https://github.com/j3ssie/osmedeus
getJS https://github.com/003random/getJS

BugDog
A Powerfull BUG HUNTING TOOL. Supports SQL, XSS, PHP code execution, SSRF,.... I had Appended My Own Payloads which I had founded during my BUG Hunting Rest You can add Your CUSTOM payloads too ;)
- NOTE: BugDog is made with python and requires python2 to run perfectly.
Bug-Bounty-Tools: Random Tools for Bug Bounty
BigBountyRecon

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.
Hack-Pet:

hack-pet is collection of command snippets that are useful to hackers/bug bounty hunters. <br>

It is similar to the recon_profile, but it uses the pet. pet can manage the command set more progressively. <br>

<br>
CTF-tool

A curated list of Capture The Flag (CTF) frameworks, libraries, resources and softwares.
Bug bounty toolkit

Here you can find a list of differents tools that you can use in bug bounty or pentesting.

Some categories and tools will be added as we go.

If you have questions or suggestions, don't hesitate to contact me on twitter (https://twitter.com/_sehno_)
BugHuntingToolKit

This Is A Tool For Bug Hunters in this tool i have included the tools which bug hunters use
Parrots Recon

Recon Automation for BugBounties
OK-VPS

Bug Bounty Vps Setup Tools Installer

With these tools you can install most of the bug bounty tools with just one command and The tool has been modified and spelled many tools ## special thanks @supr4s Because most of these tools modify his tools
kali-repos

Kali Linux containers for bug bounty and CTFs
Bot-Bounty

Python Script for Telegram Bot is specially built for pentest & bug bounty. It's like a telegram shell.

You will be notified when your task(command line) is finished with results. This bot make long time tasks by you, taking off the need of your attention if it's finished.

<br> <br>
Subdomains recon
- amass
- subfinder
- assetfinder
- dnsgen
- shuffledns
- httprobe
- aquatone
Manual recon
- shodan
- censys
- google dorks
- pastebin
- github
Enumeration / Crawling
- nmap
- ffuf
- hakrawler
- gau
- paramspider
- arjun
- parameth
XSS
SQL Injection
- sqlmap
- waybacksqliscanner

Wordlists

Bug-Bounty-Wordlists

A repository that includes all the important wordlists used while bug hunting.
a-full-list-of-wordlists

this contain the burp pack
FuzzDB

FuzzDB was created to increase the likelihood of finding application security vulnerabilities through dynamic application security testing. It's the first and most comprehensive open dictionary of fault injection patterns, predictable resource locations, and regex for matching server responses.
wordlist-tools

A set of tools for making life easier with wordlists

The Bug Hunter's Methodology (TBHM)

related to web application security assessments and more specifically towards bug hunting in bug bounties.
Galaxy-Bugbounty-Checklist:

Tips and Tutorials for Bug Bounty and also Penetration Tests.
HowToHunt

Tutorials and Things to Do while Hunting Vulnerability.
Awesome-Bugbounty-Writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference
AllAboutBugBounty

All about bug bounty (bypasses, payloads, and etc)
HolyTips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.
KingOfBugBountyTips <br>

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..
Resources-for-Beginner-Bug-Bounty-Hunters:
###A list of resources for those interested in getting started in bug bounties

Table of Contents

^ Back to TOP ^

</h2>

Awesome

Bug Bounty

GitHub Security Bug Bounty

Software security researchers are increasingly engaging with internet companies to hunt down vulnerabilities.

Our bounty program gives a tip of the hat to these researchers and provides rewards of $30,000 or more for critical vulnerabilities.

Awesomes

A curated list of various bug bounty tools

A curated list of Capture The Flag (CTF) frameworks, libraries, resources, softwares and tutorials. This list aims to help starters as well as seasoned CTF players to find everything related to CTFs at one place.

Awesome Bug bounty builder Project - ALL common Tools for find your Vulnerabilities.

Books

Hacking-Books Here Are Some Popular Hacking PDF

The Threat Hunter Playbook ~ The Threat Hunter Playbook

Cheatsheets

A list of interesting payloads, tips and tricks for bug bounty hunters.

Cheacklists

Galaxy-Bugbounty-Checklist <br>

Tips and Tutorials for Bug Bounty and also Penetration Tests.

Tools

A Powerfull BUG HUNTING TOOL. Supports SQL, XSS, PHP code execution, SSRF,.... I had Appended My Own Payloads which I had founded during my BUG Hunting Rest You can add Your CUSTOM payloads too ;)

NOTE: BugDog is made with python and requires python2 to run perfectly.

Bug-Bounty-Tools: Random Tools for Bug Bounty

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

Hack-Pet:

hack-pet is collection of command snippets that are useful to hackers/bug bounty hunters. <br>

It is similar to the recon_profile, but it uses the pet. pet can manage the command set more progressively. <br>

Here you can find a list of differents tools that you can use in bug bounty or pentesting.

Some categories and tools will be added as we go.

If you have questions or suggestions, don't hesitate to contact me on twitter (https://twitter.com/_sehno_)

This Is A Tool For Bug Hunters in this tool i have included the tools which bug hunters use

Recon Automation for BugBounties

Bug Bounty Vps Setup Tools Installer

With these tools you can install most of the bug bounty tools with just one command and The tool has been modified and spelled many tools ## special thanks @supr4s Because most of these tools modify his tools

Kali Linux containers for bug bounty and CTFs

Python Script for Telegram Bot is specially built for pentest & bug bounty. It's like a telegram shell.

You will be notified when your task(command line) is finished with results. This bot make long time tasks by you, taking off the need of your attention if it's finished.

Subdomains recon

Manual recon

Enumeration / Crawling

XSS

SQL Injection

Wordlists

A repository that includes all the important wordlists used while bug hunting.

this contain the burp pack

More

Galaxy-Bugbounty-Checklist:

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

KingOfBugBountyTips <br>

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

Resources-for-Beginner-Bug-Bounty-Hunters:

Table of Contents

A curated list of `Capture The Flag` (`CTF`) frameworks, libraries, resources, softwares and tutorials. This list aims to help starters as well as seasoned CTF players to find everything related to CTFs at one place.