KingOfTips

KingOfBugBountyTips. Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

enumrust. Subdomain Enumerator and Simple Crawler

Bugbounty-Checklist. Tips and Tutorials for Bug Bounty and also Penetration Tests.

s3tk. Go

KingRecon_DOD.

Bug-Bounty-Toolz. BBT - Bug Bounty Tools

DockerHunt. Shell

Discovery-Header-Bug-Bounty. Discovery Header Bug Bounty to DoD

Hardcoded-Token-Hunter. 🔐 Chrome Extension - Detect hardcoded tokens, API keys & secrets in JavaScript files

Dependency-Confusion-Hunter. 🎯 Chrome Extension - Passive scanner for Dependency Confusion vulnerabilities in npm/PyPI packages

SecretFinder. SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

gitPullScrapper. Nuclei Pre-Master Template Downloader

crawlgoogle. Chrome extension to extract domains from Google search results - by ofjaaah

urlextract. URLess is a simple but powerful tool that removes paths from URLs, generating multiple variations of the base domain. This is useful for security testing, such as LFI (Local File Inclusion), path traversal, and directory fuzzing.

BugBuntu. BugBuntu Linux

caido-postman. Caido plugin for Postman integration - Search public collections, import API requests, replay through Caido, extract headers/body from APIs

nuclearpond-OFJAAAH. Nuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee.

hacks. A collection of hacks and one-off scripts

web-scraping. Anotações e scripts de web scraping, screen scraping, etc

shoscan-cli. Shodanscan is a bash scripting search queries using the shodan cli. 🔥

wordlists. Common Wordlists

airixss. Finding XSS during recon

uniqwordlist. Join wordlist file with subdomains, word by subdomain

axiom. The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

SecLists. SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

nuclei-templates. Community curated list of templates for the nuclei engine to find security vulnerabilities.

bbrf-client. The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices

lemma. Python

jomlaGO. jomlaGO

OSINT-Brazuca. Repositório criado com intuito de reunir informações, fontes(websites/portais) e tricks de OSINT dentro do contexto Brasil.

terraform-nuclear-pond-OFJAAAH. Backend for Nuclear Pond

assetfinder. Find domains and subdomains related to a given domain

samlists. Free, libre, effective, and data-driven wordlists for all!

rayder-workflows. Repo for hosting rayder workflows

freq. This is go CLI tool for send fast Multiple get HTTP request.

altdns. Generates permutations, alterations and mutations of subdomains and then resolves them

hackerone. 404

GitDorker. A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

gotator. Gotator is a tool to generate DNS wordlists through permutations.

haktldextract. Extract domains/subdomains from URLs en masse

HostileSubBruteforcer. Ruby

page-fetch. Fetch web pages using headless Chrome, storing all fetched resources including JavaScript files. Run arbitrary JavaScript on many web pages and see the returned values

faraday_plugins. Security tools report parsers for FaradaySEC

parrot-core. Files to include in the package parrot-core.