Kamil Vavra

awesome-bugbounty-tools. A curated list of various bug bounty tools

awesome-vulnerable-apps. Awesome Vulnerable Applications

xss2png. PNG IDAT chunks XSS payload generator

dvwp. Damn Vulnerable WordPress

js-snitch. Scans remote JavaScript files with Trufflehog + Semgrep to detect leaked secrets

XFFenum. X-Forwarded-For [403 forbidden] enumeration

wp-update-confusion. WordPress Plugin Update Confusion

XSSwagger. A simple Swagger-ui scanner that can detect old versions vulnerable to various XSS attacks

dkimsc4n. Asynchronous wordlist based DKIM scanner

BBClip. Bug Bounty Clipboard

bugbountytip.com. Flask powered website to display tweets with a hashtag #bugbountytip

h1_2_nuclei. Scan any HackerOne program with Nuclei

SpyPortal. Sniffing & geolocating saved SSIDs

wp2burp. Intercept WordPress requests with Burp Suite

old-repos-backup. Back-up of my old unmaintained GitHub repositories

XSSworm.dev. Self-replication contest

vavkamil.cz. My personal blog at https://vavkamil.cz

web-security-notify. Telegram bot to notify about new Web Security Academy labs

bb_tldr_bot. tldr; bot for r/bugbounty

API-Keys-Snitch. Burp extension to detect & report exposed API keys as an Informative issue

openvpn_proton. OpenVPN / ProtonVPN

xml-rpc-settings. Configure XML-RPC methods to increase the security of your website

r-bugbounty-automod. reddit.com/r/bugbounty AutoModerator config

dvnc. Damn Vulnerable Nginx Config

vavkamil.

pocket-cvss. Offline CVSS v3.1 base score calculator for Flipper Zero.

securitytxt.cz. https://securitytxt.cz/