honoki

bbrf-client. The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices

bbrf-server. The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices

bugbounty-openvpn-socks. Run all your bug bounty VPN profiles in parallel and expose them via multiple local SOCKS proxies.

burp-digitalocean-droplet-proxy. Deploy a SOCKS5 proxy in DigitalOcean and autoconfigure the Burp proxy settings to route all traffic through the droplet

burp-digitalocean-openvpn-socks. A BurpSuite extension to deploy an OpenVPN config file to DigitalOcean and set up a SOCKS proxy to route traffic through it

wilson-cloud-respwnder. WILSON Cloud Respwnder is a Web Interaction Logger Sending Out Notifications with the ability to serve custom content in order to appropriately respond to client-issued requests.

bbrf-dashboard. Vue

tools. A collection of simple tools and poc-builders

burp-copy-regex-matches. Burp Suite plugin to copy regex matches from selected requests and/or responses to the clipboard.

burp-pac-server. Generate a dynamic PAC script that will route traffic to your Burp proxy only if it matches the scope defined in your Burp target.

bbrf-burp-plugin. A BurpSuite plugin for BBRF

bbrf-agents. A collection of BBRF agents that can be deployed to AWS lambda

punycoder. A script to automatically list visually indistinguishable permutations of domain names using IDN and punycode.

httprebind. Automatic tool for DNS rebinding-based SSRF attacks

bountydash. BountyDash is a tool to combine your rewards from all platforms, giving you insights about your progress and bug hunting patterns.

writeups.

elastic-burp. The Web Audit Search Engine - Index and Search HTTP Requests and Responses in Web Application Audits with ElasticSearch

CSRFBlock. A PHP adaptation of OWASP's CSRFGuard that starts from a whitelist approach to protect websites against CSRF attacks.

skipper. An HTTP router and reverse proxy for service composition, including use cases like Kubernetes Ingress