awesome-bugbounty-tools

Enumerate s3 buckets for a specific target.

Tools to identify vulnerable Adobe Experience Manager (AEM) webapps.

Adobe Experience Manager Vulnerability Scanner

Generates permutations, alterations and mutations of subdomains and then resolves them.

Fast and customizable subdomain wordlist generator using DSL. alterx takes patterns as input and generates subdomain permutation wordlist based on that pattern.

A tool for adding new lines to files, skipping duplicates

In-depth Attack Surface Mapping and Asset Discovery

Aquatone is a tool for visual inspection of websites across a large amount of hosts and is convenient for quickly gaining an overview of HTTP-based attack surface.

HTTP parameter discovery suite.

Another Subdomain ENumeration Tool

Find domains and subdomains related to a given domain

A recursive internet scanner for hackers

Blind SQL Injection Tool with Golang

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily

BurpSuite extension to inject custom cross-site scripting payloads on every form/request submitted to detect blind XSS vulnerabilities

A python library to automate time-based blind SQL injection

BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application.

Fuzzing for LFI using Burpsuite

A collection of android security related resources

Offline-first, searchable arsenal for pentest & bug bounty: ~1500 payloads, a click-to-build command generator, GTFOBins, wordlists, an embedded CyberChef, reverse shells and 70 checklists. Self-hosted web app with a live static demo.

Go CLI and Library for quickly mapping organization network ranges using ASN information.

An effort to build a single place for all useful android and iOS security related stuff.

Awesome Vulnerable Applications

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.