bugbounty

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Web path scanner

Fast passive subdomain enumeration tool.

Community curated list of templates for the nuclei engine to find security vulnerabilities.

An HTTP toolkit for security research.

The recursive internet scanner for hackers. 🧡

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

OneForAll是一款功能强大的子域收集工具

A Modern Orchestration Engine for Security

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

Advanced LLM-powered brute-force tool combining AI intelligence with automated login attacks

Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more

A curated collection of top-tier penetration testing tools and productivity utilities across multiple domains. Join us to explore, contribute, and enhance your hacking toolkit!

🔱 Powerfull XSS Scanning and Parameter analysis tool&gem