בס״ד

---

Bug Bounty

• Awesomes
• Books
• Cheatsheets
• Checklists
• Tools
• Wordlists
• More

---

GitHub Bounty

GitHub Security Bug Bounty

Software security researchers are increasingly engaging with internet companies to hunt down vulnerabilities.

Our bounty program gives a tip of the hat to these researchers and provides rewards of $30,000 or more for critical vulnerabilities.

Awesomes

• Awesome Bug Bounty Tools

  A curated list of various bug bounty tools

  https://github.com/vavkamil/awesome-bugbounty-tools

• Awesome Bug Bounty

  A comprehensive curated list of Bug Bounty Programs and write-ups from the Bug Bounty hunters.

• Awesome CTF

  A curated list of Capture The Flag (CTF) frameworks, libraries, resources, softwares and tutorials. This list aims to help starters as well as seasoned CTF players to find everything related to CTFs at one place.

• Awesome Bug Bounty Builder

  Awesome Bug bounty builder Project - ALL common Tools for find your Vulnerabilities.

  

---

Books

• Hacking-Books Here Are Some Popular Hacking PDF

• The Threat Hunter Playbook ~ The Threat Hunter Playbook

• 

  The Threat Hunter Playbook is a community-driven, open source project to share detection logic, adversary tradecraft and resources to make detection development more efficient. All the detection documents in this project follow the structure of MITRE ATT&CK categorizing post-compromise adversary behavior in tactical groups and are available in the form of interactive notebooks. The use of notebooks not only allow us to share text, queries and expected output, but also code to help others run detection logic against pre-recorded security datasets locally or remotely through BinderHub cloud computing environments.

---

Cheatsheets

• Bug Bounty Cheat Sheet

  A list of interesting payloads, tips and tricks for bug bounty hunters.

• Bug Bounty Cheat Sheet

  A list of interesting payloads, tips and tricks for bug bounty hunters.

---

Cheacklists

• Galaxy-Bugbounty-Checklist
  

  Tips and Tutorials for Bug Bounty and also Penetration Tests.

---

Tools

• Bug Bounty Methodology & Tools

Here are some of the tools that we use when we perform Live Recon Passive ONLY on Twitch:

1. Recon-ng https://github.com/lanmaster53/recon-ng
2. httpx https://github.com/projectdiscovery/httpx
3. isup.sh https://github.com/gitnepal/isup
4. Arjun https://github.com/s0md3v/Arjun
5. jSQL https://github.com/ron190/jsql-injection
6. Smuggler https://github.com/defparam/smuggler
7. Sn1per https://github.com/1N3/Sn1per
8. Spiderfoot https://github.com/smicallef/spiderfoot
9. Nuclei https://github.com/projectdiscovery/nuclei
10. Jaeles https://github.com/jaeles-project/jaeles
11. ChopChop https://github.com/michelin/ChopChop
12. Inception https://github.com/proabiral/inception
13. Eyewitness https://github.com/FortyNorthSecurity/EyeWitness
14. Meg https://github.com/tomnomnom/meg
15. Gau - Get All Urls https://github.com/lc/gau
16. Snallygaster https://github.com/hannob/snallygaster
17. NMAP https://github.com/nmap/nmap
18. Waybackurls https://github.com/tomnomnom/waybackurls
19. Gotty https://github.com/yudai/gotty
20. GF https://github.com/tomnomnom/gf
21. GF Patterns https://github.com/1ndianl33t/Gf-Patterns
22. Paramspider https://github.com/devanshbatham/ParamSpider
23. XSSER https://github.com/epsylon/xsser
24. UPDOG https://github.com/sc0tfree/updog
25. JSScanner https://github.com/dark-warlord14/JSScanner
26. Takeover https://github.com/m4ll0k/takeover
27. Keyhacks https://github.com/streaak/keyhacks
28. S3 Bucket AIO Pwn https://github.com/blackhatethicalhacking/s3-buckets-aio-pwn
29. BHEH Sub Pwner Recon https://github.com/blackhatethicalhacking/bheh-sub-pwner
30. GitLeaks https://github.com/zricethezav/gitleaks
31. Domain-2IP-Converter https://github.com/blackhatethicalhacking/Domain2IP-Converter
32. Dalfox https://github.com/hahwul/dalfox
33. Log4j Scanner https://github.com/Black-Hat-Ethical-Hacking/log4j-scan
34. Osmedeus https://github.com/j3ssie/osmedeus
35. getJS https://github.com/003random/getJS

• BugDog

  A Powerfull BUG HUNTING TOOL. Supports SQL, XSS, PHP code execution, SSRF,.... I had Appended My Own Payloads which I had founded during my BUG Hunting Rest You can add Your CUSTOM payloads too ;)

  

  • NOTE: BugDog is made with python and requires python2 to run perfectly.

• Bug-Bounty-Tools: Random Tools for Bug Bounty

• BigBountyRecon

  BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

  •