Shockwave-OSS
gal-nagli/shockwave-ossCurated collection of bug bounty tips, one-liners, and automation workflows for recon, fuzzing, and web exploitation, with private nuclei templates…
curated-resourceseducationfuzzing+9
749
gal-nagli/shockwave-ossCurated collection of bug bounty tips, one-liners, and automation workflows for recon, fuzzing, and web exploitation, with private nuclei templates…
dawgyg/bugbounty_toolsCollection of scripts and tools used during bug bounty work. This will be the location of my automation scripts created for my own personal use, and…
robotshell/magicreconMagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this…
sleepingbag945/ddddBatch asset collection and vulnerability scanning tool for red teams. Pulls targets from Hunter, Fofa, and Quake, performs fingerprinting, subdomain…
samhaxr/hackboxHackBox is a powerful and comprehensive tool that combines a variety of techniques for web application and network security assessments, including…
bitthebyte/eagleMultithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities
daffainfo/oneliner-bugbountyA collection oneliner scripts for bug bounty
elmasy-com/columbus-serverAPI-first subdomain discovery service using Certificate Transparency logs for fast, passive enumeration of subdomains via a REST API with JSON or…
projectdiscovery/nucleiFast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…
projectdiscovery/httpxFast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…
h4r5h1t/webcopilotAn automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for…
devcop95/bugbounty-lab101A complete bug bounty workspace for HackerOne researchers. Includes scope enforcement, automated recon/vuln pipeline (400+ tools), report templates,…
cybertix-pvt-ltd/one-liner-collectionsThis Repositories contains list of One Liners with Descriptions and Installation requirements
joasasantos/php2shell-scannerNon-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing,…
karim852/kumo-domain-recon-toolDomain OSINT and security reconnaissance framework running 26 parallel modules for DNS, ports, subdomains, leaked credentials, exposed endpoints,…
joshkar/x-reconA utility for detecting webpage inputs and conducting XSS scans.
hackingteamoficial/getrobarbAutomated reconnaissance and XSS detection framework integrating subfinder, httpx, katana, gospider, waybackurls, and dalfox into a 9-stage pipeline…
qyvora/qyvora-anansiTerminal-first attack surface intelligence engine. Built for speed, portability, and raw technical signal.