#bugbounty tool

Sigurlx - A Web Application Attack Surface Mapping Tool #Application #Attack #AttackSurface #BugbountyTool #Mapping

sigurlx a web application attack surface mapping tool, it does …: Categorize URLs URLs’ categories: > endpoint > js {js} > style {css} > data {json|xml|csv} > archive {zip|tar|tar.gz} > doc {pdf|xlsx|doc|docx|txt} > media {jpg|jpeg|png|ico|svg|gif|webp|mp3|mp4|woff|woff2|ttf|eot|tif|tiff} Next, probe HTTP requests to the URLs for status_code, content_type, e.t.c Next, for every URL of category…

BigBountyRecon - Utilises 58 Different Techniques On Intial Reconnaissance On The Target Organisation #BigBountyRecon

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation. Reconnaissance is the most important step in any penetration testing or a bug hunting process. It provides an attacker with some preliminary knowledge on the target organisation. Furthermore, it will be useful to gain…

GRecon - Your Google Recon Is Now Automated #Automated #Bugbounty #BugbountyTool #dorks #Google #GRecon #python #recon

GRecon (Greei-Conn) is a simple python tool that automates the process of Google Based Recon AKA Google Dorking The current Version 1.0 Run 7 Search Queries (7 Micro-Plugins) on the spicified Target Providing Awsome Results Current Version Run Google Search Queries to find : Subdomains Sub-Subdomains Signup/Login pages Dir Listing Exposed Docs pdf…xls…docx… WordPress Entries Pasting…

JSFScan.sh - Automation For Javascript Recon In Bug Bounty #automation #Bounty #Bug #BugbountyTool #golang #Hakrawler

Blog can be found at https://medium.com/@patelkathan22/beginners-guide-on-how-you-can-use-javascript-in-bugbounty-492f6eb1f9ea?sk=21500dc4288281c7e6ed2315943269e7 Script made for all your javascript recon automation in bugbounty. Just pass subdomain list to it and options according to your preference. Features 1 - Gather Jsfile Links from different sources. 2 - Import File Containing JSUrls 3 -…

Wordlist_Generator - Unique Wordlist Generator Of Unique Wordlists #BugbountyTool #generator #Unique #wordlist

[sc name=”ad_1″]

wordlist_generator generates wordlists with unique words with techniques mentioned in tomnomnom’s report “Who, What, Where, When”. It takes URLs from gau and splits them to get words in URLs. Then it requests each URL to fetch all words. Finally, wordlist_generator removes from wordlisteverything from “denylists” directory files to keep only unique words, which you can use for…

CorsMe - Cross Origin Resource Sharing MisConfiguration Scanner #BugbountyTool #CORS #CORSMisconfiguration

[sc name=”ad_1″]

A Misconfiguration Scanner cors misconfiguration scanner tool based on golang with speed and precision in mind !

Misconfiguration type this scanner can check for

Reflect Origin checks

Prefix Match

Suffix Match

Not Esacped Dots

Null

ThirdParties (Like => github.io, repl.it etc.)

Taken from Chenjj’s github repo

SpecialChars (Like => “}”,”(“, etc.)

See more in Advanced CORS Exploit…