awesome-bugbounty-tools
interactsh
| awesome-bugbounty-tools | interactsh | |
|---|---|---|
| 11 | 9 | |
| 3,565 | 3,106 | |
| - | 2.7% | |
| 5.4 | 9.2 | |
| 8 days ago | 4 days ago | |
| Go | ||
| Creative Commons Zero v1.0 Universal | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
awesome-bugbounty-tools
- Automated recognition frameworks?
- Automated tools
-
A vast collection of security tools
I'm wondering if we can exchange data with https://github.com/vavkamil/awesome-bugbounty-tools
- Burp Suite Pro Alternatives
- Automation
- Vulnerability scanners for a lot of domains
-
What are you all using for taking screenshots?
https://github.com/vavkamil/awesome-bugbounty-tools/#Screenshots
-
Hi! I'm new to bug bounty and I decided to start to make a blog to document my journey and to hopefully inspire other beginners or people who aren't sure if they should start, to start. I just made my first post and had some questions at the end that I was hoping someone would be able to answer?
This is all provided in https://github.com/vavkamil/awesome-bugbounty-tools/ which I already gave you, but you only did the first step (subs + screenshots).
-
Quick Question After Watching The Bug Hunter's Methodology V4.0
Check https://github.com/vavkamil/awesome-bugbounty-tools/ there is always something you can do with them :)
- Awesome bug bounty tools
interactsh
- Do you know any Tools that display DNS interactions with your custom URL like burpsuite collaborator but is free?
-
Free servers for locating blind web app vulnerabilities
Would need hosting but try https://github.com/projectdiscovery/interactsh
-
Burp Suite Professional (Paid/Crack/Community)
OWASP ZAP is awesome when you are starting out, and keeps you from getting lazy. Pair it with something like https://github.com/projectdiscovery/interactsh for Out Of Band interactions (which would be the alternative to Burp Collaborator) and it will be pretty complete.
-
Burp Suite Pro Alternatives
Setup yourself: https://github.com/projectdiscovery/interactsh https://github.com/redfast00/malidate https://github.com/ettic-team/dnsbin https://github.com/allyomalley/dnsobserver
- Create own Burp Collaborator?
-
LinkBait - The Privacy, Security, & OSINT Show – Episode 187
I haven't listened to the episode yet, but based on the description it sounds very similar to various projects like interactsh. You can play around with it for free on https://app.interactsh.com. Take a look, it might be enough for your needs.
-
Log4Shell Log4j vulnerability (CVE-2021-44228) – cheat-sheet reference guide
https://github.com/projectdiscovery/interactsh
They seem to exfiltrate data. If you see these files hosted in your projects, then you are probably part of it now.
- Burp Collaborator alternative
What are some alternatives?
awesome-oneliner-bugbounty - A collection of awesome one-liner scripts especially for bug bounty tips.
urlhunter - a recon tool that allows searching on URLs that are exposed via shortener services
webscreenshot - A simple script to screenshot a list of websites
go-dork - The fastest dork scanner written in Go.
jaeles - The Swiss Army knife for automated Web Application Testing
WebHackersWeapons - ⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting
golang-tls - Simple Golang HTTPS/TLS Examples
Apache Log4j 2 - Apache Log4j 2 is a versatile, feature-rich, efficient logging API and backend for Java.
personal-security-checklist - 🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2024
log4shell - Operational information regarding the log4shell vulnerabilities in the Log4j logging library.
awesome-python-security - Awesome Python Security resources 🕶🐍🔐
dnsbin - The request.bin of DNS request