Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality. Learn more →
Top 15 Go bug-bounty Projects
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
-
xurlfind3r
A command-line interface (CLI) based passive URLs discovery utility. It is designed to efficiently identify known URLs of given domains by tapping into a multitude of curated online passive sources.
-
ppmap
A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.
-
exifLooter
ExifLooter finds geolocation on all image urls and directories also integrates with OpenStreetMap
-
WorkOS
The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
-
dorkscout
DorkScout - Golang tool to automate google dork scan against the entiere internet or specific targets
-
favirecon
Use favicon.ico to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
For the query string, you don’t have to implement your own DSL. Elasticsearch supports it out of the box. You could POST a JSON object to “/_search” but you can also do a GET with the “q” query parameter.
Documentation: https://www.elastic.co/guide/en/elasticsearch/reference/curr...
In the Golang library you can use the “Search.WithQuery” option. This means you don’t have to construct a JSON request body.
Here’s an example: https://github.com/taythebot/archer/blob/main/pkg/elasticsea...
The Elasticsearch Golang library is a real pain to use. It was meant as a low level library so they didn’t add any types. However they are currently working on a typed client! The documentation is a bit lacking but going through go.dev you can find all the methods you need. This still means you need to JSON decode the response, but it helps you build queries, which is a step up.
Typed Client: https://www.elastic.co/guide/en/elasticsearch/client/go-api/...
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Go bug-bounty related posts
- Exiflooter has released on Black Arch Linux
- Automatizovani Google Dorking
- Do you know any Tools that display DNS interactions with your custom URL like burpsuite collaborator but is free?
- goblob: A fast enumeration tool for publicly exposed Azure Storage blobs.
- Boost your recon with favirecon!
- Boost your recon with favirecon
- Boost your recon phase with favirecon
-
A note from our sponsor - InfluxDB
www.influxdata.com | 25 Apr 2024
Index
What are some of the best open-source bug-bounty projects in Go? This list will help you:
| Project | Stars | |
|---|---|---|
| 1 | osmedeus | 5,069 |
| 2 | afrog | 2,798 |
| 3 | metabigor | 1,137 |
| 4 | socialhunter | 608 |
| 5 | xurlfind3r | 520 |
| 6 | ppmap | 446 |
| 7 | exifLooter | 395 |
| 8 | lit-bb-hack-tools | 304 |
| 9 | dorkscout | 216 |
| 10 | favirecon | 162 |
| 11 | goblob | 66 |
| 12 | wafme0w | 59 |
| 13 | archer | 39 |
| 14 | fire | 34 |
| 15 | HTTPCustomHouse | 24 |
Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com