bugbounty-cheatsheet by EdOverflow

A list of interesting payloads, tips and tricks for bug bounty hunters.

created at July 13, 2017, 4:50 p.m.

Unknown languages

240 +1

5,942 +16

1,553 +2

GitHub
Ciphey by Ciphey

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

created at July 16, 2019, 8:20 p.m.

Python

238 +0

18,225 +31

1,165 +2

GitHub
amass by owasp-amass

In-depth attack surface mapping and asset discovery

created at July 10, 2018, 4:05 p.m.

Go

214 -2

12,076 +33

1,885 +3

GitHub
js-beautify by beautifier

Beautifier for javascript

created at Dec. 4, 2008, 6:35 a.m.

JavaScript

211 +0

8,634 +6

1,384 -2

GitHub
Luyten by deathmarine

An Open Source Java Decompiler Gui for Procyon

created at July 11, 2013, 10:57 a.m.

Java

209 +0

5,008 +4

999 +0

GitHub
awesome-pentest-cheat-sheets by coreb1t

Collection of the cheat sheets useful for pentesting

created at Nov. 29, 2016, midnight

Unknown languages

182 +0

3,887 +7

771 +2

GitHub
sleuthkit by sleuthkit

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

created at Oct. 12, 2011, 2:26 p.m.

C++

182 +0

2,631 +4

608 +0

GitHub
juice-shop by juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

created at Sept. 19, 2014, 2:53 p.m.

TypeScript

161 +0

10,468 +20

10,939 +47

GitHub
Dependencies by lucasg

A rewrite of the old legacy software "depends.exe" in C# for Windows devs to troubleshoot dll load dependencies issues.

created at June 25, 2017, 3 p.m.

C#

157 +1

9,140 +29

751 +3

GitHub
subfinder by projectdiscovery

Fast passive subdomain enumeration tool.

created at March 31, 2018, 9:44 a.m.

Go

155 +0

10,281 +30

1,277 +5

GitHub
plasma by plasma-disassembler

Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.

created at March 9, 2015, 9:16 p.m.

Python

149 +0

3,047 +0

277 +0

GitHub
RustScan by RustScan

🤖 The Modern Port Scanner 🤖

created at July 11, 2020, 8 p.m.

Rust

134 +0

14,670 +27

987 +4

GitHub
snowman by yegord

Snowman decompiler

created at May 12, 2015, 4:51 p.m.

Unknown languages

117 +0

2,262 +0

306 +0

GitHub
SILENTTRINITY by byt3bl33d3r

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

created at Sept. 25, 2018, 3:17 p.m.

Boo

111 +0

2,196 +1

404 +1

GitHub
NoSQLMap by codingo

Automated NoSQL database enumeration and web application exploitation tool.

created at Sept. 24, 2013, 3:01 p.m.

Python

105 +0

2,922 +8

581 +1

GitHub
phpsploit by nil0x42

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

created at May 21, 2014, 7:43 p.m.

Python

104 +0

2,221 +8

440 +1

GitHub
kaitai_struct by kaitai-io

Kaitai Struct: declarative language to generate binary data parsers in C++ / C# / Go / Java / JavaScript / Lua / Nim / Perl / PHP / Python / Ruby

created at Feb. 20, 2016, 3:17 p.m.

Shell

95 +0

4,028 +6

197 +0

GitHub
Krakatau by Storyyeller

Java decompiler, assembler, and disassembler

created at Oct. 20, 2012, 1:36 a.m.

Rust

95 +0

1,992 +0

221 +0

GitHub
nipe by GouveaHeitor

An engine to make Tor network your default gateway

created at Sept. 7, 2015, 6:47 p.m.

Perl

85 +0

1,954 +2

315 +0

GitHub
python-uncompyle6 by rocky

A cross-version Python bytecode decompiler

created at Dec. 13, 2015, 5:46 a.m.

Python

79 +0

3,801 +14

410 -3

GitHub