subn0x / awesome-bbht Goto Github PK
View Code? Open in Web Editor NEWA bash script that will automatically install a list of bug hunting tools that I find interesting for recon, exploitation, etc. (minus burp) For Ubuntu/Debain.
A bash script that will automatically install a list of bug hunting tools that I find interesting for recon, exploitation, etc. (minus burp) For Ubuntu/Debain.
Dear Sir,
Current version does not install gf, gau, waybackurls Ubuntu Or Kali Linux. It does not show installation path to add API, or other keys for censys, shodan based scripts or tools.
Second thing, please make it world no.01 web bug hunting installer by adding these top notch bug hunting tools.
Subdomains enumeration:
Amass
Assetfinder
Crobat
Findomain
Github-subdomains
Subfinder
Sudomy
subdomainizer
sublister
findomain
Subdomain Takeover:
Subover
Autosubtakeover
Tko-subs
Subjack
Cloud Workflow: AWS_Recon
festin
lazys3
s3brute
flumberboozle
slurp
DNS resolver
dnsx
MassDNS
PureDNS
ShuffleDNS
DNSvalidator
Visual Inspection - Screenshots
Aquatone
Gowitness
httpscreenshot
HTTP probe
httprobe
httpx
Web crawler / Content Discovery
Gospider
Hakrawler
ParamSpider
gau
waybackurls
paramspider
GF
GF_Pattern
Photon
Network scanner
Rustscan
Masscan
Naabu
Nmap
Brutespray
HTTP Parameter
Arjun
x8 *
Fuzzing tools
Ffuf
Gobuster
Wfuzz
Gobuster
Dirsearch
Dirb
LFI/RFI tools
LFISuite
Fimap
XPR1M3 / sqli-lfi-xss-rce-dorker-and-auto-exploiter-Python
https://github.com/XPR1M3/sqli-lfi-xss-rce-dorker-and-auto-exploiter-Python-.git
Spring4Shell:
redhuntlabs / Hunt4Spring | https://github.com/redhuntlabs/Hunt4Spring.git
Log4j:
log4jscan for Linux | https://github.com/intezer/log4jscan.git
SSRF tools
SSRFmap
Gopherus
Interactsh
SSTI tools
tplmap *
API hacking tools
Kiterunner + API routes
Wordlists
SecLists
Vulns - XSS
Dalfox
Bxss
XSpear
kxss
XSStrike
Gxss
FinDOM-XSS
X5S
Xenotix XSS Exploit Framework
Vulns - SQL Injection
SQLbit
BSQL hacker
SQLMap
SQLninja
Safe3 SQL injector
SQLSus
Mole
NoSQLMap
SQLmate
ATLAS (WAF Bypass Suggester for SQLmap)
SQLiScanner
AutoSQLi
Bypass-WAF-SQLMAP
KhetaguriDimitri/SQL-Injection
Agressiv1njector/psqli-pro
AngelSecurityTeam/SQLiDumper-AngelSecurityTeam
JohnTroony/Blisqy
quadcoreside/QuadCore-Web-SQLi-Injecter-DB-Dumper
enjoiz/BSQLinjector
lanmaster53/sqli-exploiter
Sqliv
Havij
BBQSQL
Leviathan
WhiteWidow
jSQL Injection
CMS Scanner
WPscan
droopescan
AEM-Hacker
Drupwn
Wig
Vulns - Scanner
Jaeles
Nikto **
Nuclei
JavaScript hunting
LinkFinder
SecretFinder
subjs
GetJS
Find_Web_Technologies
Wappalyzer CLI
Git Hunting / GIT Enum Tools:
GitDorker *
gitGraber *
GitHacker *
GitTools *
Githound
Trufflehog
Gitscanner
Sensitive Stuff Finding
DumpsterDiver *
EarlyBird *
Ripgrep
Useful tools
anew
anti-burl
getallurls
gron
Interlace
jq *
qsreplace
Tmux
unfurl
Uro *
Web Exploitation Frameworks:
Sn1per
Vajra
Jok3r v3 beta
osmedeus
cobra
Arachni
TIDoS Framework
sudomy
Grabber
Vega
Zed Attack Proxy
Wapiti
W3af
WebScarab
Skipfish
Ratproxy
Wfuzz
Grendel-Scan
Watcher
JS Enumeration Tools:
jsscanner
jsparser
linkfinder
Fingerprint & CVE Tools:
nuclei
webtech
waf
...
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.