Awesome Open Source
Awesome Open Source
Combined Topics
bugbounty x
pentesting x

The Top 283 Pentesting Bugbounty Open Source Projects

Categories > Software Quality > Bugbounty
Topic > Pentesting
Awesome Hacking ⭐ 49,972
A collection of various awesome lists for hackers, pentesters and security researchers
most recent commit 2 months ago
Payloadsallthethings ⭐ 37,469
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
most recent commit 2 days ago
Pentesting Bible ⭐ 8,066
Learn ethical hacking.Learn about reconnaissance,windows/linux hacking,attacking web technologies,and pen testing wireless networks.Resources for learning malware analysis and reverse engineering.
most recent commit a year ago
Dirsearch ⭐ 7,967
Web path scanner
total releases 6most recent commit 2 days ago
Resources For Beginner Bug Bounty Hunters ⭐ 7,630
A list of resources for those interested in getting started in bug bounties
most recent commit 9 days ago
Wstg ⭐ 4,290
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
most recent commit 17 days ago
Rengine ⭐ 3,989
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
most recent commit 15 days ago
Osmedeus ⭐ 3,833
A Workflow Engine for Offensive Security
most recent commit 19 hours ago
Hetty ⭐ 3,758
An HTTP toolkit for security research.
total releases 18most recent commit 2 months ago
Commix ⭐ 3,262
Automated All-in-One OS Command Injection Exploitation Tool.
most recent commit a day ago
Hakrawler ⭐ 2,705
Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application
total releases 11most recent commit 2 days ago
Reconftw ⭐ 2,594
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
most recent commit 4 days ago
Defaultcreds Cheat Sheet ⭐ 2,338
One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️
most recent commit 9 days ago
Pentest Guide ⭐ 1,733
Penetration tests guide based on OWASP including test cases, resources and examples.
most recent commit 2 months ago
Nosqlmap ⭐ 1,691
Automated NoSQL database enumeration and web application exploitation tool.
most recent commit a year ago
Awesome Mobile Security ⭐ 1,684
An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.
most recent commit a year ago
Black Hat Rust ⭐ 1,593
Applied offensive security with Rust - https://kerkour.com/black-hat-rust
total releases 4most recent commit 5 days ago
Collection Document ⭐ 1,416
Collection of quality safety articles. Awesome articles.
most recent commit a year ago
31 Days Of Api Security Tips ⭐ 1,353
This challenge is Inon Shkedy's 31 days API Security Tips.
most recent commit 9 months ago
Subjack ⭐ 1,336
Subdomain Takeover tool written in Go
most recent commit 7 months ago
Web Fuzzing Box ⭐ 1,316
Web Fuzzing Box - Web 模糊测试字典与一些Payloads，主要包含：弱口令暴力破解、目录以及文件枚举、Web漏洞...字典
most recent commit 9 days ago
Malicious Pdf ⭐ 1,291
💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh
most recent commit 17 days ago
Findsploit ⭐ 1,231
Find exploits in local and online databases instantly
most recent commit 8 months ago
Ezxss ⭐ 1,169
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
most recent commit 7 months ago
Sn0int ⭐ 1,150
Semi-automatic OSINT framework and package manager
dependent packages 2total releases 13most recent commit a month agocargo sn0int-common} Downloads
Dictionary Of Pentesting ⭐ 1,131
Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。
most recent commit 10 days ago
Awsbucketdump ⭐ 1,119
Security Tool to Look For Interesting Files in S3 Buckets
most recent commit 2 months ago
Sudomy ⭐ 1,012
Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting
most recent commit 10 months ago
Learn365 ⭐ 1,006
This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.
most recent commit 5 months ago
Top25 Parameter ⭐ 983
For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙
most recent commit 8 days ago
Interlace ⭐ 939
Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.
most recent commit 24 days ago
Onelistforall ⭐ 932
Rockyou for web fuzzing
most recent commit 14 days ago
Holytips ⭐ 928
A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.
most recent commit 8 months ago
Api Securityempire ⭐ 833
API Security Project aims to present unique attack & defense methods in API Security field
most recent commit 10 days ago
Vhostscan ⭐ 800
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
most recent commit 2 years ago
Swiftnessx ⭐ 775
A cross-platform note-taking & target-tracking app for penetration testers.
most recent commit 2 months ago
Sublert ⭐ 687
Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.
most recent commit a year ago
Dumpall ⭐ 682
一款信息泄漏利用工具，适用于.git/.svn/.DS_Store泄漏和目录列出
total releases 7most recent commit 10 days ago
Redcloud ⭐ 677
Automated Red Team Infrastructure deployement using Docker
most recent commit a year ago
Assessment Mindset ⭐ 664
Security Mindmap that could be useful for the infosec community when doing pentest, bug bounty or red-team assessments.
most recent commit a month ago
Awesome List Of Secrets In Environment Variables ⭐ 632
🦄🔒 Awesome list of secrets in environment variables 🖥️
most recent commit 2 months ago
Subover ⭐ 631
A Powerful Subdomain Takeover Tool
most recent commit 2 years ago
Cve 2021 44228 Poc Log4j Bypass Words ⭐ 611
🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks
most recent commit 4 months ago
Metabigor ⭐ 597
Intelligence tool but without API key
total releases 12most recent commit a month ago
Xspear ⭐ 569
Powerfull XSS Scanning and Parameter analysis tool&gem
total releases 27most recent commit a year ago
Hosthunter ⭐ 560
HostHunter a recon tool for discovering hostnames using OSINT techniques.
most recent commit 8 months ago
Vajra ⭐ 511
Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple target during web applications penetration testing.
most recent commit 7 months ago
Web Cache Vulnerability Scanner ⭐ 492
Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).
most recent commit 17 days ago
Leaky Paths ⭐ 489
A collection of special paths linked to major web CVEs, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.
most recent commit 5 months ago
Findom Xss ⭐ 487
A fast DOM based XSS vulnerability scanner with simplicity.
most recent commit 3 months ago
3klcon ⭐ 472
Automation Recon tool which works with Large & Medium scopes. It performs more than 20 tasks and gets back all the results in separated files.
most recent commit 2 months ago
Bigbountyrecon ⭐ 471
BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.
most recent commit a year ago
Censys Subdomain Finder ⭐ 461
⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.
most recent commit 3 months ago
Garud ⭐ 456
An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.
most recent commit 8 days ago
Cariddi ⭐ 454
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
total releases 8most recent commit 2 days ago
Sonarsearch ⭐ 447
A rapid API for the Project Sonar dataset
total releases 5most recent commit 4 months ago
Offensive Docker ⭐ 440
Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.
most recent commit 2 months ago
Scilla ⭐ 435
Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration
total releases 64most recent commit 2 days ago
Injuredandroid ⭐ 420
A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.
most recent commit a year ago
Payloads ⭐ 405
Payload Arsenal for Pentration Tester and Bug Bounty Hunters
most recent commit 2 months ago
Awesome Vulnerable Apps ⭐ 401
Awesome Vulnerable Applications
most recent commit 14 hours ago
Jsshell ⭐ 392
JSshell - JavaScript reverse/remote shell
most recent commit 3 months ago
Awesome Bbht ⭐ 390
A bash script that will automatically install a list of bug hunting tools that I find interesting for recon, exploitation, etc. (minus burp) For Ubuntu/Debain.
most recent commit 4 months ago
Cloudbrute ⭐ 385
Awesome cloud enumerator
total releases 9most recent commit 3 months ago
Rustbuster ⭐ 373
A Comprehensive Web Fuzzer and Content Discovery Tool
most recent commit 7 months ago
Getjs ⭐ 373
A tool to fastly get all javascript sources/files
most recent commit 2 months ago
Securityexplained ⭐ 316
SecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create informational content in multiple formats and share with the community to enable knowledge creation and learning.
most recent commit a month ago
Webapp Wordlists ⭐ 296
This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contains a wordlist of all the files directories for this version.
most recent commit 24 days ago
Osint_tips ⭐ 294
OSINT
most recent commit a year ago
Asnlookup ⭐ 288
Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.
most recent commit 23 days ago
Ipsourcebypass ⭐ 270
This Python script can be used to bypass IP source restrictions using HTTP headers.
most recent commit 16 days ago
Project Black ⭐ 260
Pentest/BugBounty progress control with scanning modules
most recent commit 2 years ago
Rescope ⭐ 256
A scope-generator-tool for Burp Suite and ZAP
total releases 2most recent commit 3 months ago
Reconness ⭐ 239
ReconNess is a platform to allow continuous recon (CR) where you can set up a pipeline of #recon tools (Agents) and trigger it base on schedule or events.
most recent commit 2 months ago
Cent ⭐ 238
Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place
most recent commit 18 days ago
Knary ⭐ 232
A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams/Lark/Telegram & Pushover support
most recent commit 4 months ago
Vaf ⭐ 230
Vaf is a cross-platform very advanced and fast web fuzzer written in nim
most recent commit a month ago
Reconmap ⭐ 227
Vulnerability assessment and penetration testing automation and reporting platform for teams.
most recent commit 5 days ago
Cc.py ⭐ 226
Extracting URLs of a specific target based on the results of "commoncrawl.org"
most recent commit 3 years ago
Jfscan ⭐ 215
JF⚡can - Super fast port scanning & service discovery using Masscan and Nmap. Scan large networks with Masscan and use Nmap's scripting abilities to discover information about services. Generate report.
most recent commit 5 days ago
Clairvoyance ⭐ 204
Obtain GraphQL API schema despite disabled introspection!
most recent commit 8 months ago
Api Securityempire ⭐ 204
API Security Projecto aims to present unique attack & defense methods in API Security field
most recent commit 3 months ago
Vulnrepo ⭐ 199
VULNRΞPO - Free vulnerability report generator and repository end-to-end encrypted. Complete templates of issues, CWE, CVE, MITRE ATT&CK, PCI DSS, AES encryption, Nmap/Nessus/Burp/OpenVAS/Bugcrowd issues import, Jira export, TXT/HTML/PDF report, attachments, automatic changelog, statistics, vulnerability management, Security report builder.
most recent commit 23 days ago
Dontgo403 ⭐ 186
Tool to bypass 40X response codes.
most recent commit 2 months ago
Asnip ⭐ 184
ASN target organization IP range attack surface mapping for reconnaissance, fast and lightweight
total releases 6most recent commit a month ago
Hawkeye ⭐ 179
Hawkeye filesystem analysis tool
most recent commit 4 years ago
Lazyrecon ⭐ 169
An automated approach to performing recon for bug bounty hunting and penetration testing.
most recent commit 2 years ago
Minesweeper ⭐ 167
A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).
most recent commit 3 years ago
Subrake ⭐ 166
A Subdomain Enumeration and Validation tool for Bug Bounty and Pentesters.
total releases 2most recent commit 4 months ago
Lorsrf ⭐ 159
find the parameters that can be used to find SSRF or Out-of-band resource load
most recent commit a month ago
Crithit ⭐ 152
Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.
most recent commit 2 years ago
Reconky Automated_bash_script ⭐ 152
Reconky is an great Content Discovery bash script for bug bounty hunters which automate lot of task and organized in the well mannered form which help them to look forward.
most recent commit 8 months ago
Sub404 ⭐ 151
A python tool to check subdomain takeover vulnerability
most recent commit 7 months ago
Bulwark ⭐ 149
An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.
most recent commit a month ago
Tuktuk ⭐ 144
Tool for catching and logging different types of requests.
most recent commit a year ago
Inventory ⭐ 144
Asset inventory on public bug bounty programs.
most recent commit 8 days ago
Learn365 ⭐ 142
This repository is about @AnubhavSingh_'s 365 days of Learning Tweets collection.
most recent commit 3 days ago
Research ⭐ 133
Bug Bounty writeups, Vulnerability Research, Tutorials, Tips&Tricks
most recent commit 3 months ago
Tugarecon ⭐ 126
Pentest: Subdomains enumeration tool for penetration testers.
most recent commit 4 days ago
Pentesting Dockerfiles ⭐ 126
Pentesting/Bugbounty Dockerfiles.
most recent commit a year ago
1-100 of 283 projects
Related Awesome Lists
Python Pentesting Projects (614)
Hacking Pentesting Projects (392)
Security Pentesting Projects (390)
Pentesting Penetration Testing Projects (284)
Categories
Advertising 📦 8
All Projects
Application Programming Interfaces 📦 107
Applications 📦 174
Artificial Intelligence 📦 69
Blockchain 📦 66
Build Tools 📦 105
Cloud Computing 📦 68
Code Quality 📦 24
Collaboration 📦 27
Command Line Interface 📦 38
Community 📦 79
Companies 📦 60
Compilers 📦 59
Computer Science 📦 73
Configuration Management 📦 37
Content Management 📦 153
Control Flow 📦 187
Data Formats 📦 72
Data Processing 📦 249
Data Storage 📦 116
Economics 📦 56
Frameworks 📦 178
Games 📦 110
Graphics 📦 92
Hardware 📦 137
Integrated Development Environments 📦 43
Learning Resources 📦 139
Legal 📦 24
Libraries 📦 117
Lists Of Projects 📦 19
Machine Learning 📦 313
Mapping 📦 57
Marketing 📦 15
Mathematics 📦 54
Media 📦 214
Messaging 📦 96
Networking 📦 292
Operating Systems 📦 72
Operations 📦 114
Package Managers 📦 50
Programming Languages 📦 173
Runtime Environments 📦 90
Science 📦 42
Security 📦 342
Social Media 📦 23
Software Architecture 📦 65
Software Development 📦 60
Software Performance 📦 53
Software Quality 📦 116
Text Editors 📦 40
Text Processing 📦 118
User Interface 📦 291
User Interface Components 📦 440
Version Control 📦 26
Virtualization 📦 63
Web Browsers 📦 35
Web Servers 📦 23
Web User Interface 📦 167
Top Programming Languages
Javascript  (1,046,513)
Python  (794,038)
Java  (384,745)
Php  (284,342)
Typescript  (238,372)
C Plus Plus  (235,678)
Ruby  (221,647)
C  (180,021)
Shell  (169,271)
C Sharp  (161,668)
Golang  (155,705)
Swift  (64,594)
Objective C  (57,180)
R  (57,097)
Rust  (55,814)
Dart  (51,233)
Kotlin  (45,308)
Lua  (33,168)
Matlab  (30,832)
Perl  (30,482)
Language  (30,083)
Scala  (28,582)
Haskell  (20,223)
Clojure  (19,065)
Powershell  (18,770)
Bash  (18,586)
Coffeescript  (17,335)
Elixir  (16,549)
Assembly  (14,508)
Processing  (13,295)
Julia  (12,509)
Basic  (10,772)
Flow  (10,528)
Emacs Lisp  (10,358)
Erlang  (9,057)
Scheme  (8,442)
Groovy  (8,426)
Solidity  (7,543)
Ocaml  (6,660)
Pascal  (6,371)
Hack  (6,365)
Lisp  (6,345)
Fortran  (5,475)
Elm  (5,468)
Common Lisp  (5,285)
Dlang  (4,742)
Shell Script  (4,626)
Python Library  (4,446)
Crystal  (4,373)
Scripting  (4,199)
Top Projects
Freecodecamp ⭐ 346,085
996.icu ⭐ 262,270
Free Programming Books ⭐ 233,047
Coding Interview University ⭐ 219,725
Awesome ⭐ 201,499
Vue ⭐ 195,787
Developer Roadmap ⭐ 194,812
Public Apis ⭐ 192,026
React ⭐ 188,079
System Design Primer ⭐ 180,726
Tensorflow ⭐ 164,981
Bootstrap ⭐ 157,299
You Dont Know Js ⭐ 152,909
Cs Notes ⭐ 150,780
Ohmyzsh ⭐ 145,101
Build Your Own X ⭐ 141,447
Flutter ⭐ 140,685
Javascript Algorithms ⭐ 140,055
Python ⭐ 136,032
Gitignore ⭐ 133,164
Linux ⭐ 131,866
Vscode ⭐ 131,762
Awesome Python ⭐ 126,837
Javascript ⭐ 122,717
Javaguide ⭐ 121,487
Python 100 Days ⭐ 117,585
Computer Science ⭐ 112,893
Youtube Dl ⭐ 110,029
Fucking Algorithm ⭐ 106,048
The Art Of Command Line ⭐ 105,874
React Native ⭐ 102,754
Electron ⭐ 101,722
D3 ⭐ 100,901
Go ⭐ 99,254
30 Seconds Of Code ⭐ 95,528
Create React App ⭐ 95,021
Axios ⭐ 93,400
Awesome Selfhosted ⭐ 88,479
Kubernetes ⭐ 88,475
Free Programming Books Zh_cn ⭐ 88,386
Node ⭐ 87,657
Next.js ⭐ 86,824
Terminal ⭐ 83,149
Deno ⭐ 82,461
Three.js ⭐ 82,021
Angular ⭐ 81,395
Awesome Go ⭐ 80,742
Typescript ⭐ 80,677
Ant Design ⭐ 80,313
Material Ui ⭐ 78,463
Privacy | About | Terms | Follow Us On Twitter

Downloads, Dependent Repos, Dependent Packages, Total Releases, Latest Releases data powered by Libraries.io.

Copyright 2018-2022 Awesome Open Source.  All rights reserved.