33 Resources
Golang bugbounty Libraries
Cloud IP address ranges lookup tool + DNS subdomain enumeration + Certificate Transparency
Cloud edge Lookup an IP to find the cloud provider and other details based on the provider's published JSON data Cloud edge is a recon tool focused on
Subfinder is a subdomain discovery tool that discovers valid subdomains for websites by using passive online sources
Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
A Target Tracking , NoteTaking , CheckLists and Data Management GUI App for Bug Hunter's and Pentesters.
Screenshots Features β’ Installation β’ Usage β’ Features β’ Notes β’ Sandman A Target Tracking , NoteTaking , CheckLists and Data Management GUI App for B
π Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URL and Role.
Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URL and Role. URLs and Roles are managed as YAML-based
log4jshell vulnerability scanner for bug bounty
log4shell-looker a log4jshell vulnerability scanner for bug bounty (Written in G
A passive reconnaissance tool for known URLs discovery
A passive reconnaissance tool for known URLs discovery - it gathers a list of URLs passively using various online sources.
Fleex allows you to create multiple VPS on cloud providers and use them to distribute your workload.
Fleex allows you to create multiple VPS on cloud providers and use them to distribute your workload. Run tools like masscan, puredns, ffuf, httpx or a
An OOB interaction gathering server and client library
Interactsh An OOB interaction gathering server and client library Features β’ Usage β’ Interactsh Client β’ Interactsh Server β’ Interactsh Integration β’
Session Cookie Finder
goSCF Session Cookie Finder - It helps you to find the main session cookie/s (upto 4) from the bunch of cookies, which is responsible for the user aut
urlhunter is a recon tool that allows searching on URLs that are exposed via shortener services such as bit.ly and goo.gl.
a recon tool that allows searching on URLs that are exposed via shortener services
A tool get level of subdomain from 1....n
dlevel Get any level of subdomain from 1....N Install go get -u github.com/MPaandeey/dlevel Usage Example π files.txt hackerone.com info.hackerone.co
Another JS scanner but in Go
NipeJS Read list of JS files and look for sensitive data via regex. β Install go get github.com/i5nipe/nipejs β Regular expressions Download the file
Fleex allows you to create multiple VPS on cloud providers and use them to distribute your workload.
Fleex allows you to create multiple VPS on cloud providers and use them to distribute your workload. Run tools like masscan, puredns, ffuf, httpx or anything you need and get results quickly!
ChangeTower is intended to help you watch changes in webpages and get notified of any changes written in Go
ChangeTower is intended to help you watch changes in webpages and get notified of any changes written in Go
a Go code to detect leaks in JS files via regex patterns
a Go code to detect leaks in JS files via regex patterns
A scanner/exploitation tool written in GO, which leverages Prototype Pollution to XSS by exploiting known gadgets.
ppmap A simple scanner/exploitation tool written in GO which automatically exploits known and existing gadgets (checks for specific variables in the g
Extract endpoints marked as disallow in robots files to generate wordlists.
roboXtractor This tool has been developed to extract endpoints marked as disallow in robots.txt file. It crawls the file directly on the web and has a
A tool to filter URLs by parameter count or size
GoFilter A tool to filter URLs by parameter count or size. This tool requires unique sorted URL list. For example: cat hosts.txt | sort -u sorted &&
Gospider - Fast web spider written in Go
GoSpider GoSpider - Fast web spider written in Go Painless integrate Gospider into your recon workflow? Enjoying this tool? Support it's development a
Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place
cent Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place Inst
Take a list of domains and scan for endpoints, secrets, api keys, file extensions, tokens and more...
Take a list of domains and scan for endpoints, secrets, api keys, file extensions, tokens and more... Coded with π by edoardottt. Share on Twitter! P
httpx is a fast and multi-purpose HTTP toolkit allows to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.
Features β’ Installation β’ Usage β’ Running httpx β’ Notes β’ Join Discord httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers us
ππ¦ DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang
Finder Of XSS, and Dal(λ¬) is the Korean pronunciation of moon. What is DalFox π π¦ DalFox is a fast, powerful parameter analysis and XSS scanner, bas
Hetty is an HTTP toolkit for security research.
Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful
βοΈ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting
A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting Family project Table of Contents WHW-Tools Weapons Awesome Bookmarkl
The fastest dork scanner written in Go.
go-dork The fastest dork scanner written in Go. There are also various search engines supported by go-dork, including Google, Shodan, Bing, Duck, Yaho
Listing git repository from URL/User/Org
This tool is available when the repository, such as github, is included in the bugbounty scope. Sometimes specified as an org name or user name rather than a specific repository, you can use this tool to extract url from all public repositories included in the org/user.
π΅ Gee is tool of stdin to each files and stdout
Gee is tool of stdin to each files and stdout. It is similar to the tee command, but there are more functions for convenience. In addition, it was written as go. which provides output to stdout and files.
A collection of cool tools used by Mobile hackers. Happy hacking , Happy bug-hunting
A collection of cool tools used by Mobile hackers. Happy hacking , Happy bug-hunting Family project Table of Contents Weapons Contribute Thanks to con
sigurls is a reconnaissance tool, it fetches URLs from AlienVault's OTX, Common Crawl, URLScan, Github and the Wayback Machine.
sigurls is a reconnaissance tool, it fetches URLs from AlienVault's OTX, Common Crawl, URLScan, Github and the Wayback Machine. DiSCLAIMER: fe
sigurlx a web application attack surface mapping tool.
sigurlx a web application attack surface mapping tool, it does ...:
MemBi is all the members of bugbounty and infosec project.
Member of Bugbounty and Infosec π€ What is MemBi? MemBi is all the members of bugbounty and infosec project. If you don't know who to follow, see! π