现已上线！2025 年 Telegram 研究 — 年度关键洞察 
Bug Bounty - GitBook
前往频道在 Telegram
7 429
订阅者
+424 小时
+207 天
+16430 天
帖子存档
7 432
⚙️ Complete Bug Bounty tool List ⚙️
Enjoy :)
dnscan https://github.com/rbsec/dnscan
Knockpy https://github.com/guelfoweb/knock
Sublist3r https://github.com/aboul3la/Sublist3r
massdns https://github.com/blechschmidt/massdns
Nmap https://nmap.org
Masscan https://github.com/robertdavidgraham/masscan
EyeWitness https://github.com/ChrisTruncer/EyeWitness
DirBuster https://sourceforge.net/projects/dirbuster/
dirsearch https://github.com/maurosoria/dirsearch
Gitrob https://github.com/michenriksen/gitrob
git-secrets https://github.com/awslabs/git-secrets
sandcastle https://github.com/yasinS/sandcastle
bucket_finder https://digi.ninja/projects/bucket_finder.php
GoogD0rker https://github.com/ZephrFish/GoogD0rker/
Wayback Machine https://web.archive.org
waybackurls https://gist.github.com/mhmdiaa/adf6bff70142e5091792841d4b372050
Sn1per https://github.com/1N3/Sn1per/
XRay https://github.com/evilsocket/xray
wfuzz https://github.com/xmendez/wfuzz/
patator https://github.com/lanjelot/patator
datasploit https://github.com/DataSploit/datasploit
hydra https://github.com/vanhauser-thc/thc-hydra
changeme https://github.com/ztgrace/changeme
MobSF https://github.com/MobSF/Mobile-Security-Framework-MobSF/
Apktool https://github.com/iBotPeaches/Apktool
dex2jar https://sourceforge.net/projects/dex2jar/
sqlmap http://sqlmap.org/
oxml_xxe https://github.com/BuffaloWill/oxml_xxe/
XXE Injector https://github.com/enjoiz/XXEinjector
The JSON Web Token Toolkit https://github.com/ticarpi/jwt_tool
ground-control https://github.com/jobertabma/ground-control
ssrfDetector https://github.com/JacobReynolds/ssrfDetector
LFISuit https://github.com/D35m0nd142/LFISuite
GitTools https://github.com/internetwache/GitTools
dvcs-ripper https://github.com/kost/dvcs-ripper
tko-subs https://github.com/anshumanbh/tko-subs
HostileSubBruteforcer https://github.com/nahamsec/HostileSubBruteforcer
Race the Web https://github.com/insp3ctre/race-the-web
ysoserial https://github.com/GoSecure/ysoserial
PHPGGC https://github.com/ambionics/phpggc
CORStest https://github.com/RUB-NDS/CORStest
Retire-js https://github.com/RetireJS/retire.js
getsploit https://github.com/vulnersCom/getsploit
Findsploit https://github.com/1N3/Findsploit
bfac https://github.com/mazen160/bfac
WPScan https://wpscan.org/
CMSMap https://github.com/Dionach/CMSmap
Amass https://github.com/OWASP/Amass
Extra Tools
http://projectdiscovery.io
7 432
Awesome Asset Discovery
List by x.com/RedHuntLabs
IP Address
Domain/Subdomain
Email
Network
Business Infrastructure
Cloud Infrastructure
Company Info
Internet Survey Data
Social Media / Employee Profiling
Data Leaks
Archived Info
https://github.com/redhuntlabs/Awesome-Asset-Discovery
7 432
🚨 PART 2 — ADVANCED BUG BOUNTY RECON PLAYBOOK 🚨
Stealth, Automation & Finding What Others Miss Most hunters stop at surface recon. But the real money? It’s buried deeper. Welcome to the elite 1%. This is how you go stealth, automate, and win.1️⃣ JavaScript Recon — Extract Hidden Gems JS files hide API endpoints, tokens, secrets. 🔧 Tools: subjs, LinkFinder, JSParser
subjs -i alive.txt -o jsfiles.txt
cat jsfiles.txt | LinkFinder -i - -o cli > endpoints.txtcat alive.txt | waybackurls > wayback.txt
cat alive.txt | gau > gau.txt
cat wayback.txt gau.txt | sort -u > historical_urls.txtparamspider -d target.com -o params.txt
arjun -i historical_urls.txt -o arjun_params.txtffuf -u http://target.com -H "Host: FUZZ.target.com" -w subdomains.txt -fs 4242cloudbrute -d target.com -o buckets.txtgit clone https://github.com/epi052/recon-pipeline.git
cd recon-pipeline
./recon-pipeline.py --target target.comshodan search "hostname:target.com"9️⃣ Advanced Google Dorking — Open Secrets Google knows what they forgot to lock. 💡 Dorks:
site:target.com ext:sql site:target.com inurl:admin site:target.com intitle:"index of"🔟 GitHub Recon — Where Devs Slip Up They push secrets. You collect bounty. 🔧 Tools: gitrob, GitHub Dorks
gitrob target.com✅ Combine all → Build the ultimate recon pipeline ✅ Find what others miss → Land critical, $$$ bugs
7 432
🔥 ADVANCED BUG BOUNTY RECON PLAYBOOK (2025) 🔥
💰 Deep Recon = Real Money
Most hunters stop at surface-level scans. The real high-value bugs lie in what others overlook.
Here’s your Ultimate Recon Pipeline — battle-tested, fully loaded, and ready to execute:
🔍 1. Scope Review
Know what you're allowed to touch.
➡️ *.target.com
Avoid legal issues & save time by staying within bounds.
🌐 2. Subdomain Enumeration
Tools: bbot, subfinder, amass
bbot -d target.com
subfinder -d target.com -o subfinder.txt
amass enum -d target.com -o amass.txt
cat *.txt | sort -u > subdomains.txt cat subdomains.txt | httpx -silent -o alive.txtkatana -list alive.txt -o endpoints.txteyewitness --web -f alive.txt --threads 10 -d screenshotscat alive.txt | nuclei -t templates/ -o nuclei.txt
nmap -sVC -T4 -iL alive.txt -oN nmap.txt
nikto -h alive.txt -output nikto.txt subzy run --targets alive.txt socialhunter -f alive.txt⚠️ Subdomain Takeovers + Broken Links = easy $$$ 🌐 9. URL Gathering & Param Discovery Tools: waybackurls, gau, paramspider
cat alive.txt | waybackurls >> urls.txt
cat alive.txt | gau >> urls.txt
paramspider -d target.com -o params.txt site:target.com ext:sql site:target.com inurl:admin site:target.com ext:bak🧠 Hidden backups, exposed configs, and sensitive portals. 🗂 11. GitHub Recon Search:
"target.com" in:code🔑 Leaked API keys, secrets, and config files by devs. 🎯 Bonus: XSS / LFI / SQLi Param Hunt Tools: gf, qsreplace, httpx
gf xss urls.txt | qsreplace '"><script>alert(1)</script>' | httpx -silent7 432
Burp Suite Professional v2024.1.4 + JDK 22
NOTE - Run this version With Java SE JDK 22
Released Friday, 7 March 2025
#pentest #security
7 432
Hacking_Beginner_to_Expert_Guide_to_Computer_Hacking,_Basic_Security.pdf1.02 MB
7 432
url.com/admin/? url.com//admin// url.com///admin/// url.com/./admin/./ url.com/admin? url.com/admin?? url.com/admin?? url.com/admin/?/ url.com/admin/?? url.com/admin/??/ url.com/admin/.. url.com/admin/../ url.com/admin/./ url.com/admin/. url.com/admin/.// url.com/admin/* url.com/admin//* url.com/admin/%2f url.com/admin/%2f/ url.com/admin/%20 url.com/admin/%20/ url.com/admin/%09 url.com/admin/%09/ url.com/admin/%0a url.com/admin/%0a/ url.com/admin/%0d url.com/admin/%0d/ url.com/admin/%25 url.com/admin/%25/ url.com/admin/%23 url.com/admin/%23/ url.com/admin/%26 url.com/admin/%3f url.com/admin/%3f/ url.com/admin/%26/ url.com/admin/# url.com/admin/#/ url.com/admin/#/./ url.com/./admin url.com/./admin/ url.com/..;/admin url.com/..;/admin/ url.com/.;/admin url.com/.;/admin/ url.com/;/admin url.com/;/admin/ url.com//;//admin url.com//;//admin/ url.com/admin/./ url.com/%2e/admin url.com/%2e/admin/ url.com/%20/admin/%20 url.com/%20/admin/%20/ url.com/admin/..;/ url.com/admin.json url.com/admin/.json url.com/admin..;/ url.com/admin;/ url.com/admin%00 url.com/admin.css url.com/admin.html url.com/admin?id=1 url.com/admin~ url.com/admin/~ url.com/admin/°/ url.com/admin/& url.com/admin/- url.com/admin\/\/ url.com/admin/..%3B/ url.com/admin/;%2f..%2f..%2f url.com/ADMIN url.com/ADMIN/ url.com/admin/..\;/ url.com/*/admin url.com/*/admin/ url.com/ADM+IN url.com/ADM+IN/
