bugbounty_toolkit.md

Bug bounty toolkit

Here you can find a list of differents tools that you can use in bug bounty or pentesting.
Some categories and tools will be added as we go.
If you have questions or suggestions, don't hesitate to contact me on twitter (https://twitter.com/_sehno_)

---

Recon

Subdomains recon

• amass
• subfinder
• assetfinder
• dnsgen
• shuffledns
• httprobe
• aquatone

Enumeration / Crawling

• nmap
• ffuf
• hakrawler
• gau
• paramspider

Manual recon

• shodan
• censys
• google dorks
• pastebin
• github

Enumeration / Crawling

• ffuf
• hakrawler
• gau
• paramspider
• arjun
• parameth

XSS

• xsshunter
• xsscrapy
• dalfox

SQL Injection

• sqlmap
• waybacksqliscanner