Tools of "The Bug Hunters Methodology V2 by @jhaddix"

Java bytecode analyzer customizable via JSON rules

Bughunter's Handbook - Web Apps

Bughunter's Handbook - LAN

Discovering the vulnerabilities in open source packages.

Generinator: Random Attributes, Tags & Style

Work from Top Coder that doesnt even matter anymore.

A list of useful payloads and Bypass for Web Application Security and Bug Bounty/CTF

'SWEETMON' is a fuzzer monitoring service based python3 + django. User can check their fuzzers and crashes on the web. It can reduce repetitive work for fuzz testers. This is a legacy sweetmon. The new sweetmon is now being developed https://github.com/sweetchipsw/sweetmon2

A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public

Bug Bounty stuffs, payloads, scripts, profiles, tips and tricks, ...

Extract parameters/paths from urls

SQLi Query Tampering extends and adds custom Payload Generator/Processor in Burp Suite's Intruder. This extension gives you the flexibility of manual testing with many powerful evasion techniques.

An Bug Hunters tool to find many Vulnerabilities using Google dorks

A Directory Bruteforcing tool

Automating tool for bug hunting recon and bug discovery

DNS hijacking via dead records automation tool

vhfinder helps to identify and sort virtual hosts

R3C0Nizer is the first ever CLI based menu-driven web application B-Tier recon framework.

Tools for BugHunting