elementalsouls / Claude-BugHunter

A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.

maurosoria / dirsearch

Web path scanner

Mr-Destroyer / ZimZilla

THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING

blacklanternsecurity / bbot

The recursive internet scanner for hackers. 🧡

reddelexc / hackerone-reports

Top disclosed reports from HackerOne

jonaslejon / malicious-pdf

💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh

ihebski / DefaultCreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

commixproject / commix

Automated Αll-in-One OS command injection exploitation tool.

codingo / NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.

gwen001 / pentest-tools

A collection of custom security tools for quick needs.

Impact-I / reFlutter

Flutter Reverse Engineering Framework

Proviesec / google-dorks

Useful Google Dorks for WebSecurity and Bug Bounty

topscoder / nuclei-wordfence-cve

80k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒

pikpikcu / airecon

AIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox and a Textual TUI. It is designed to automate security assessments, penetration testing, and bug bounty reconnaissance — without any API keys or cloud dependency.

Zarcolio / sitedorks

Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.

fyoorer / ShadowClone

Unleash the power of cloud

RevoltSecurities / Subdominator

SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty

AdnaneKhan / gato-x

GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.

anmolksachan / TheTimeMachine

Weaponizing WaybackUrls for Recon, BugBounties , OSINT, Sensitive Endpoints and what not

opsdisk / pagodo

pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching