Bug Bounty Resources

Discover Blog Posts, Articles, Repositories, Videos, HackerOne Reports.

Resource Types

Tags

IntruderPayloads
A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file upload…
1N3
vaf
Vaf is a cross-platform very advanced and fast web fuzzer written in nim
d4rckh
off-by-slash
Burp extension to detect alias traversal via NGINX misconfiguration at scale.
bayotop
inql
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive…
doyensec
graphql_beautifier
Burp Suite extension to help make Graphql request more readable
zidekmat
Autorize
Automatic authorization enforcement detection extension for burp suite written in Jython developed …
Quitten
BitBlinder
BurpSuite extension to inject custom cross-site scripting payloads on every form/request submitted …
BitTheByte
Xss-Sql-Fuzz
burpsuite 插件对GP所有参数(过滤特殊参数)一键自动添加xss sql payload 进行fuzz
jiangsir404