Awesome Bug Bounty Tools
Section: Links · A python script that finds endpoints in JavaScript files
Entry
Appears in 4 awesome lists
Simple tool discover endpoints and their parameters in JavaScript files. It's possible to discover individual URLs, groups of URLs and directories. Supports regular expressions.
Section: Links · A python script that finds endpoints in JavaScript files
Section: Leaking · Python script that finds endpoints in JavaScript files by @GerbenJavado.
Section: Source Code Analyzes · Simple tool discover endpoints and their parameters in JavaScript files. It's possible to discover individual URLs, groups of URLs and directories. Supports regular expressions.
Section: Security Tools · A python script that finds endpoints in JavaScript files
Simple #golang tool to fetch all known website URLs from: WayBackMachine, AlienVault's Open Threat Exchange, Common Crawl, URLScan
Zachary Rice - Gitleaks is a SAST tool for detecting hardcoded secrets like passwords, api keys, and tokens in git repositories.
Chrome extension that passively discovers leaked API keys, tokens, secrets, and credentials on any web page by scanning scripts, meta tags, hidden fields, web storage, and network responses using 80+ detection patterns and Shannon entropy analysis.
Rip web accessible (distributed) version control systems: SVN/GIT/HG... by @kost.
Browser extension for Firefox/Chrome and CLI tool to save a faithful copy of a complete page as a single HTML file. (Stable)
Search archived links to domain in Wayback Machine and Common Crawl (+ Urlscan and Alien Vault OTX).
A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.
Fetch all the URLs that the Wayback Machine knows about for a domain