Top 23 Python Bugbounty Projects

• PayloadsAllTheThings

  34 57,207 8.5 Python

  A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Project mention: php shell not executed in wordpress | /r/hacking | 2023-12-08

Also https://github.com/swisskyrepo/PayloadsAllTheThings I'm sure there's a few test php files in here for filter bypasses too

• dirsearch

  12 11,353 7.7 Python

  Web path scanner

Project mention: Looking for some help with this Python package | /r/learnpython | 2023-08-19

I am new to Python. With the help of several users (thanks u/Diapolo10 and u/shiftybyte)I've been able to install Python and the dirsearch package. Dirsearch (https://github.com/maurosoria/dirsearch) allows for checking website paths with a wordlist. For example, I have a wordlist file with words like "dog", "cat", "bird", etc and I want to check the validity of those words as extensions on a website. Something like "example.com/bird", "example.com/cat", etc. I have a test wordlist in the same directory as dirsearch, but I am confused on how to proceed with the commands. I want to have it check my wordlist as extensions on the example.com website and then save output on if the webpath is valid or not. Just need a little bit of help.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• OneForAll

  0 7,746 2.4 Python

  OneForAll是一款功能强大的子域收集工具

• rengine

  4 7,027 9.5 Python

  reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

Project mention: Any self-host FOSS suites for running phishing testing campaigns? | /r/selfhosted | 2023-05-21

I couldn't find anything named reEngine, but I found reNgine ( https://yogeshojha.github.io/rengine/ ) which I think is what you meant.

• DefaultCreds-cheat-sheet

  2 5,324 7.5 Python

  One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

• apkleaks

  9 4,635 3.4 Python

  Scanning APK file for URIs, endpoints & secrets.

• can-i-take-over-xyz

  14 4,489 5.2 Python

  "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

• Awesome-Bugbounty-Writeups

  3 4,407 2.7 Python

  A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

• commix

  4 4,362 8.9 Python

  Automated All-in-One OS Command Injection Exploitation Tool.

  

• bbot

  5 3,778 9.8 Python

  A recursive internet scanner for hackers.

  

Project mention: [GitHub Action]: Wrappers for sqlmap, bbot and nikto | /r/cybersecurity | 2023-05-29

Its not that much of a tool than wrappers of few awesome tools that most of you probably know and use today - sqlmap, bbot and nikto.

• hackerone-reports

  2 3,255 6.3 Python

  Top disclosed reports from HackerOne

• malicious-pdf

  13 2,693 2.5 Python

  💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

Project mention: Securing PDF Generators Against SSRF Vulnerabilities | /r/netsec | 2023-05-30

Wrote a tool two years ago that does some of the PDF-tests. But more could be added: https://github.com/jonaslejon/malicious-pdf

• pagodo

  8 2,601 5.2 Python

  pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching

• reFlutter

  6 1,495 8.0 Python

  Flutter Reverse Engineering Framework

Project mention: Flutter mobile app pentesting | /r/pentest | 2023-06-26

- using reflutter (https://github.com/Impact-I/reFlutter) framework, to patch the app in question so it can use a burp proxy.

• inql

  3 1,474 4.2 Python

  InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

  

• requests-ip-rotator

  5 1,238 2.6 Python

  A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.

• Interlace

  1 1,175 0.0 Python

  Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

• Redcloud

  1 1,184 0.0 Python

  Automated Red Team Infrastructure deployement using Docker

• FavFreak

  1 1,074 3.3 Python

  Making Favicon.ico based Recon Great again !

• subscraper

  1 743 0.0 Python

  Subdomain and target enumeration tool built for offensive security testing

• JSshell

  1 566 0.0 Python

  JSshell - JavaScript reverse/remote shell

• jfscan

  2 521 2.1 Python

  JF⚡can - Super fast port scanning & service discovery using Masscan and Nmap. Scan large networks with Masscan and use Nmap's scripting abilities to discover information about services. Generate report.

• basecrack

  6 501 3.7 Python

  Decode All Bases - Base Scheme Decoder

Project mention: Any cloud apps that allow api? | /r/selfhosted | 2023-12-01

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

Python Bugbounty related posts

• Script kiddie tools preferred by the hackers of this channel?

  1 project | /r/hacking | 8 Jul 2023

• MobSecco: A tool for Cloning apk for bypassing code tampering detection, Google Safety Net and scanning vulnerable plugins

  1 project | /r/cybersecurity | 2 Jul 2023

• ParaForge: A BurpSuite extension to create a custom word list of endpoints and parameters for enumeration and fuzzing

  1 project | /r/cybersecurity | 30 Jun 2023

• ParaForge: A BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing

  1 project | /r/bag_o_news | 27 Jun 2023

• Flutter mobile app pentesting

  2 projects | /r/pentest | 26 Jun 2023

• I have created a tool MobSecco. which allow clone and create replica apk for bypassing code tampering detection and check CVE from plugins in Cordova Framework mobile application.

  1 project | /r/hacking | 16 Jun 2023

• Link CVE to installed applications?

  1 project | /r/AskNetsec | 13 Apr 2023
• A note from our sponsor - InfluxDB
  www.influxdata.com | 21 May 2024

  Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality. Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com

Do not miss the trending Python projects with our weekly report!