BugCod3
6.57K subscribers
348 photos
11 videos
7 files
463 links
[ BugCod3 ] โ€” From Shadows To Shells โšก๏ธ

๐Ÿ•ถ Hacking | ๐Ÿž Bug Bounty | ๐Ÿ” Security Tools
โš”๏ธ Learn โ€ข Hunt โ€ข Dominate

๐Ÿ‘ฅ Group: T.me/BugCod3GP
๐Ÿ“‚ Topic: T.me/BugCod3Topic

๐ŸŒ Web: BugCod3.com
๐Ÿค– Contact: T.me/BugCod3BOT
๐Ÿ“ง Email: BugCod3@protonmail.com
Download Telegram
i Haklab ๐Ÿ”ฌ

is a hacking laboratory for Termux that contains open source tools for pentesting, scan/find vulnerabilities, explotation and post explotation๐Ÿ›ก

GitHub ๐Ÿ’ป

#Tools #Pentest #Pentesting #bug_bounty #BugBounty

๐Ÿ“ฑ @RootAccessClub
๐Ÿ“ฑ @BugCod3
Please open Telegram to view this post
VIEW IN TELEGRAM
โค3โšก2๐Ÿ”ฅ2
pentest ai agentsโญ๏ธ

35 Claude Code subagents for penetration testingโญ๏ธ

GitHub ๐Ÿฑ

#claude #pentesting #pentest

โœˆ๏ธ@RootAccessClub
โœˆ๏ธ@BugCod3
Please open Telegram to view this post
VIEW IN TELEGRAM
โค3โšก2๐Ÿ”ฅ2๐Ÿพ1
DontFeedTheAI โ›”๏ธ๐Ÿง 

Transparent anonymization proxy for AI-assisted pentesting. Strips IPs, credentials, hostnames and PII before they reach any LLM (Claude, OpenAI, OpenRouter). Local Ollama + regex detection. Per-engagement vault ๐Ÿค”

Github ๐Ÿ™

#Ai

โœˆ๏ธ@RootAccessClub
โœˆ๏ธ@BugCod3
Please open Telegram to view this post
VIEW IN TELEGRAM
โค4โšก2๐Ÿ”ฅ2
Robin ๐ŸŽฉ

AI
Powered Dark Web OSINT Tool ๐Ÿ’—

GitHub ๐Ÿฑ

#Ai #Tools #Osint

๐Ÿ›ฉ@RootAccessClub
๐Ÿ›ฉ@BugCod3
Please open Telegram to view this post
VIEW IN TELEGRAM
โšก2๐Ÿ”ฅ2โค1
New RootAccessClub post โญ๏ธ
Please open Telegram to view this post
VIEW IN TELEGRAM
2โคโ€๐Ÿ”ฅ1
โšก๏ธ RepShot ยท Security Finding Card for Burp Suite

Turn your Burp Suite findings into clean, professional cards, ready for reports, bug bounty submissions, and social sharing.

๐Ÿ’ฌ
Every pentester knows the moment: you've just confirmed a SQL injection, an XSS payload, or a path traversal returned /etc/passwd. Now you need to document it.

The usual workflow looks like this:

1๏ธโƒฃ Open Flameshot or a screenshot tool
2๏ธโƒฃ Take a screenshot of the request
3๏ธโƒฃ Take another screenshot of the response
4๏ธโƒฃ Draw red boxes around the relevant parts manually
5๏ธโƒฃ Open your report template
6๏ธโƒฃ Copy/paste the vulnerability name, write the business impact from scratch
7๏ธโƒฃ Repeat for every single finding

When you're running a pentest or a bug bounty session with 10, 15, or 20 findings - this process kills your momentum. You spend more time documenting than hacking.

๐Ÿ“Š Features:
โšช๏ธ Scroll to the exact part of the request or response you want to show
โšช๏ธ Capture that exact viewport โ€” what you see is what gets exported
โšช๏ธ Draw red annotation boxes directly on the capture before exporting
โšช๏ธ Search inside request/response with Cmd+F / Ctrl+F
โšช๏ธ Auto-fill the business impact based on the vulnerability type selected
โšช๏ธ Export a professional HD PNG card ready to paste into any report or post on LinkedIn/X

๐Ÿ”ผ Installation:
โœ… Option A - Use the prebuilt JAR (recommended)

1๏ธโƒฃ Download repshot-1.0.0.jar from the Releases page
2๏ธโƒฃ Open Burp Suite
3๏ธโƒฃ Go to Extensions โ†’ Add
4๏ธโƒฃ Extension type: Java
5๏ธโƒฃ Select the downloaded JAR
6๏ธโƒฃ Click Next - you should see RepShot loaded in the Output tab

โœ… Requirements: Burp Suite 2023.x or later ยท Java 17+ on your system

๐Ÿ’ค Option B - Build from source
git clone https://github.com/JFOZ1010/repshot.git
cd repshot
mvn clean package
# JAR will be at target/repshot-1.0.0.jar


๐Ÿ˜ธ Github

โฌ‡๏ธ Download
๐Ÿ”’ BugCod3

#BurpSuite #Security #Finder #Tools
โž–โž–โž–โž–โž–โž–โž–โž–โž–โž–
๐Ÿ‘ค T.me/BugCod3BOT
๐Ÿ“ฃ T.me/BugCod3
Please open Telegram to view this post
VIEW IN TELEGRAM
โค4๐Ÿ”ฅ3โšก1๐Ÿ‘1
Hacking Tools ๐Ÿงฐ

All in One Hacking Tool for Security Researchers & Pentesters โœ”๏ธ

Github ๐Ÿฑ

#Tools #pentest #pentesting #security

๐Ÿ’Ž@RootAccessClub
๐Ÿ’Ž@BugCod3
Please open Telegram to view this post
VIEW IN TELEGRAM
โค3๐Ÿ”ฅ2โšก1
EtchDroid ๐Ÿค–

An application to write OS images to USB drives, on Android, no root required โŒจ๏ธ

Github ๐Ÿฑ

#Iso #apk #android

๐Ÿ“ฃ @RootAccessClub
๐Ÿ“ฃ @BugCod3
Please open Telegram to view this post
VIEW IN TELEGRAM
โค9โšก4๐Ÿ”ฅ2
Certified Penetration Tester (CPENT) Collection ๐Ÿ‘‘

Download โฌ‡๏ธ

#free #CPENT #learning

โšก๏ธ @RootAccessClub
โšก๏ธ @BugCod3
Please open Telegram to view this post
VIEW IN TELEGRAM
โค3๐Ÿ”ฅ2โšก1
nRFBOX ๐Ÿ“ฑ

Open source ESP32 powered tool to scan, jam, spoof, and master BLE, Wi-Fi, and 2.4GHz networks ๐Ÿค”

GitHub ๐Ÿ’ป

๐Ÿ’Ž @BugCod3
๐Ÿ’Ž @RootAccessClub
Please open Telegram to view this post
VIEW IN TELEGRAM
โค5โšก4๐Ÿ”ฅ3
Please open Telegram to view this post
VIEW IN TELEGRAM
โคโ€๐Ÿ”ฅ2๐Ÿ”ฅ1
๐Ÿค– Need a Custom Telegram Bot?

Looking for a Telegram bot with custom features?

I can build professional Telegram bots tailored to your needs, whether it's for:

- Management & Automation
- Shop Bots
- Payment Integration
- AI Features
- Security Tools
- Custom APIs
- And much more!

๐Ÿ’ฌ Tell me your idea, and I'll turn it into a fully functional Telegram bot.

๐Ÿ“ฉ Contact me to discuss your project and get a quote.

T.me/BugCod3BOT
Please open Telegram to view this post
VIEW IN TELEGRAM
โšก2๐Ÿ”ฅ2โค1
Full Bug Bounty Hunting & Red Teamers Methodology 2๏ธโƒฃ0๏ธโƒฃ2๏ธโƒฃ6๏ธโƒฃ

Created by Cybernote, aspiring Red Team Operator and Bug Bounty Hunter. This repository documents my methodology, notes and workflow for web application security testingโšก๏ธ

GitHub ๐Ÿฑ

#bug_bounty #bugbounty #RedTeam

๐Ÿ›ซ@BugCod3
๐Ÿ›ซ@RootAccessClub
Please open Telegram to view this post
VIEW IN TELEGRAM
โค2โคโ€๐Ÿ”ฅ2
๐๐ฎ๐ซ๐ฉ๐€๐๐ˆ๐’๐ž๐œ๐ฎ๐ซ๐ข๐ญ๐ฒ๐’๐ฎ๐ข๐ญ๐ž โญ๏ธ

Professional grade Burp Suite extension for comprehensive API reconnaissance, intelligent fuzzing, and AI powered security testing ๐Ÿ›ก

Features ๐Ÿช™

๐Ÿ˜ต Reconnaissance

โšก๏ธ Advanced Fuzzing

๐Ÿ”Ž Discovery Tools

๐Ÿ”ฅ Export & Integration

Installation ๐Ÿ–ฅ

1๏ธโƒฃ๐Ÿ”ฅBurp โžก๏ธ Extender โžก๏ธ Extensions โžก๏ธ Add โžก๏ธ Python

2๏ธโƒฃ Select๐Ÿ”ฅ BurpAPISecuritySuite.py
Extension loads and starts capturing automatically

Requirements โ‰๏ธ

Burp Suite (Professional or Community Edition) โœ…

Jython Standalone JAR
โœ…

GitHub ๐Ÿฑ

๐Ÿ’Ž@RootAccessClub
๐Ÿ’Ž@BugCod3
Please open Telegram to view this post
VIEW IN TELEGRAM
๐Ÿ”ฅ3โšก2
Don't forget to ๐Ÿ”น
Like ๐Ÿ‘
Share โžก๏ธ
Support ๐Ÿงก
Please open Telegram to view this post
VIEW IN TELEGRAM
New RootAccessClub Post ๐Ÿ”ฅ
Please open Telegram to view this post
VIEW IN TELEGRAM
๐Ÿ”ฅ6
New Web Based Subdomain Discovery Service ๐Ÿ”

crt.name is a new web based service for discovering subdomains through Certificate Transparency (CT) logs ๐ŸŒ

It searches publicly available certificate records to identify subdomains associated with a target domain ๐Ÿ”ต

Useful for โ“
โ€ข Subdomain Enumeration
โ€ข Reconnaissance
โ€ข Asset Discovery
โ€ข Bug Bounty Recon


crt.name ๐Ÿ”—

๐Ÿ’Ž @RootAccessClub
๐Ÿ’Ž @BugCod3
Please open Telegram to view this post
VIEW IN TELEGRAM
โค5๐Ÿ”ฅ4๐Ÿ‘1
๐Ÿž Bug Bounty Quiz

Which vulnerability is this? GET /api/user/123 Changing 123 to 124 exposes another user's data.
Anonymous Quiz
17%
A) XSS
64%
B) IDOR
12%
C) SSRF
7%
D) CSRF
โค4โคโ€๐Ÿ”ฅ4
Media is too big
VIEW IN TELEGRAM
โ„๏ธ SubZer0 โ€“ Noise in. Priority out

Thousands of new CVEs every month
Only a few actually matter โ€” SubZer0 shows you which ones to patch first


๐Ÿ”ด KEV ยท EPSS ยท PoC ยท Metasploit ยท Nuclei โ€” all in one view
๐Ÿ” SHA-256 verified ยท auto-refreshed every 6h
โšก๏ธ Free ยท no sign-up ยท no tracking


๐ŸŒ iliya-bashrc.github.io/SubZer0
๐Ÿ’ป github.com/iliya-bashrc/SubZer0

๐Ÿ’Ž @RootAccessClub ร— @BugCod3
๐Ÿ”ฅ4โšก2โค1
BugCod3
Revelar โ€“ Origin Reveal PRO ๐Ÿ‘โ€๐Ÿ—จ Overview: Revelar (Origin Reveal PRO) is a professional Go-based CLI tool for uncovering real/origin IP addresses of websites behind CDNs such as Cloudflare, Akamai, Fastly, Imperva, and AWS CloudFront. ๐Ÿ“Š Features: โšช๏ธ Detectsโ€ฆ
This media is not supported in your browser
VIEW IN TELEGRAM
๐Ÿฉธ REVELAR v2.0 โ€” Unmask the real origin IP behind any CDN. ๐Ÿ‘๏ธ

Cloudflare. Fastly. Akamai. They only hide the front door.
Every origin still leaves a trace โ€” Revelar locks onto it.

โš™๏ธ 18+ OSINT sources ยท live CDN fingerprinting ยท DNS/SPF/ASN pivot
favicon mmh3 ยท TLS cert hunting ยท smart origin scoring (0โ€“100)

One command. Full arsenal.
$ revelar -d target.com -active -deep

๐Ÿบ Free & open-source.
โญ github.com/MRvirusIR/Revelar
๐Ÿ“ก @BugCod3 ๐Ÿค @RootAccessClub

โœ–๏ธ Twitter

#bugbounty #recon #osint #infosec #cybersecurity #Revelar
โšก3๐Ÿ”ฅ2