i Haklab ๐ฌ
is a hacking laboratory for Termux that contains open source tools for pentesting, scan/find vulnerabilities, explotation and post explotation๐ก
GitHub๐ป
#Tools #Pentest #Pentesting #bug_bounty #BugBounty
๐ฑ @RootAccessClub
๐ฑ @BugCod3
is a hacking laboratory for Termux that contains open source tools for pentesting, scan/find vulnerabilities, explotation and post explotation
GitHub
#Tools #Pentest #Pentesting #bug_bounty #BugBounty
Please open Telegram to view this post
VIEW IN TELEGRAM
โค3โก2๐ฅ2
pentest ai agentsโญ๏ธ
35 Claude Code subagents for penetration testingโญ๏ธ
GitHub๐ฑ
#claude #pentesting #pentest
โ๏ธ @RootAccessClub
โ๏ธ @BugCod3
35 Claude Code subagents for penetration testing
GitHub
#claude #pentesting #pentest
Please open Telegram to view this post
VIEW IN TELEGRAM
โค3โก2๐ฅ2๐พ1
DontFeedTheAI โ๏ธ ๐ง
Transparent anonymization proxy for AI-assisted pentesting. Strips IPs, credentials, hostnames and PII before they reach any LLM (Claude, OpenAI, OpenRouter). Local Ollama + regex detection. Per-engagement vault๐ค
Github๐
#Ai
โ๏ธ @RootAccessClub
โ๏ธ @BugCod3
Transparent anonymization proxy for AI-assisted pentesting. Strips IPs, credentials, hostnames and PII before they reach any LLM (Claude, OpenAI, OpenRouter). Local Ollama + regex detection. Per-engagement vault
Github
#Ai
Please open Telegram to view this post
VIEW IN TELEGRAM
โค4โก2๐ฅ2
Turn your Burp Suite findings into clean, professional cards, ready for reports, bug bounty submissions, and social sharing.
Every pentester knows the moment: you've just confirmed a
SQL injection, an XSS payload, or a path traversal returned /etc/passwd. Now you need to document it.The usual workflow looks like this:
When you're running a pentest or a bug bounty session with 10, 15, or 20 findings - this process kills your momentum. You spend more time documenting than hacking.
Cmd+F / Ctrl+Frepshot-1.0.0.jar from the Releases pageRepShot loaded in the Output tabgit clone https://github.com/JFOZ1010/repshot.git
cd repshot
mvn clean package
# JAR will be at target/repshot-1.0.0.jar
BugCod3#BurpSuite #Security #Finder #Tools
Please open Telegram to view this post
VIEW IN TELEGRAM
โค4๐ฅ3โก1๐1
Hacking Tools ๐งฐ
All in One Hacking Tool for Security Researchers & Pentestersโ๏ธ
Github๐ฑ
#Tools #pentest #pentesting #security
๐ @RootAccessClub
๐ @BugCod3
All in One Hacking Tool for Security Researchers & Pentesters
Github
#Tools #pentest #pentesting #security
Please open Telegram to view this post
VIEW IN TELEGRAM
โค3๐ฅ2โก1
nRFBOX ๐ฑ
Open source ESP32 powered tool to scan, jam, spoof, and master BLE, Wi-Fi, and 2.4GHz networks๐ค
GitHub๐ป
๐ @BugCod3
๐ @RootAccessClub
Open source ESP32 powered tool to scan, jam, spoof, and master BLE, Wi-Fi, and 2.4GHz networks
GitHub
Please open Telegram to view this post
VIEW IN TELEGRAM
โค5โก4๐ฅ3
Please open Telegram to view this post
VIEW IN TELEGRAM
โคโ๐ฅ2๐ฅ1
Looking for a Telegram bot with custom features?
I can build professional Telegram bots tailored to your needs, whether it's for:
- Management & Automation
- Shop Bots
- Payment Integration
- AI Features
- Security Tools
- Custom APIs
- And much more!
T.me/BugCod3BOT
Please open Telegram to view this post
VIEW IN TELEGRAM
โก2๐ฅ2โค1
Full Bug Bounty Hunting & Red Teamers Methodology 2๏ธโฃ 0๏ธโฃ 2๏ธโฃ 6๏ธโฃ
Created by Cybernote, aspiring Red Team Operator and Bug Bounty Hunter. This repository documents my methodology, notes and workflow for web application security testingโก๏ธ
GitHub๐ฑ
#bug_bounty #bugbounty #RedTeam
๐ซ @BugCod3
๐ซ @RootAccessClub
Created by Cybernote, aspiring Red Team Operator and Bug Bounty Hunter. This repository documents my methodology, notes and workflow for web application security testing
GitHub
#bug_bounty #bugbounty #RedTeam
Please open Telegram to view this post
VIEW IN TELEGRAM
โค2โคโ๐ฅ2
๐๐ฎ๐ซ๐ฉ๐๐๐๐๐๐๐ฎ๐ซ๐ข๐ญ๐ฒ๐๐ฎ๐ข๐ญ๐ โญ๏ธ
Professional grade Burp Suite extension for comprehensive API reconnaissance, intelligent fuzzing, and AI powered security testing๐ก
Features๐ช
๐ต Reconnaissance
โก๏ธ Advanced Fuzzing
๐ Discovery Tools
๐ฅ Export & Integration
Installation๐ฅ
1๏ธโฃ ๐ฅ Burp โก๏ธ Extender โก๏ธ Extensions โก๏ธ Add โก๏ธ Python
2๏ธโฃ Select๐ฅ BurpAPISecuritySuite.py
Extension loads and starts capturing automatically
Requirementsโ๏ธ
Burp Suite (Professional or Community Edition)โ
Jython Standalone JARโ
GitHub๐ฑ
๐ @RootAccessClub
๐ @BugCod3
Professional grade Burp Suite extension for comprehensive API reconnaissance, intelligent fuzzing, and AI powered security testing
Features
Installation
Extension loads and starts capturing automatically
Requirements
Burp Suite (Professional or Community Edition)
Jython Standalone JAR
GitHub
Please open Telegram to view this post
VIEW IN TELEGRAM
๐ฅ3โก2
Don't forget to ๐น
Like๐
Shareโก๏ธ
Support๐งก
Like
Share
Support
Please open Telegram to view this post
VIEW IN TELEGRAM
Please open Telegram to view this post
VIEW IN TELEGRAM
๐ฅ6
New Web Based Subdomain Discovery Service ๐
crt.name is a new web based service for discovering subdomains through Certificate Transparency (CT) logs๐
It searches publicly available certificate records to identify subdomains associated with a target domain๐ต
Useful forโ
โข Subdomain Enumeration
โข Reconnaissance
โข Asset Discovery
โข Bug Bounty Recon
crt.name๐
๐ @RootAccessClub
๐ @BugCod3
crt.name is a new web based service for discovering subdomains through Certificate Transparency (CT) logs
It searches publicly available certificate records to identify subdomains associated with a target domain
Useful for
โข Subdomain Enumeration
โข Reconnaissance
โข Asset Discovery
โข Bug Bounty Recon
crt.name
Please open Telegram to view this post
VIEW IN TELEGRAM
โค5๐ฅ4๐1
๐ Bug Bounty Quiz
Which vulnerability is this? GET /api/user/123 Changing 123 to 124 exposes another user's data.
Which vulnerability is this? GET /api/user/123 Changing 123 to 124 exposes another user's data.
Anonymous Quiz
17%
A) XSS
64%
B) IDOR
12%
C) SSRF
7%
D) CSRF
โค4โคโ๐ฅ4
Media is too big
VIEW IN TELEGRAM
โ๏ธ SubZer0 โ Noise in. Priority out
Thousands of new CVEs every month
Only a few actually matter โ SubZer0 shows you which ones to patch first
๐ด KEV ยท EPSS ยท PoC ยท Metasploit ยท Nuclei โ all in one view
๐ SHA-256 verified ยท auto-refreshed every 6h
โก๏ธ Free ยท no sign-up ยท no tracking
๐ iliya-bashrc.github.io/SubZer0
๐ป github.com/iliya-bashrc/SubZer0
๐ @RootAccessClub ร @BugCod3
Thousands of new CVEs every month
Only a few actually matter โ SubZer0 shows you which ones to patch first
๐ด KEV ยท EPSS ยท PoC ยท Metasploit ยท Nuclei โ all in one view
๐ SHA-256 verified ยท auto-refreshed every 6h
โก๏ธ Free ยท no sign-up ยท no tracking
๐ iliya-bashrc.github.io/SubZer0
๐ป github.com/iliya-bashrc/SubZer0
๐ @RootAccessClub ร @BugCod3
๐ฅ4โก2โค1
BugCod3
Revelar โ Origin Reveal PRO ๐โ๐จ Overview: Revelar (Origin Reveal PRO) is a professional Go-based CLI tool for uncovering real/origin IP addresses of websites behind CDNs such as Cloudflare, Akamai, Fastly, Imperva, and AWS CloudFront. ๐ Features: โช๏ธ Detectsโฆ
This media is not supported in your browser
VIEW IN TELEGRAM
๐ฉธ REVELAR v2.0 โ Unmask the real origin IP behind any CDN. ๐๏ธ
Cloudflare. Fastly. Akamai. They only hide the front door.
Every origin still leaves a trace โ Revelar locks onto it.
โ๏ธ 18+ OSINT sources ยท live CDN fingerprinting ยท DNS/SPF/ASN pivot
favicon mmh3 ยท TLS cert hunting ยท smart origin scoring (0โ100)
One command. Full arsenal.
$ revelar -d target.com -active -deep
๐บ Free & open-source.
โญ github.com/MRvirusIR/Revelar
๐ก @BugCod3 ๐ค @RootAccessClub
โ๏ธ Twitter
#bugbounty #recon #osint #infosec #cybersecurity #Revelar
Cloudflare. Fastly. Akamai. They only hide the front door.
Every origin still leaves a trace โ Revelar locks onto it.
โ๏ธ 18+ OSINT sources ยท live CDN fingerprinting ยท DNS/SPF/ASN pivot
favicon mmh3 ยท TLS cert hunting ยท smart origin scoring (0โ100)
One command. Full arsenal.
$ revelar -d target.com -active -deep
๐บ Free & open-source.
โญ github.com/MRvirusIR/Revelar
๐ก @BugCod3 ๐ค @RootAccessClub
โ๏ธ Twitter
#bugbounty #recon #osint #infosec #cybersecurity #Revelar
โก3๐ฅ2