XbugHunting Menu :

• Information Gathering
• Mapping
• Discovery
• Exploitation
• PoCs & Reporting

Information Gathering :

• Basic Commands for Information Gathering
• Masscan - TCP Port Scanner
• DNS Recon - DNS Enumeration
• Sublist3r - Find Subdomains
• Alt-DNS - Subdomain Discovery
• Amass - In-Depth DNS Enumeration
• Subfinder - Subdomain Discovery Tool
• Enumall - Setup Script for Regon-NG
• Aquatone - Reconnaissance on Domain Names
• Cloudflare_Enum - Cloudflare DNS Enumeration
• InfoG - Information Gathering Tool
• The Harvester - E-mail, SubDomain, Ports etc.
• Recon-NG - Web Reconnaissance Framework
• SetoolKit - Social Engineering Toolkit
• WhatWeb - Next Generation Web Scanner
• Maltego - Interactive Data Mining Tool

Mapping :

• Nmap - IP's, Open Ports and Much More
• Firefox - Web Browser
• Firefox Browser Extensions
• Burp Suite Pro
• Burp Suite Extensions
• Intruder Payloads for Burp Suite
• Payloads All The Thing

Discovery :

• Acunetix-WVS
• Arachni
• Burp Suite
• Nexpose
• Nikto
• Vega
• Wapiti
• Web Security Scanner
• Websecurify Suite
• Joomscan
• w3af
• Zed Attack Proxy
• WP-Scan
• FuzzDB
• CeWL

Exploitation :

XSS :

• XSS Radar
• XSSHunter
• xssHunter Client
• DOMxssScanner
• XSSer
• BruteXSS
• XSStrike
• XSS'OR

SQLi :

• SQLmap

XXE :

• OXML-xxe
• XXEinjextor

SSTI :

• Tplmap

SSRF :

• SSRF-Detector
• Ground Control

LFI :

• LFISuit

Mobile :

• MobSF
• GenyMotion
• Apktool
• dex2jar
• jd-gui
• idb

Other :

• Gen-xbin-Avi
• GitTools
• DVCS Ripper
• TKO Subs
• SubBruteforcer
• Second-Order
• Race The Web
• CORStest
• RCE Struts-pwn
• ysoSerial
• PHPGGC
• Retire-js
• Getsploit
• Findsploit
• BFAC
• WP-Scan
• CMSmap
• Joomscan
• JSON W T T
• Wfuzz
• Patator
• Netcat
• ChangeMe
• wappalyzer
• builtwith
• wafw00f
• assetnote
• jsbeautifier
• LinkFinder

PoCs & Reporting :

• Bug Bounty Platforms
• POCs (Proof of Concepts)
• CheatSheet
• EyeWitness
• HttpScreenshot
• BugBountyTemplates
• Template Generator

How To Install for Linux :

git clone https://github.com/Whomrx666/Xbughunting.git
cd Xbughunting
chmod +x Xbughunting.py
sudo cp Xbughunting.py /usr/bin/Xbughunting
python2 Xbughunting.py

How To Install for Termux :

pkg update && pkg upgrade
pkg install git
pkg install python
pkg install python2
git clone https://github.com/Whomrx666/Xbughunting.git
cd Xbughunting
python2 Xbughunting.py

that's it.. type Xbughunting in terminal to execute the tool.

Download Directory :

Normal User : /home/$USER/Xbughunting/

Root User : /root/Xbughunting/

• ~/Xbughunting/info/ : Tools for Information Gathering
• ~/Xbughunting/mapp/ : Tools for Mapping
• ~/Xbughunting/disc/ : Tools for Discovery
• ~/Xbughunting/expt/ : Tools for Exploitation
• ~/Xbughunting/rept/ : Tools for Reporting
• ~/Xbughunting/hacking/ : Tools for Hacking

View Tool's README.md File for Installation Instruction and How To Use Guide.

Source :

TBHM3, GitHub, Bug Bounty Forum, Google and Few Bug Hunting Articles.

License :

MIT Licence

That's it... If You Like This Repo. Please Share This With Your Friends..

CONNECT WITH ME :

If you want to donate, click on the button

Visitors :

Thankyou. Happy Hunting..