• Profiles •
Highly customizable website vulnerability profiles.
This repository houses various type of web vulnerability profiles contributed by security researchers and engineers.
Warning
This project is in active development.
A profile is a manifest file, in JSON format, with the .bb2 extension, that contains all the information used
by GBounty to run web vulnerability scans.
By default, GBounty will download (clone) the latest release of this
repository, containing the most recent version of each profile, and store them in the ~/.gbounty/profiles directory.
Later, whenever a new release is published, you can update them with: gbounty --update-profiles.
Additionally, you can tell GBounty to use one (or more) specific profiles, with the -p <path-to-profile> flag.
For instance, in case you want to use just one profile: gbounty -p ~/.gbounty/profiles/SQLi.bb2. Or, in case
you want to manage your own set of profiles in another directory.
To simplify the task of creating new profiles, and not having to write them manually in plain JSON, you can use the GBounty Profiles Designer, which is a small Java application with a user-friendly interface to create web vulnerability profiles.
Find here the designer docs.
And bear in mind, contributions are welcome!
GBounty Profiles are distributed under MIT License