| PayloadsAllTheThings |
79112 |
17175 |
A list of useful payloads and bypass for Web Appli... |
2026-07-13 |
| dirsearch |
14482 |
2437 |
Web path scanner |
2026-07-13 |
| subfinder |
13997 |
1573 |
Fast passive subdomain enumeration tool. |
2026-07-12 |
| nuclei-templates |
12623 |
3563 |
Community curated list of templates for the nuclei... |
2026-07-12 |
| Resources-for-Beginner-Bug-Bounty-Hunters |
12100 |
2051 |
A list of resources for those interested in gettin... |
2026-07-12 |
| hetty |
11662 |
747 |
An HTTP toolkit for security research. |
2026-07-12 |
| awesome-hacker-search-engines |
10881 |
1045 |
A curated list of awesome search engines useful du... |
2026-07-12 |
| httpx |
10157 |
1082 |
httpx is a fast and multi-purpose HTTP toolkit tha... |
2026-07-12 |
| bbot |
10141 |
881 |
The recursive internet scanner for hackers. 🧡 |
2026-07-13 |
| OneForAll |
9916 |
1435 |
OneForAll是一款功能强大的å�åŸŸæ”¶é›†å·¥å… |
2026-07-12 |
| wstg |
9567 |
1640 |
The Web Security Testing Guide is a comprehensive ... |
2026-07-12 |
| rengine |
8734 |
1334 |
reNgine is an automated reconnaissance framework f... |
2026-07-13 |
| reconftw |
7829 |
1209 |
reconFTW is a tool designed to perform automated r... |
2026-07-13 |
| HowToHunt |
7155 |
1937 |
Collection of methodology and test case for variou... |
2026-07-12 |
| AllAboutBugBounty |
6802 |
1263 |
All about bug bounty (bypasses, payloads, and etc) |
2026-07-12 |
| DefaultCreds-cheat-sheet |
6658 |
781 |
One place for all the default credentials to assis... |
2026-07-12 |
| bugbounty-cheatsheet |
6506 |
1615 |
A list of interesting payloads, tips and tricks fo... |
2026-07-12 |
| osmedeus |
6469 |
1015 |
A Modern Orchestration Engine for Security |
2026-07-12 |
| hackerone-reports |
6344 |
1126 |
Top disclosed reports from HackerOne |
2026-07-12 |
| apkleaks |
6156 |
580 |
Scanning APK file for URIs, endpoints & secrets. |
2026-07-12 |
| scan4all |
6138 |
717 |
Official repository vuls Scan: 15000+PoCs; 23 kin... |
2026-07-13 |
| awesome-bugbounty-tools |
6110 |
984 |
A curated list of various bug bounty tools |
2026-07-13 |
| Awesome-Bugbounty-Writeups |
6018 |
1209 |
A curated list of bugbounty writeups (Bug type wis... |
2026-07-12 |
| commix |
5781 |
936 |
Automated All-in-One OS Command Injection Exploita... |
2026-07-12 |
| can-i-take-over-xyz |
5749 |
803 |
"Can I take over XYZ?" — a list of services and ... |
2026-07-12 |
| dalfox |
5115 |
542 |
🌙🦊 Dalfox is a powerful open-source XSS scan... |
2026-07-12 |
| hakrawler |
5086 |
537 |
Simple, fast web crawler designed for easy, quick ... |
2026-07-12 |
| WebHackersWeapons |
4891 |
823 |
⚔� Web Hacker's Weapons / A collection of cool... |
2026-07-12 |
| interactsh |
4436 |
469 |
An OOB interaction gathering server and client lib... |
2026-07-11 |
| knockpy |
4171 |
881 |
Knock Subdomain Scan |
2026-07-11 |
| malicious-pdf |
4103 |
543 |
💀 Generate malicious PDF test files for testing... |
2026-07-12 |
| IntruderPayloads |
3958 |
1187 |
A collection of Burpsuite Intruder payloads, BurpB... |
2026-07-12 |
| Fuzzing101 |
3802 |
422 |
An step by step fuzzing tutorial. A GitHub Securit... |
2026-07-12 |
| Findomain |
3767 |
394 |
The fastest and complete solution for domain recog... |
2026-07-13 |
| vulnerability-Checklist |
3603 |
843 |
This repository contain a lot of web and api vulne... |
2026-07-12 |
| awesome-mobile-security |
3508 |
376 |
An effort to build a single place for all useful a... |
2026-07-13 |
| cariddi |
3454 |
296 |
Take a list of domains, crawl urls and scan for en... |
2026-07-12 |
| pagodo |
3362 |
548 |
pagodo (Passive Google Dork) - Automate Google Hac... |
2026-07-12 |
| NoSQLMap |
3312 |
625 |
Automated NoSQL database enumeration and web appli... |
2026-07-11 |
| pentest-tools |
3309 |
785 |
A collection of custom security tools for quick ne... |
2026-07-11 |
| OneListForAll |
3197 |
540 |
Rockyou for web fuzzing |
2026-07-12 |
| awesome-oneliner-bugbounty |
3159 |
630 |
A collection of awesome one-liner scripts especial... |
2026-07-11 |
| S3Scanner |
3142 |
412 |
Scan for misconfigured S3 buckets across S3-compat... |
2026-07-09 |
| ParamSpider |
3126 |
479 |
Mining URLs from dark corners of Web Archives for... |
2026-07-12 |
| uncover |
3013 |
273 |
Quickly discover exposed hosts on the internet usi... |
2026-07-11 |
| gospider |
2983 |
335 |
Gospider - Fast web spider written in Go |
2026-07-12 |
| Claude-BugHunter |
2958 |
453 |
A Claude Code skill bundle for bug hunting and ext... |
2026-07-13 |
| pentest-guide |
2814 |
576 |
Penetration tests guide based on OWASP including t... |
2026-07-12 |
| Web-Fuzzing-Box |
2758 |
442 |
Web Fuzzing Box - Web 模糊测试å—典与一些P |
2026-07-10 |
| reFlutter |
2681 |
290 |
Flutter Reverse Engineering Framework |
2026-07-12 |
| caido |
2453 |
131 |
🚀 Caido releases, wiki and roadmap |
2026-07-12 |
| Sudomy |
2414 |
414 |
Sudomy is a subdomain enumeration tool to collect ... |
2026-07-12 |
| Tiny-XSS-Payloads |
2377 |
219 |
A collection of tiny XSS Payloads that can be used... |
2026-07-11 |
| jaeles |
2362 |
334 |
The Swiss Army knife for automated Web Application... |
2026-07-12 |
| ezXSS |
2321 |
386 |
ezXSS is an easy way for penetration testers and b... |
2026-07-11 |
| gitGraber |
2316 |
356 |
gitGraber: monitor GitHub to search and find sensi... |
2026-07-12 |
| BruteX |
2285 |
642 |
Automatically brute force all services running on ... |
2026-07-12 |
| 31-days-of-API-Security-Tips |
2240 |
350 |
This challenge is Inon Shkedy's 31 days API Securi... |
2026-07-11 |
| puredns |
2216 |
190 |
Puredns is a fast domain resolver and subdomain br... |
2026-07-12 |
| OWASP-Web-Checklist |
2175 |
412 |
OWASP Web Application Security Testing Checklist |
2026-07-11 |
| subjack |
2098 |
349 |
DNS Takeover tool written in Go |
2026-07-08 |
| Galaxy-Bugbounty-Checklist |
2093 |
449 |
Tips and Tutorials for Bug Bounty and also Penetra... |
2026-07-13 |
| x8 |
2079 |
194 |
Hidden parameters discovery suite |
2026-07-12 |
| Dictionary-Of-Pentesting |
2063 |
374 |
Dictionary collection project such as Pentesing, F... |
2026-07-10 |
| HolyTips |
2014 |
335 |
A Collection of Notes, Checklists, Writeups on Bug... |
2026-07-08 |
| Awesome-RCE-techniques |
1943 |
217 |
Awesome list of step by step techniques to achiev... |
2026-07-08 |
| BugBountyBooks |
1936 |
489 |
A collection of PDF/books about the modern web app... |
2026-07-12 |
| SubDomainizer |
1875 |
235 |
A tool to find subdomains and interesting things h... |
2026-07-11 |
| top25-parameter |
1845 |
280 |
For basic researches, top 25 vulnerability paramet... |
2026-07-11 |
| Findsploit |
1839 |
336 |
Find exploits in local and online databases instan... |
2026-07-11 |
| Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes |
1836 |
297 |
A comprehensive guide for web application penetrat... |
2026-07-11 |
| BlackWidow |
1811 |
392 |
A Python based web application scanner to gather O... |
2026-07-11 |
| BurpBounty |
1807 |
336 |
Burp Bounty (Scan Check Builder in BApp Store) is ... |
2026-07-11 |
| nomore403 |
1807 |
209 |
🚫 Advanced tool for security researchers to byp... |
2026-07-11 |
| inql |
1795 |
188 |
InQL is a robust, open-source Burp Suite extension... |
2026-07-09 |
| gotestwaf |
1791 |
257 |
An open-source project in Golang to asess differen... |
2026-07-12 |
| metlo |
1779 |
105 |
Metlo is an open-source API security platform. |
2026-07-11 |
| wordlists |
1769 |
206 |
Real-world infosec wordlists, updated regularly |
2026-07-12 |
| learn365 |
1704 |
421 |
This repository is about @harshbothra_'s 365 days ... |
2026-07-11 |
| Android-Reports-and-Resources |
1697 |
329 |
A big list of Android Hackerone disclosed reports ... |
2026-07-13 |
| urlhunter |
1681 |
115 |
a recon tool that allows searching on URLs that ar... |
2026-07-11 |
| requests-ip-rotator |
1668 |
173 |
A Python library to utilize AWS API Gateway's larg... |
2026-07-09 |
| metabigor |
1626 |
188 |
OSINT tools and more but without API key |
2026-07-11 |
| inventory |
1588 |
282 |
Asset inventory of over 800 public bug bounty prog... |
2026-07-07 |
| One-Liners |
1576 |
289 |
A collection of one-liners for bug bounty hunting. |
2026-07-12 |
| GooFuzz |
1576 |
158 |
GooFuzz is a tool to perform fuzzing with an OSINT... |
2026-07-11 |
| subzy |
1575 |
205 |
Subdomain takeover vulnerability checker |
2026-07-11 |
| BigBountyRecon |
1557 |
290 |
BigBountyRecon tool utilises 58 different techniqu... |
2026-07-12 |
| ScopeSentry |
1530 |
213 |
ScopeSentry-Cyberspace mapping, subdomain enumerat... |
2026-07-12 |
| github-search |
1494 |
355 |
A collection of tools to perform searches on GitHu... |
2026-07-12 |
| AWSBucketDump |
1467 |
244 |
Security Tool to Look For Interesting Files in S3 ... |
2026-06-29 |
| reFlutter |
1463 |
186 |
Flutter Reverse Engineering Framework |
2026-07-08 |
| BruteForceAI |
1460 |
259 |
Advanced LLM-powered brute-force tool combining AI... |
2026-07-12 |
| awesome-vulnerable-apps |
1443 |
221 |
Awesome Vulnerable Applications |
2026-07-12 |
| API-SecurityEmpire |
1440 |
251 |
API Security Project aims to present unique attack... |
2026-07-12 |
| git-hound |
1440 |
204 |
Fast GitHub recon tool. Scans for leaked secrets a... |
2026-07-10 |
| Bug-Bounty-Wordlists |
1421 |
362 |
A repository that includes all the important wordl... |
2026-07-12 |
| bruteforce-lists |
1421 |
402 |
Some files for bruteforcing certain things. |
2026-07-13 |
| XSpear |
1363 |
241 |
🔱 Powerfull XSS Scanning and Parameter analysis... |
2026-07-11 |
| awesome-hacking-lists |
1363 |
264 |
A curated collection of top-tier penetration testi... |
2026-07-13 |
| burp-ai-agent |
1349 |
203 |
Burp Suite extension that adds built-in MCP toolin... |
2026-07-12 |
| vapi |
1344 |
337 |
vAPI is Vulnerable Adversely Programmed Interface ... |
2026-07-12 |
| PwnFox |
1327 |
122 |
PwnFox is a Firefox/Burp extension that provide us... |
2026-07-12 |
| google-dorks |
1323 |
238 |
Useful Google Dorks for WebSecurity and Bug Bounty |
2026-07-11 |
| public-bugbounty-programs |
1320 |
385 |
Community curated list of public bug bounty and re... |
2026-07-13 |
| VHostScan |
1306 |
239 |
A virtual host scanner that performs reverse looku... |
2026-07-07 |
| bypass-firewalls-by-DNS-history |
1294 |
263 |
Firewall bypass script based on DNS history record... |
2026-07-12 |
| Interlace |
1294 |
188 |
Easily turn single threaded command line applicati... |
2026-07-12 |
| FavFreak |
1293 |
175 |
Making Favicon.ico based Recon Great again ! |
2026-07-11 |
| webcopilot |
1291 |
205 |
An automation tool that enumerates subdomains then... |
2026-07-11 |
| go-dork |
1286 |
140 |
The fastest dork scanner written in Go. |
2026-07-09 |
| Redcloud |
1280 |
205 |
Automated Red Team Infrastructure deployement usin... |
2026-07-11 |
| nuclei-wordfence-cve |
1262 |
156 |
75k+ WordPress Nuclei templates, updated daily fro... |
2026-07-12 |
| MobileHackersWeapons |
1255 |
212 |
Mobile Hacker's Weapons / A collection of cool too... |
2026-07-12 |
| scilla |
1239 |
146 |
Information Gathering tool - DNS / Subdomains / Po... |
2026-07-12 |
| ksubdomain |
1206 |
162 |
Subdomain enumeration tool, asynchronous dns packe... |
2026-07-11 |
| shortscan |
1202 |
115 |
An IIS short filename enumeration tool |
2026-07-12 |
| Web-Cache-Vulnerability-Scanner |
1189 |
161 |
Web Cache Vulnerability Scanner is a Go-based CLI ... |
2026-07-11 |
| leaky-paths |
1185 |
171 |
A collection of special paths linked to common sen... |
2026-07-12 |
| BugBountyToolkit |
1179 |
281 |
A multi-platform bug bounty toolkit that can be in... |
2026-07-11 |
| HostHunter |
1167 |
192 |
HostHunter a recon tool for discovering hostnames ... |
2026-07-08 |
| vulnerable-code-snippets |
1166 |
209 |
Twitter vulnerable snippets |
2026-07-11 |
| CloudBrute |
1142 |
159 |
Awesome cloud enumerator |
2026-07-11 |
| JSFScan.sh |
1101 |
188 |
Automation for javascript recon in bug bounty. |
2026-07-12 |
| can-i-take-over-dns |
1100 |
101 |
"Can I take over DNS?" — a list of DNS providers... |
2026-07-08 |
| ipranges |
1097 |
162 |
🔨 List all IP ranges from: Google (Cloud & Goog... |
2026-07-12 |
| sitedorks |
1047 |
128 |
Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo ... |
2026-07-11 |
| cent |
1045 |
167 |
Community edition nuclei templates, a simple tool ... |
2026-07-11 |
| magicRecon |
1042 |
161 |
MagicRecon is a powerful shell script to maximize ... |
2026-07-12 |
| mantis |
1030 |
134 |
Mantis is a security framework that automates the ... |
2026-07-12 |
| karma_v2 |
1015 |
184 |
â¡·â ‚ð�š”ð�šŠð�š›ð�š–ð�šŠ ð�šŸð�Ÿ¸â �⢾ is a Pas... |
2026-07-11 |
| jwt-hack |
1006 |
120 |
JSON Web Token Hack Toolkit |
2026-07-12 |
| ARL-plus-docker |
1002 |
162 |
基于ARL-V2.6.2修改�的版本 |
2026-07-11 |
| PrivEsc |
993 |
309 |
A collection of Windows, Linux and MySQL privilege... |
2026-07-11 |
| fuzz4bounty |
972 |
182 |
1337 Wordlists for Bug Bounty Hunting |
2026-07-12 |
| subscraper |
968 |
108 |
Subdomain and target enumeration tool built for of... |
2026-07-11 |
| SubOver |
967 |
198 |
A Powerful Subdomain Takeover Tool |
2026-07-10 |
| SpiderSuite |
965 |
123 |
SpiderSuite releases, wiki and roadmap |
2026-07-11 |
| CVE-2021-44228-PoC-log4j-bypass-words |
950 |
135 |
��💻 ✂� 🤬 CVE-2021-44228 - LOG4J Jav... |
2026-07-07 |
| AppSec-Payloads |
939 |
194 |
AppSec Payloads Arsenal for Pentration Tester and ... |
2026-07-11 |
| security-tools |
922 |
182 |
My collection of various security tools created mo... |
2026-07-07 |
| BugBountyScanner |
920 |
126 |
A Bash script and Docker image for Bug Bounty reco... |
2026-07-11 |
| mantra |
916 |
95 |
「🔑�A tool used to hunt down API key leaks i... |
2026-07-11 |
| awesome-list-of-secrets-in-environment-variables |
909 |
77 |
🦄🔒 Awesome list of secrets in environment va... |
2026-07-07 |
| Web-App-Pentest-Checklist |
907 |
196 |
A OWASP Based Checklist With 500+ Test Cases |
2026-07-08 |
| misconfig-mapper |
906 |
76 |
Misconfig Mapper is a fast tool to help you uncove... |
2026-07-11 |
| ReconAIzer |
901 |
116 |
A Burp Suite extension to add OpenAI (GPT) on Burp... |
2026-07-12 |
| Awesome-Smart-Contract-Security |
898 |
159 |
A curated list of Smart Contract Security material... |
2026-07-11 |
| urlfinder |
892 |
69 |
A high-speed tool for passively gathering URLs, op... |
2026-07-11 |
| getJS |
883 |
119 |
A tool to fastly get all javascript sources/files |
2026-07-12 |
| netlas-cookbook |
879 |
104 |
The goal of this guide is very simple - to teach a... |
2026-07-09 |
| StaCoAn |
870 |
138 |
StaCoAn is a crossplatform tool which aids develop... |
2026-06-27 |
| Bug-Bounty-Methodology |
868 |
113 |
These are my checklists which I use during my hunt... |
2026-07-11 |
| findom-xss |
863 |
113 |
A fast DOM based XSS vulnerability scanner with si... |
2026-07-08 |
| apk2url |
863 |
99 |
An OSINT tool to quickly extract IP and URL endpoi... |
2026-07-11 |
| Hacking-Tools |
862 |
216 |
This Repository is a collection of different ethic... |
2026-07-13 |
| github-subdomains |
860 |
122 |
Find subdomains on GitHub. |
2026-07-07 |
| Bug_Bounty_writeups |
853 |
123 |
BUG BOUNTY WRITEUPS - OWASP TOP 10 🔴🔴🔴🔠|
2026-07-10 |
| censys-subdomain-finder |
842 |
130 |
âš¡ Perform subdomain enumeration using the certif... |
2026-07-11 |
| Facebook-BugBounty-Writeups |
838 |
150 |
Collection of Facebook Bug Bounty Writeups |
2026-07-12 |
| ShadowClone |
821 |
114 |
Unleash the power of cloud |
2026-07-11 |
| OneDorkForAll |
821 |
200 |
An insane list of all dorks taken from everywhere ... |
2026-07-11 |
| n0kovo_subdomains |
817 |
108 |
An extremely effective subdomain enumeration wordl... |
2026-07-11 |
| Garud |
812 |
181 |
An automation tool that scans sub-domains, sub-dom... |
2026-07-11 |
| h2csmuggler |
803 |
119 |
HTTP Request Smuggling over HTTP/2 Cleartext (h2c) |
2026-07-10 |
| airecon |
793 |
129 |
AIRecon is an autonomous cybersecurity agent that ... |
2026-07-12 |
| Web_Hacking |
793 |
149 |
Bug Bounty Tricks and useful payloads and bypasses... |
2026-07-13 |
| Subdominator |
791 |
125 |
SubDominator helps you discover subdomains associa... |
2026-07-13 |
| emploleaks |
786 |
65 |
An OSINT tool that helps detect members of a compa... |
2026-07-11 |
| socialhunter |
775 |
82 |
crawls the website and finds broken social media l... |
2026-07-11 |
| offensive-docker |
769 |
160 |
Offensive Docker is an image with the more used of... |
2026-07-11 |
| assessment-mindset |
754 |
117 |
Security Mindmap that could be useful for the info... |
2026-07-07 |
| EmailAll |
741 |
120 |
EmailAll is a powerful Email Collect tool — 一æ... |
2026-07-09 |
| jsmon |
732 |
116 |
a javascript change monitoring tool for bugbountie... |
2026-07-07 |
| TOP |
732 |
127 |
TOP All bugbounty pentesting CVE-2023- POC Exp RC... |
2026-07-13 |
| ZeusCloud |
732 |
53 |
Open Source Cloud Security |
2026-07-11 |
| secret-regex-list |
729 |
71 |
List of regex for scraping secret API keys and jui... |
2026-07-11 |
| CyberPhish |
729 |
110 |
A heavily armed customizable phishing tool for edu... |
2026-07-11 |
| domained |
723 |
154 |
Multi Tool Subdomain Enumeration |
2026-07-11 |
| awesome-mcp-security |
720 |
174 |
🔥🔒 Awesome MCP (Model Context Protocol) Secu... |
2026-07-11 |
| agent |
712 |
121 |
Agentic offensive-security in your terminal |
2026-07-13 |
| chiasmodon |
696 |
57 |
Chiasmodon is an OSINT tool designed to assist in... |
2026-07-11 |
| keyFinder |
692 |
120 |
Passive API key and secret discovery browser exten... |
2026-07-12 |
| GDorks |
692 |
114 |
Google Dork List - Uncover the Hidden Gems of the ... |
2026-07-11 |
| Application-Security |
687 |
62 |
Resources for Application Security including Web, ... |
2026-07-11 |
| docem |
685 |
108 |
A tool to embed XXE and XSS payloads in docx, od... |
2026-07-12 |
| scant3r |
685 |
150 |
ScanT3r - Module based Bug Bounty Automation Tool ... |
2026-07-12 |
| awesome-bugbounty-builder |
676 |
132 |
Awesome Bug bounty builder Project |
2026-07-11 |
| ppfuzz |
669 |
72 |
A fast tool to scan client-side prototype pollutio... |
2026-07-07 |
| jfscan |
668 |
89 |
JFâš¡can - Super fast port scanning & service disc... |
2026-07-11 |
| samlists |
656 |
92 |
Free, libre, effective, and data-driven wordlists ... |
2026-05-27 |
| SonarSearch |
656 |
95 |
A rapid API for the Project Sonar dataset |
2026-07-10 |
| Bug-Bounty |
642 |
109 |
Bug Bounty ~ Awesomes |
Books |
| SQLiDetector |
635 |
113 |
Simple python script supported with BurpBouty prof... |
2026-07-12 |
| JSshell |
630 |
109 |
JSshell - JavaScript reverse/remote shell |
2026-07-07 |
| awesome-cicd-attacks |
609 |
57 |
Practical resources for offensive CI/CD security r... |
2026-07-11 |
| AutorizePro |
608 |
33 |
🧿 AutorizePro是一款强大越æ�ƒæ£€æµ‹ Burp æ... |
2026-07-02 |
| DarkAngel |
607 |
81 |
DarkAngel 是一款全自动白帽æ¼�洞扫æ��器ï... |
2026-07-07 |
| Gxss |
601 |
86 |
A tool to check a bunch of URLs that contain refle... |
2026-07-02 |
| CRLFsuite |
599 |
81 |
The most powerful CRLF injection (HTTP Response Sp... |
2026-07-11 |
| webHunt |
580 |
149 |
Web App bug hunting |
2026-07-11 |
| basecrack |
580 |
91 |
Decode All Bases - Base Scheme Decoder |
2026-07-07 |
| bXSS |
576 |
64 |
bXSS is a utility which can be used by bug hunters... |
2026-07-06 |
| awsome-security-write-ups-and-POCs |
567 |
120 |
Awesome Writeups and POCs |
2026-07-11 |
| Komo |
565 |
65 |
🚀Komo, a comprehensive asset collection and vul... |
2026-07-07 |
| vulnrepo |
564 |
118 |
VULNRΞPO - Free vulnerability report generator an... |
2026-07-08 |
| gato-x |
560 |
51 |
GitHub Attack Toolkit - Extreme Edition - A static... |
2026-07-10 |
| TheTimeMachine |
547 |
82 |
Weaponizing WaybackUrls for Recon, BugBounties , O... |
2026-07-05 |
| leaker |
546 |
79 |
Passive leak enumeration tool. |
2026-07-11 |
| SecurityExplained |
545 |
102 |
SecurityExplained is a new series after the previo... |
2026-07-09 |
| Dome |
543 |
75 |
Dome - Subdomain Enumeration Tool. Fast and reliab... |
2026-07-11 |
| bugbounty |
538 |
102 |
Bugbounty Resources |
2026-07-10 |
| CloudScraper |
537 |
113 |
CloudScraper: Tool to enumerate targets in search ... |
2026-07-11 |
| webapp-wordlists |
537 |
120 |
This repository contains wordlists for each versio... |
2026-06-28 |
| gotator |
526 |
66 |
Gotator is a tool to generate DNS wordlists throug... |
2026-07-10 |
| Logsensor |
524 |
85 |
A Powerful Sensor Tool to discover login panels, a... |
2026-07-11 |
| ppmap |
520 |
72 |
A scanner/exploitation tool written in GO, which l... |
2026-06-30 |
| csprecon |
518 |
52 |
Discover new target domains using Content Security... |
2026-07-11 |
| exifLooter |
493 |
28 |
ExifLooter finds geolocation on all image urls and... |
2026-07-07 |
| arsenal-ng |
489 |
64 |
The classic launcher, evolved. Fast, Go-based comm... |
2026-07-12 |
| BugBountyTemplates |
487 |
103 |
A collection of templates for bug bounty reporting |
2026-07-10 |
| bugbountyguide |
473 |
107 |
Bug Bounty Guide is a launchpad for bug bounty pro... |
2026-07-02 |
| awesome-attack-surface-monitoring |
469 |
65 |
Curated list of open-source & paid Attack Surface ... |
2026-07-11 |
| RegHex |
468 |
74 |
A collection of regexes for every possbile use |
2026-07-11 |
| hakip2host |
462 |
64 |
hakip2host takes a list of IP addresses via stdin,... |
2026-07-11 |
| HawkScan |
462 |
86 |
Security Tool for Reconnaissance and Information G... |
2026-04-15 |
| Android-Pentesting-Checklist |
461 |
100 |
Delve into a comprehensive checklist, your ultimat... |
2026-07-10 |
| oneliner-bugbounty |
459 |
75 |
oneliner commands for bug bounties |
2026-06-21 |
| LazyRecon |
452 |
104 |
An automated approach to performing recon for bug ... |
2026-06-12 |
| recon-pipeline |
451 |
99 |
An automated target reconnaissance pipeline. |
2026-07-04 |
| DDoSlayer |
447 |
102 |
An Advanced Layer 7 DDoS tool, Able to bypass CF a... |
2026-07-12 |
| bugbounty |
445 |
99 |
No description |
2026-06-30 |
| Offensive-Payloads |
445 |
151 |
List of payloads and wordlists that are specifical... |
2026-07-10 |
| Reconator |
441 |
228 |
Automated Recon for Pentesting & Bug Bounty |
2026-07-11 |
| missing-cve-nuclei-templates |
440 |
50 |
Weekly updated list of missing CVEs in nuclei temp... |
2026-07-11 |
| firefly |
437 |
41 |
Black box fuzzer for web applications |
2026-07-12 |
| fallparams |
433 |
53 |
Find All Parameters - Tool to crawl pages, find po... |
2026-06-25 |
| watchdog |
430 |
102 |
Watchdog - A Comprehensive Security Scanning and a... |
2026-06-30 |
| gosint |
429 |
86 |
Gosint is a distributed asset information collecti... |
2026-05-03 |
| authz0 |
429 |
55 |
🔑 Authz0 is an automated authorization test too... |
2026-07-03 |
| BypassFuzzer |
425 |
53 |
Fuzz 401/403/404 pages for bypasses |
2026-07-12 |
| web3-security-resources |
424 |
66 |
Curated Web3 security learning hub for smart contr... |
2026-07-06 |
| Taie-Bugbounty-killer |
422 |
32 |
挖掘国内外æ¼�æ´žå¹³å�°å¿…备的自动化æ�¡é’ |
2026-07-10 |
| Bug-bounty-Writeups |
417 |
72 |
Repository of Bug-Bounty Writeups |
2026-07-11 |
| bxss |
416 |
56 |
Blind XSS Scanner is a tool that can be used to sc... |
2026-07-03 |
| FOTOSPLOIT- |
412 |
49 |
FotoSploit $ git clone https://github.com/Cesar... |
2026-07-06 |
| mad-metasploit |
408 |
95 |
Metasploit custom modules, plugins, resource scrip... |
2026-07-12 |
| BugBounty |
407 |
170 |
RepoToStoreBugBountyInfo |
2026-07-09 |
| gradejs |
405 |
15 |
GradeJS analyzes production Webpack bundles withou... |
2026-04-16 |
| allsafe-android |
404 |
114 |
Intentionally vulnerable Android application. |
2026-07-06 |
| ipsourcebypass |
403 |
53 |
This Python script can be used to bypass IP source... |
2026-07-11 |
| urldedupe |
401 |
66 |
Pass in a list of URLs with query strings, get bac... |
2026-07-07 |
| s3-buckets-finder |
401 |
89 |
Find AWS S3 buckets and test their permissions. |
2026-06-01 |
| domain-protect |
396 |
62 |
OWASP Domain Protect - prevent subdomain takeover |
2026-06-04 |
| awesome-search-queries |
394 |
45 |
Community curated list of search queries for vario... |
2026-07-12 |
| DLLHijackHunter |
393 |
45 |
Automated DLL Hijacking Discovery, Validation, and... |
2026-07-07 |
| cscan |
387 |
62 |
Enterprise-grade Distributed Asset & Vulnerability... |
2026-07-12 |
| GoLinkFinder |
386 |
55 |
A fast and minimal JS endpoint extractor |
2026-06-21 |
| Gsec |
386 |
73 |
Web Security Scanner |
2026-07-11 |
| chameleon |
384 |
48 |
No description |
2026-07-10 |
| lit-bb-hack-tools |
382 |
64 |
Little Bug Bounty & Hacking Tools⚔� |
2026-07-10 |
| keywords |
375 |
185 |
No description |
2026-07-11 |
| match-replace-burp |
374 |
56 |
Useful "Match and Replace" burpsuite rules |
2026-07-11 |
| QuickXSS |
365 |
65 |
Automating XSS using Bash |
2026-06-11 |
| autossrf |
363 |
43 |
Smart context-based SSRF vulnerability scanner. |
2026-07-11 |
| url-tracker |
361 |
58 |
Change monitoring app that checks the content of w... |
2026-06-05 |
| cloudflare-origin-ip |
358 |
70 |
Try to find the origin IP of a webapp protected by... |
2026-07-11 |
| recon-my-way |
352 |
121 |
This repository created for personal use and added... |
2026-04-17 |
| XRCross |
351 |
70 |
XRCross is a Reconstruction, Scanner, and a tool f... |
2026-07-05 |
| tips-solidity-code-auditors |
349 |
36 |
Gaining the most elusive of tips. Add your input a... |
2026-07-08 |
| sub404 |
349 |
58 |
A python tool to check subdomain takeover vulnerab... |
2026-07-11 |
| cut-cdn |
348 |
53 |
✂� Removing CDN IPs from the list of IP addres |
2026-06-21 |
| 0l4bs |
345 |
48 |
Cross-site scripting labs for web application secu... |
2026-07-09 |
| slicer |
344 |
45 |
A tool to automate the boring process of APK recon |
2026-07-08 |
| dorks_hunter |
343 |
62 |
Simple Google Dorks search tool |
2026-07-11 |
| Jira-Lens |
343 |
55 |
Fast and customizable vulnerability scanner For JI... |
2026-07-11 |
| dora |
342 |
50 |
Find exposed API keys based on RegEx and get explo... |
2026-07-11 |
| Bug-Bounty-Agents |
341 |
67 |
AI-Powered Agents for Bub-Bounty Pentesting and Re... |
2026-07-13 |
| CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera |
340 |
32 |
🎩 🤟� [P1-$10,000] Google Chrome, Microsof... |
2026-07-11 |
| ssrf-sheriff |
338 |
70 |
A simple SSRF-testing sheriff written in Go |
2026-07-08 |
| pdlist |
336 |
48 |
A passive subdomain finder |
2026-07-11 |
| rescope |
329 |
60 |
Bugbounty scope tool |
2026-06-29 |
| pwn-machine |
329 |
54 |
PwnMachine is a self hosting solution based on doc... |
2026-06-20 |
| TerminatorZ |
329 |
47 |
TerminatorZ is a highly sophisticated and efficien... |
2026-07-02 |
| jaeles-signatures |
328 |
69 |
Default signature for Jaeles Scanner |
2026-06-17 |
| Bug_Bounty_Tools_and_Methodology |
325 |
84 |
Bug Bounty Tools used on Twitch - Recon |
2026-07-11 |
| resources |
325 |
45 |
Tools, data, and contact lists relevant to The dis... |
2026-07-05 |
| reconness |
325 |
38 |
ReconNess is a platform to allow continuous recon ... |
2026-06-07 |
| Full-Bug-Bounty-Hunting-Methodology-2026 |
322 |
64 |
How To approach recon on real targets — from pas... |
2026-07-11 |
| vaf |
318 |
44 |
Vaf is a cross-platform very advanced and fast web... |
2026-06-08 |
| BugBounty-Recon-Methodology |
310 |
76 |
BugBounty-Recon-Methodology |
2026-07-13 |
| Afuzz |
310 |
24 |
Afuzz is an automated web path fuzzing tool for th... |
2026-07-12 |
| Nightingale |
310 |
57 |
Nightingale Docker for Pentesters is a comprehensi... |
2026-07-11 |
| hijagger |
305 |
25 |
Checks all maintainers of all NPM and Pypi package... |
2026-07-11 |
| knary |
305 |
52 |
A simple HTTP(S) and DNS Canary bot with Slack/Dis... |
2026-06-23 |
| megplus |
304 |
108 |
Automated reconnaissance wrapper — TomNomNom's m... |
2026-07-01 |
| AutoRecon |
304 |
68 |
Simple shell script for automated domain recogniti... |
2026-02-24 |
| Dependency-Confusion |
304 |
42 |
All About Dependency Confusion Attack, (Detecting,... |
2026-07-05 |
| qsfuzz |
300 |
39 |
qsfuzz (Query String Fuzz) allows you to build you... |
2026-06-10 |
| BugBountyTools |
299 |
90 |
Tools that i personally use for Bug Bounty Hunting... |
2026-07-08 |
| penetration-testing-roadmap |
298 |
53 |
Complete Roadmap for Penetration Testing |
2026-07-12 |
| InfosecHouse |
298 |
61 |
Tools & Resources for Cyber Security Operations |
2026-07-11 |
| all-about-apikey |
297 |
63 |
Detailed information about API key / OAuth token (... |
2026-07-03 |
| lorsrf |
297 |
45 |
Fast CLI tool to find the parameters that can be u... |
2026-06-21 |
| headi |
296 |
59 |
Customisable and automated HTTP header injection |
2026-07-11 |
| SubDomz |
294 |
69 |
An Automated Subdomain Enumeration Tool |
2026-07-08 |
| Bountystrike-sh |
292 |
63 |
Poor (rich?) man's bug bounty pipeline https://dub... |
2026-07-11 |
| Monitorizer |
290 |
55 |
Monitoring framework to detect and report newly fo... |
2026-05-31 |
| GoogleDorker |
287 |
43 |
GoogleDorker - Unleash the power of Google dorking... |
2026-07-13 |
| Jasmin-Ransomware |
286 |
81 |
Jasmin Ransomware is an advanced red team tool (Wa... |
2026-06-26 |
| dnsprobe |
284 |
55 |
DNSProb is a tool built on top of retryabledns tha... |
2026-05-12 |
| jsubfinder |
281 |
35 |
jsubfinder searches webpages for javascript & anal... |
2026-07-11 |
| pentestmindmap |
280 |
75 |
a mindmap on pentest #pentestmindmap #oscp #lpt #e... |
2026-07-11 |
| project-black |
279 |
47 |
Pentest/BugBounty progress control with scanning m... |
2026-07-08 |
| mksub |
276 |
27 |
Generate tens of thousands of subdomain combinatio... |
2026-07-06 |
| cc.py |
275 |
45 |
Extracting URLs of a specific target based on the ... |
2026-05-06 |
| XSSNow |
275 |
94 |
Find XSS payloads that actually work by filtering ... |
2026-07-12 |
| bug-bounties |
270 |
39 |
⚔� Community maintained directory, MCP and API... |
2026-07-12 |
| fleex |
270 |
35 |
Fleex makes it easy to create multiple VPS on clou... |
2026-07-11 |
| contact.sh |
268 |
48 |
An OSINT tool to find contacts in order to report ... |
2026-07-01 |
| bugbountyDorks |
266 |
82 |
This repo contains all the Bug Bounty Dorks source... |
2026-06-29 |
| robofinder |
266 |
29 |
Robofinder fetches historical robots.txt files fro... |
2026-07-10 |
| BugBounty_CheatSheet |
265 |
54 |
BugBounty_CheatSheet |
2026-07-10 |
| vulnerable-mcp-servers-lab |
265 |
53 |
A collection of servers which are deliberately vul... |
2026-07-11 |
| investigator |
263 |
39 |
An online handy-recon tool |
2026-06-09 |
| GarudRecon |
262 |
56 |
GarudRecon automates domain recon with top open-so... |
2026-07-11 |
| Nucleimonst3r |
261 |
43 |
Nucleimonst3r is a powerful vulnerability scanner ... |
2026-07-12 |
| domscan |
258 |
33 |
Simple tool to scan a website for (DOM-based) XSS ... |
2026-06-30 |
| DorkAgent |
257 |
41 |
🤖 LLM-powered agent for automated Google Dorkin... |
2026-07-13 |
| icp-domains |
255 |
37 |
输入一个域å��，输出ICP备案所有关è�”åŸ |
2026-06-08 |
| XORpass |
254 |
44 |
Encoder to bypass WAF filters using XOR operations... |
2026-07-08 |
| Sec-88 |
254 |
69 |
Cyber Security Notes, Methodology, Resources and T... |
2026-07-12 |
| AnalyticsRelationships |
252 |
29 |
Get related domains / subdomains by looking at Goo... |
2026-07-11 |
| debugHunter |
250 |
7 |
Discover hidden debugging parameters and uncover w... |
2026-07-06 |
| bughunter |
249 |
75 |
Tools for BugHunting |
2026-07-05 |
| SecretOpt1c |
248 |
35 |
SecretOpt1c is a Red Team tool that helps uncover ... |
2026-06-10 |
| s3cXSSer |
246 |
32 |
This extension will help you to detect GET/POST ba... |
2026-05-20 |
| burp-vps-proxy |
246 |
29 |
This Burp Suite extension allows for the automatic... |
2026-06-28 |
| gf-secrets |
245 |
52 |
Secret and/or credential patterns used for gf. |
2026-07-08 |
| favirecon |
245 |
35 |
Use favicons to improve your target recon phase. Q... |
2026-07-10 |
| probable_subdomains |
243 |
26 |
Subdomains analysis and generation tool. Reveal th... |
2026-05-04 |
| Search-for-all-leaked-keys-secrets-using-one-regex- |
241 |
44 |
Search for all leaked keys/secrets using one regex... |
2026-07-11 |
| wordlistgen |
239 |
41 |
Quickly generate context-specific wordlists for co... |
2026-07-06 |
| cf-check |
238 |
43 |
CloudFlare Checker written in Go |
2026-05-31 |
| BB-datas |
233 |
67 |
Tools and datas related to Bug Bounty. |
2026-07-03 |
| Sec_Mind_Maps |
233 |
35 |
cyber security mind maps collection |
2026-07-04 |
| android-hacking-101 |
232 |
26 |
This repo is a helpful starting point for those in... |
2026-06-30 |
| VPS-Bug-Bounty-Tools |
232 |
60 |
Script that automates the installation of the main... |
2026-07-11 |
| request_smuggler |
230 |
30 |
Http request smuggling vulnerability scanner |
2026-03-08 |
| learn365 |
229 |
37 |
This repository is about @AnubhavSingh_'s 365 days... |
2026-03-04 |
| graphinder |
228 |
14 |
🕸� Blazing fast GraphQL endpoints finder usin... |
2026-06-08 |
| bbrecon |
228 |
39 |
Python library and CLI for the Bug Bounty Recon AP... |
2026-07-08 |
| bug-bounty-domains |
226 |
50 |
Domains belonging to the most reputed public bug b... |
2026-07-10 |
| AndroidSecNotes |
225 |
58 |
An actively maintained, Self curated notes related... |
2026-05-16 |
| x8-Burp |
225 |
39 |
Hidden parameters discovery suite |
2026-06-23 |
| Google-Dorker |
225 |
46 |
Automate dorking while doing bug bounty or other s... |
2026-07-01 |
| prokzee |
223 |
25 |
A cross-platform desktop application for HTTP/HTTP... |
2026-07-07 |
| asnip |
221 |
26 |
ASN target organization IP range attack surface ma... |
2026-05-26 |
| XSS-Payloads |
220 |
65 |
Collection of XSS Payloads for fun and profit |
2026-06-29 |
| TukTuk |
220 |
24 |
Tool for catching and logging different types of r... |
2026-06-20 |
| bbr |
220 |
33 |
An open source tool to aid in command line driven ... |
2026-06-25 |
| github-endpoints |
219 |
41 |
Find endpoints on GitHub. |
2026-05-30 |
| PyCript |
219 |
34 |
Burp Suite extension to decrypt/encrypt any encryp... |
2026-07-12 |
| tugarecon |
219 |
36 |
TugaRecon is an advanced subdomain reconnaissance ... |
2026-07-10 |
| postleaks |
217 |
38 |
Search for sensitive data in Postman public librar... |
2026-07-11 |
| offsectools_www |
217 |
29 |
A vast collection of security tools and resources ... |
2026-06-29 |
| pentest_lab |
216 |
55 |
Local penetration testing lab using docker-compose... |
2026-07-11 |
| quiver |
214 |
42 |
Quiver is the tool to manage all of your tools for... |
2026-06-12 |
| crithit |
213 |
44 |
Takes a single wordlist item and tests it one by o... |
2026-06-26 |
| dsieve |
213 |
25 |
Filter and enrich a list of subdomains by level |
2026-07-11 |
| linx |
212 |
11 |
Reveals invisible links within JavaScript files |
2026-04-10 |
| Astra |
211 |
28 |
Astra is a tool to find URLs and secrets inside a ... |
2026-05-16 |
| privatecollaborator |
211 |
46 |
A script for installing private Burp Collaborator ... |
2026-06-17 |
| research |
211 |
46 |
Bug Bounty writeups, Vulnerability Research, Tutor... |
2026-05-27 |
| secfiles |
210 |
26 |
My useful files for penetration tests, security as... |
2026-07-13 |
| gofingerprint |
209 |
36 |
GoFingerprint is a Go tool for taking a list of t... |
2026-05-06 |
| Hacking-Bug-Bounty-Books |
209 |
57 |
Collection of Combination of 👨��💻Ethica... |
2026-07-12 |
| osmedeus-base |
207 |
42 |
Build your own reconnaissance system with Osmedeus... |
2026-07-04 |
| Bug-Hunting-Colab |
205 |
88 |
A Colab For Bug Hunting! |
2026-03-11 |
| pp-finder |
204 |
19 |
PP-finder Help you find gadget for prototype pollu... |
2026-07-07 |
| Reconky-Automated_Bash_Script |
204 |
42 |
Reconky is an great Content Discovery bash script ... |
2025-12-31 |
| tools-tbhm |
204 |
56 |
Tools of "The Bug Hunters Methodology V2 by @jhadd... |
2026-05-11 |
| Minesweeper |
203 |
47 |
A Burpsuite plugin (BApp) to aid in the detection ... |
2026-06-07 |
| jiraffe |
202 |
27 |
One stop place for Jira security reconnaissance an... |
2026-07-07 |
| programs-watcher |
198 |
40 |
A Python script designed to monitor bug bounty pro... |
2026-06-25 |
| favicorn |
197 |
16 |
All-sources tool to search websites by favicons |
2026-07-08 |
| CloudHunter |
196 |
32 |
AWS, Azure, Alibaba and Google bucket scanner |
2026-07-08 |
| bugbountydash |
194 |
37 |
[depreciated] Terminal dashboard for bug bounty hu... |
2026-06-07 |
| Pentesting-Bugbounty |
194 |
44 |
Bringing infosec community, group and leaders toge... |
2026-03-22 |
| awesome-cybersec |
194 |
31 |
A collection of awesome platforms, blogs, document... |
2026-06-23 |
| Jira-Scan |
193 |
45 |
CVE-2017-9506 - SSRF |
2026-07-11 |
| Awesome-Dorks |
192 |
47 |
Dorks for Bug Bounty Hunting |
2026-06-10 |
| knockknock |
192 |
28 |
A simple reverse whois lookup tool which returns a... |
2026-07-07 |
| sheye |
188 |
43 |
Opensource assets and vulnerability scanning tool |
2026-07-11 |
| no-sandbox |
187 |
11 |
No Sandbox - Applications That Run Chromium and Ch... |
2026-04-29 |
| bulwark |
186 |
37 |
An organizational asset and vulnerability manageme... |
2026-05-10 |
| Oneliner-Bugbounty |
185 |
39 |
A collection oneliner scripts for bug bounty |
2026-03-27 |
| edge |
185 |
22 |
Whois for the Cloud: Recon tool for cloud provide... |
2026-04-30 |
| ssrfuzz |
183 |
21 |
SSRFuzz is a tool to find Server Side Request Forg... |
2026-05-23 |
| DockerExploit |
182 |
43 |
Docker Remote API Scanner and Exploit |
2026-07-02 |
| JSRecon-Buddy |
180 |
12 |
A simple browser extension to quickly find interes... |
2026-07-07 |
| udon |
180 |
8 |
A simple tool that helps to find assets/domains ba... |
2026-07-06 |
| autosetup |
180 |
33 |
Auto setup is a bash script compatible with Debian... |
2026-06-24 |
| Jbin-website-secret-scraper |
179 |
29 |
Jbin will gather all the URLs from the website and... |
2026-06-21 |
| pentesting-dockerfiles |
178 |
35 |
Pentesting/Bugbounty Dockerfiles. |
2026-04-05 |
| CVE-2021-21123-PoC-Google-Chrome |
175 |
24 |
��💻 � Google Chrome - File System Acces... |
2026-07-11 |
| Rekon |
174 |
59 |
The project contains multiple shell scripts for au... |
2025-12-31 |
| bugbountywiki |
173 |
15 |
The Bug Bounty Wiki |
2026-02-03 |
| medium-writeups |
173 |
30 |
This repository updates latest Bug Bounty medium w... |
2026-07-13 |
| X-Recon |
172 |
28 |
A utility for detecting webpage inputs and conduct... |
2026-07-11 |
| subby |
172 |
11 |
An uber fast and simple subdomain enumeration tool... |
2026-06-27 |
| D4rkXSS |
172 |
52 |
A list of useful payloads and Bypass for Web Appli... |
2026-05-31 |
| web-hacking-playground |
172 |
34 |
Web application with vulnerabilities found in real... |
2026-05-12 |
| sub.Monitor |
172 |
20 |
Self-hosted passive subdomain continous monitoring... |
2026-07-11 |
| Bugbounty-Resources |
171 |
28 |
A list of resources for those interested in gettin... |
2026-07-06 |
| Hunt3r |
171 |
27 |
Made your bugbounty subdomains reconnaissance easi... |
2026-04-16 |
| CorsMe |
170 |
26 |
Cross Origin Resource Sharing MisConfiguration Sca... |
2026-07-03 |
| android-h1 |
168 |
35 |
移动安全�洞挖掘专家SKILL，基于 Hacke... |
2026-07-12 |
| XSSRocket |
167 |
36 |
XSSRocket it is a tool designed for offensive secu... |
2026-06-09 |
| proof-of-concepts |
166 |
39 |
A little collection of fun and creative proof of c... |
2026-02-01 |
| Bug-Hunting |
166 |
32 |
A Collection of Notes, Methodologies, POCs and eve... |
2026-07-02 |
| VulnPlanet |
166 |
24 |
Vulnerable code snippets with fixes for Web2, Web3... |
2026-04-10 |
| Recon-bugbounty |
165 |
22 |
Simple recon using multiple tools! |
2026-05-03 |
| Toolpacks |
165 |
18 |
Moved to:: https://github.com/pkgforge/soarpkgs |
2026-06-25 |
| bug-bounty |
164 |
33 |
My personal bug bounty toolkit. |
2026-06-12 |
| CRLF-Injection-Scanner |
163 |
71 |
Command line tool for testing CRLF injection on a ... |
2026-03-04 |
| OSINT-SearchOperators |
163 |
24 |
No description |
2026-07-09 |
| DataExtractor |
162 |
37 |
A Burp Suite extension to extract datas from sourc... |
2026-06-18 |
| SuperLibrary |
162 |
41 |
A massive, curated collection of information secur... |
2026-07-11 |
| xsstools |
161 |
14 |
xss development frameworks, with the goal of makin... |
2026-07-07 |
| cewler |
159 |
19 |
CeWLeR - Custom Word List generator Redefined. CeW... |
2026-07-07 |
| SourceWolf |
157 |
42 |
Amazingly fast response crawler to find juicy stuf... |
2026-03-30 |
| keyhacks.sh |
157 |
27 |
Automation of tokens/api keys testing. |
2026-07-07 |
| SQLi-Query-Tampering |
157 |
24 |
SQLi Query Tampering extends and adds custom Paylo... |
2026-05-24 |
| webstor |
157 |
20 |
WebStor efficiently enumerates all websites across... |
2026-04-18 |
| smartrecon |
157 |
42 |
smartrecon is a powerful shell script to automate ... |
2026-05-19 |
| BugTraceAI-CLI |
156 |
27 |
Autonomous AI-powered security scanner — multi-a... |
2026-07-11 |
| ARL-Next |
156 |
28 |
🚀 自动化资产侦察与�洞监控平� (A... |
2026-07-13 |
| Task-Ninja |
155 |
25 |
Ultimate Tasks Automation Framework for Hackers, D... |
2026-07-11 |
| webdork |
155 |
26 |
A Python tool to automate some dorking stuff to fi... |
2026-06-30 |
| insiders |
155 |
24 |
Archive of Potential Insider Threats |
2026-07-09 |
| bugbountybloglist |
153 |
23 |
Quick research done on some bug bounty blogs! Chec... |
2026-05-20 |
| scriptkiddi3 |
153 |
26 |
Streamline your recon and vulnerability detection ... |
2026-05-26 |
| ThreatTracer |
153 |
25 |
ThreatTracer - A tool to identify CVE by name & ve... |
2026-07-12 |
| Bug-Bounty-Tips |
152 |
33 |
A collection of notes, checklists, writeups on bu... |
2026-06-28 |
| BB-legal-FR |
152 |
5 |
Quelques conseils autour des obligations légales,... |
2026-06-29 |
| bugbounty_tools |
151 |
24 |
Collection of scripts and tools used during bug bo... |
2026-07-07 |
| jsleak |
151 |
28 |
a Go code to detect leaks in JS files via regex pa... |
2026-07-06 |
| DNS-Discovery |
151 |
41 |
DNS-Discovery is a multithreaded subdomain brutefo... |
2026-07-08 |
| R3C0Nizer |
151 |
48 |
R3C0Nizer is the first ever CLI based menu-driven ... |
2026-04-24 |
| bash-bounty |
150 |
39 |
Random Tools for Bug Bounty |
2026-06-27 |
| faillapop |
150 |
11 |
Vulnerable-by-design solidity protocol to help Web... |
2026-06-09 |
| WordList |
150 |
42 |
Custom wordlist, updated regularly |
2026-07-11 |
| nodesub |
149 |
25 |
Nodesub is a command-line tool for finding subdoma... |
2026-07-11 |
| ldap2json |
149 |
23 |
The ldap2json script allows you to extract the who... |
2026-07-06 |
| CloudSniffer |
149 |
61 |
CloudSniffer is a powerful tool designed to aid in... |
2026-07-07 |
| cazador_unr |
149 |
57 |
Hacking tools |
2026-05-17 |
| kitsec-core |
149 |
10 |
Pentesting, made easy. |
2026-03-23 |
| Swiftness |
148 |
31 |
A note-taking macOS app for penetration-testers. |
2026-06-19 |
| BugBounty |
147 |
33 |
Bug Bounty stuffs, payloads, scripts, profiles, ti... |
2026-06-02 |
| bughunter |
147 |
55 |
Bug Hunter is a command-line tool designed to assi... |
2026-07-05 |
| PassDetective |
147 |
10 |
PassDetective is a command-line tool that scans sh... |
2026-07-05 |
| uddup |
145 |
21 |
Urls de-duplication tool for better recon. |
2026-05-11 |
| writeup-miner |
145 |
16 |
This is a useful Python script for extracting bug ... |
2026-06-08 |
| goverview |
143 |
24 |
goverview - Get an overview of the list of URLs |
2026-04-02 |
| FastDork |
141 |
22 |
âš¡ FastDork speeds up repetitive dorking: build r... |
2026-07-09 |
| ParaForge |
140 |
19 |
A BurpSuite extension to create a custom word-list... |
2026-07-12 |
| bugbounty |
138 |
15 |
Swisscom Vulnerability Disclosure Policy & Bug Bou... |
2026-07-10 |
| xss-payload-list |
138 |
34 |
xss-payload-list |
2026-07-07 |
| jsfinder |
138 |
15 |
Fetches JavaScript files quickly and comprehensive... |
2026-07-10 |
| asnrecon |
136 |
31 |
ASN reconnaissance script |
2026-05-26 |
| chomtesh |
135 |
23 |
CHOMTE.SH is a powerful shell script designed to a... |
2026-06-25 |
| cvemapping |
134 |
17 |
This repo Gathers all available cve exploits from ... |
2026-07-12 |
| SSRFPwned |
133 |
26 |
Checks for SSRF using built-in custom Payloads aft... |
2026-07-11 |
| dnsanity |
133 |
5 |
High-performance DNS validator using template-base... |
2026-06-18 |
| Custom-Nuclei-Templates |
132 |
36 |
No description |
2026-06-01 |
| misc |
132 |
24 |
Scripts and other stuff. |
2026-06-26 |
| CVE2PoC |
132 |
22 |
CVE2PoC is a tool that helps penetration testers, ... |
2026-07-12 |
| Blind-SSRF |
132 |
21 |
Nuclei Templates to reproduce Cracking the lens's ... |
2026-06-01 |
| subsnipe |
131 |
18 |
SubSnipe is a tool designed to help find subdomain... |
2026-06-17 |
| pentest-everything |
131 |
41 |
This is my penetration testing cheatsheet |
2026-04-09 |
| aquatone |
131 |
20 |
A Tool for Domain Flyovers |
2026-07-02 |
| All-in-one_BugBounty_PDF_bundles |
130 |
36 |
No description |
2026-05-04 |
| Rad-Team-tools |
130 |
16 |
�金技巧 |
红队 |
| burpsuite |
129 |
42 |
BurpSuite Pro, Plugins and Payloads |
2026-06-18 |
| neural-network-hacking |
129 |
32 |
Hacking the Singularity. Deep learning hacking. We... |
2026-07-04 |
| Awesome-HTTPRequestSmuggling |
129 |
22 |
A curated list of awesome blogs and tools about HT... |
2026-05-20 |
| Eagle |
128 |
36 |
Multithreaded Plugin based vulnerability scanner f... |
2026-06-14 |
| Bug-Bounty-Scripts |
126 |
28 |
The scripts I write to help me on my bug bounty hu... |
2026-05-24 |
| HTB-certified-bug-bounty-hunter-exam-cheetsheet |
125 |
20 |
All cheetsheets with main information from HTB CBB... |
2026-07-11 |
| deksterecon |
125 |
36 |
Web Application recon automation |
2026-01-07 |
| inflate.py |
125 |
15 |
Artificially inflate a given binary to exceed comm... |
2026-06-30 |
| BugBountyTools |
124 |
45 |
A-to-Z Bug Bounty Hunting Tools |
2026-07-11 |
| smugglex |
124 |
14 |
Rust-powered HTTP Request Smuggling Scanner. |
2026-07-11 |
| frida |
124 |
35 |
Frida scripts for mobile application dynamic-analy... |
2026-04-19 |
| Secbuild |
123 |
28 |
An automation tool to install the most popular too... |
2026-06-30 |
| OK-VPS |
122 |
45 |
Bug Bounty Vps Setup Tools |
2026-06-04 |
| goblob |
122 |
7 |
A fast enumeration tool for publicly exposed Azure... |
2026-06-12 |
| fluffy-barnacle |
120 |
14 |
Disposable, ephemeral network infrastructure power... |
2026-07-07 |
| bugbounty-wordlist |
119 |
19 |
Real world bug bounty wordlists |
2026-07-09 |
| micro-sentry |
118 |
8 |
Tiny Sentry client with idiomatic wrapper for Angu... |
2024-09-09 |
| Pentest-Mapper |
118 |
38 |
A Burp Suite Extension for pentester and bug bount... |
2026-07-12 |
| Bug-Bounty-Tools |
117 |
44 |
The tools I have programmed to help me with bugbou... |
2026-02-12 |
| ghsec-jaeles-signatures |
117 |
40 |
Signatures for jaeles scanner by @j3ssie |
2026-01-31 |
| RegexPassive |
117 |
24 |
🔠Collection of regexp pattern for security pas... |
2026-07-12 |
| Sub-Drill |
117 |
31 |
A very (very) FAST and simple subdomain finder bas... |
2026-05-25 |
| xssfinder |
116 |
37 |
Toolset for detecting reflected xss in websites |
2026-03-09 |
| bugbounty |
115 |
18 |
All Things Bug Bounty |
2026-03-27 |
| crtfinder |
115 |
30 |
Fast tool to extract all subdomains from crt.sh we... |
2026-02-25 |
| spellbook |
114 |
28 |
Framework for rapid development of offensive secur... |
2026-07-11 |
| CVE-2022-23808 |
114 |
23 |
phpMyAdmin XSS |
2026-04-08 |
| LFITester |
114 |
27 |
LFITester is a Python3 program that automates the ... |
2026-07-11 |
| bugbounty-openvpn-socks |
113 |
24 |
Run all your bug bounty VPN profiles in parallel a... |
2026-01-10 |
| russkiwlst |
113 |
29 |
Bundle of common passwords targeting RUSSIAN-speak... |
2026-07-11 |
| Digital-Forensics-Tools |
113 |
41 |
A curated list of essential digital forensics tool... |
2026-07-11 |
| Toxic-MD |
112 |
298 |
Toxic MD is a powerful WhatsApp crash and bug bot ... |
2026-05-21 |
| YesWeBurp |
111 |
25 |
YesWeHack Api Extension for Burp |
2026-07-07 |
| mzap |
111 |
18 |
⚡� Multiple target ZAP Scanning |
2026-07-06 |
| hack-pet |
111 |
19 |
� Managing command snippets for hackers/bug bou... |
2026-07-08 |
| SubEvil |
111 |
13 |
SubEvil is an advanced open source intelligence fr... |
2026-07-11 |
| AWS-Scanner |
110 |
44 |
Scans a list of websites for Cloudfront or S3 Buck... |
2026-01-16 |
| log4j |
110 |
22 |
Trickest Workflow for discovering log4j vulnerabil... |
2026-05-04 |
| PSFuzz |
109 |
26 |
Proviesec Fuzz Scanner - dir/path web scanner |
2026-05-02 |
| vulnsearch |
109 |
23 |
A deep look at some recon methodologies and web-ap... |
2026-07-08 |
| bhedak |
109 |
21 |
A replacement of "qsreplace", accepts URLs as stan... |
2026-03-07 |
| XSS-Payload-without-Anything |
109 |
31 |
XSS Payload without Anything. |
2026-07-12 |
| wwwordlist |
109 |
14 |
Wwwordlist is a wordlist generator for pentesters ... |
2026-07-09 |
| payout-targets-data |
108 |
19 |
Provides public bug bounty programs in-scope data ... |
2026-07-12 |
| BackupFinder |
108 |
19 |
BackupFinder discovers backup files on web servers... |
2026-07-07 |
| FrogPost |
108 |
8 |
FrogPost: postMessage Security Testing Tool |
2026-07-07 |
| X-RSA |
108 |
27 |
Cryptography Tool |
RSA Attacks |
| related-domains |
107 |
7 |
Find related domains of a given domain. |
2026-07-04 |
| Custom-Nuclei-Templates |
107 |
28 |
Community curated list of templates for the nuclei... |
2026-07-11 |
| daily-bugbounty-writeups |
106 |
9 |
This repository contains Bug Bounty writeups |
2026-07-12 |
| gitlab-subdomains |
106 |
13 |
Find subdomains on GitLab. |
2026-05-26 |
| bugradar |
106 |
17 |
Advanced external automation on bug bounty program... |
2026-04-25 |
| awesome-security |
106 |
9 |
A collection of awesome ethical hacking and securi... |
2026-06-23 |
| AttackSurfaceManagement |
105 |
21 |
Discover the attack surface and prioritize risks w... |
2026-06-11 |
| fuzzlists |
104 |
17 |
A collection of useful lists for Penetration Testi... |
2026-06-29 |
| awesome-reference |
103 |
34 |
Reference list of useful links to learn about pro... |
2026-04-10 |
| cdn-ranges |
102 |
25 |
Tool to download IPv4 and IPv6 ranges of CDN provi... |
2026-07-10 |
| Offensive-Pentesting-Scripts |
102 |
36 |
Scripts that are intended to help you in your pen-... |
2026-07-12 |
| JWTweak |
102 |
19 |
Detects the algorithm of input JWT Token and provi... |
2026-07-08 |
| bugbounty-disclosed-reports |
101 |
31 |
Public Disclosed Bug Bounty Reports formated in ma... |
2026-07-06 |
| bugbounty_stuff |
101 |
13 |
No description |
2025-10-20 |
| HackerToolkit |
101 |
5 |
HackerToolkit offers a curated selection of tools ... |
2026-07-05 |
| gerobug |
101 |
23 |
The First Open Source Bug Bounty Platform |
2026-07-05 |
| hfuzz |
101 |
13 |
Wordlist for web fuzzing, made from a variety of r... |
2026-01-23 |
| Kali-Linux |
100 |
17 |
A guide to using Kali Linux tools for web penetrat... |
2026-07-12 |
| Resources |
98 |
19 |
A Storehouse of resources related to Bug Bounty Hu... |
2026-05-08 |
| BugBounty |
97 |
14 |
A quick bug bounty guide for beginners |
2026-07-12 |
| BugBountyKnowledgeBase |
97 |
27 |
Obsidian Vault for bug bounty hunters |
2026-07-03 |
| ninjasworkout |
97 |
25 |
Vulnerable NodeJS Web Application |
2026-07-07 |
| KaliIntelligenceSuite |
97 |
27 |
Kali Intelligence Suite (KIS) shall aid in the fas... |
2026-07-07 |
| wadl-dumper |
97 |
19 |
Dump all available paths and/or endpoints on WADL ... |
2026-07-08 |
| awesome-smartcontract-hacking |
98 |
17 |
Here we collect and discuss for Smart contract sec... |
2026-05-17 |
| CosmWasm-audit-roadmap |
97 |
16 |
Roadmap to get up to speed with CosmWasm smart con... |
2026-07-07 |
| BugBounty-Methodology |
96 |
20 |
No description |
2026-06-25 |
| targets |
96 |
16 |
A collection of over 5.1 million sub-domains and a... |
2026-06-29 |
| mainRecon |
95 |
16 |
mainRecon is an automated reconnaissance docker im... |
2026-05-27 |
| learn250 |
95 |
12 |
No description |
2026-03-04 |
| nipejs |
95 |
20 |
Simplify your life with leak detection in JavaScri... |
2026-05-18 |
| Email-Vulnerability-Checker |
95 |
13 |
Find Email Spoofing Vulnerablity of domains |
2026-07-07 |
| AdvancedKeyHacks |
94 |
27 |
API Key/Token Exploitation Made easy. |
2026-06-03 |
| backup-gen |
94 |
12 |
Backup Files Wordlist Generator - generate a compr... |
2026-06-05 |
| WayBackupFinder |
93 |
23 |
A passive way to find backups/ sensitive informati... |
2026-07-11 |
| Agnee |
93 |
16 |
Find sensitive information using dorks from differ... |
2026-03-07 |
| Bugs-feed |
93 |
16 |
Bug's feed is a local hosted portal where you can ... |
2025-09-15 |
| cidr-ip-ranges-by-country |
93 |
28 |
CIDR IP ranges by country for geolocation, firewal... |
2026-07-13 |
| scope |
93 |
15 |
An automated GitHub Actions-based crawler that fet... |
2026-07-13 |
| OffensiveCloudDistribution |
92 |
12 |
Leverage the ability of Terraform and AWS or GCP t... |
2026-04-13 |
| FFUF-Tips-And-Tricks |
92 |
11 |
Describe how to use ffuf different options with ex... |
2026-06-17 |
| BurnWP-Framework |
92 |
24 |
BurnWP Advanced Exploiter System instead Scanner &... |
2026-07-08 |
| XXElixir |
92 |
8 |
This tool is designed to test for file upload and ... |
2026-07-02 |
| Hacking-Insecure-Firebase-Database |
91 |
10 |
Insecure Firebase |
Bugbounty |
| BugBountyTips |
91 |
5 |
No description |
2026-06-19 |
| nuclei-templates |
91 |
30 |
All Nuclei Templates |
2026-07-11 |
| CVE-2022-41040-POC |
91 |
12 |
CVE-2022-41040 - Server Side Request Forgery (SSRF... |
2026-05-13 |
| talosplus |
91 |
15 |
Talosplus is a fast and robust template based Inte... |
2026-05-23 |
| HydraRecon |
91 |
16 |
All In One, Fast, Easy Recon Tool |
2026-07-07 |
| s3reverse |
90 |
28 |
The format of various s3 buckets is convert in one... |
2026-07-11 |
| Acamar |
90 |
20 |
A Python3 based single-file subdomain enumerator |
2026-05-06 |
| bug-bounty-responses |
90 |
21 |
A collection of response templates for invalid bug... |
2025-10-04 |
| Twitter-Seclists |
90 |
12 |
Curated lists of InfoSec on Twitter. Find out who'... |
2026-05-31 |
| bug_bounty_checklist |
89 |
21 |
My Notes & Resources Of Bug Bounty Checklists |
2026-06-28 |
| vhost-brute |
89 |
32 |
A PHP tool to brute force vhost configured on a se... |
2026-01-15 |
| Bugbounty-Resources |
88 |
25 |
No description |
2026-02-22 |
| directory-files-payload-lists |
88 |
24 |
Directory scans |
2026-05-08 |
| fresh.py |
88 |
18 |
An efficient multi-threaded DNS resolver validator |
2026-05-25 |
| PastebinMarkdownXSS |
88 |
10 |
XSS in pastebin.com and reddit.com via unsanitized... |
2025-12-09 |
| MobSecco |
88 |
12 |
Cloning apk for bypassing code tampering detection... |
2026-05-17 |
| nuubi |
87 |
23 |
Nuubi Tools (Information-ghatering |
Scanner |
| Subhunter |
87 |
21 |
A fast subdomain takeover tool |
2026-05-21 |
| jsdif |
86 |
13 |
A powerful JavaScript monitoring tool for bug boun... |
2026-06-25 |
| bounty |
86 |
29 |
Misc bounty and vulndisc things |
2026-04-25 |
| spk |
86 |
5 |
spk aka spritzgebaeck: A small OSINT/Recon tool to... |
2026-07-06 |
| -Ultimate-Cybersecurity-Roadmap |
86 |
11 |
Ultimate Cybersecurity Roadmap (2025 Edition) |
Be... |
| swiss-bugbounty-programs |
85 |
16 |
List of bug bounty and coordinated vulnerability d... |
2026-06-30 |
| bugbounty.zip |
85 |
13 |
No description |
2026-07-11 |
| dnspy |
85 |
23 |
Find subdomains and takeovers. |
2026-07-10 |
| CVE-2021-43008-AdminerRead |
85 |
17 |
Exploit tool for CVE-2021-43008 Adminer 1.0 up to ... |
2026-03-01 |
| hinject |
84 |
16 |
Host Header Injection Checker |
2026-01-31 |
| rapiddns |
84 |
20 |
Rapidly enumerate subdomains and domains using rap... |
2026-07-11 |
| knoxsser |
83 |
14 |
A powerful bash script for massive XSS scanning le... |
2026-07-09 |
| frida_setup |
83 |
16 |
One-click installer for Frida and Burp certs for S... |
2026-06-09 |
| nuclei-MonaCodeScanner |
83 |
8 |
Nuclei templates for source code analysis. Detects... |
2026-02-24 |
| Inventus |
82 |
28 |
Inventus is a spider designed to find subdomains o... |
2026-04-26 |
| PyCript-WebSocket |
82 |
9 |
PyCript Websocket is now merge into https://github... |
2026-06-16 |
| Discord-Recon |
82 |
19 |
Discord bot created to automate bug bounty recon, ... |
2026-03-27 |
| MinerInTheMiddle |
82 |
22 |
This application was created as a POC for how to s... |
2026-06-30 |
| acunetix-13-kali-linux |
82 |
38 |
acunetix-13 install in kali linux |
2026-07-01 |
| sqli-postgres-rce-privesc-hacking-playground |
82 |
23 |
Application with SQL Injection vulnerability and p... |
2026-04-15 |
| bugbounty-lab101 |
81 |
20 |
A complete bug bounty workspace for HackerOne rese... |
2026-07-12 |
| burp-bounty |
81 |
19 |
Burp Bounty profiles |
2026-05-24 |
| bug-bounty-writeups |
81 |
17 |
A curated list of available Bug Bounty & Disclosu... |
2026-07-07 |
| Weaponize-Your-Burp |
81 |
18 |
Weaponize Your Burp is a repository for automation... |
2026-05-11 |
| YAPS |
81 |
9 |
Yet Another PHP Shell - The most complete PHP reve... |
2026-07-07 |
| bugbounty-tools |
79 |
25 |
Random tools I've written for bug bounties |
2025-09-23 |
| osmedeus-workflow |
79 |
22 |
Community Workflow for the Osmedeus Engine that de... |
2026-06-24 |
| Subcert |
79 |
14 |
Subcert is a subdomain enumeration tool, that find... |
2026-05-25 |
| recon |
79 |
14 |
NodeJS script to extract assets for the Apple bug ... |
2026-06-24 |
| Arsenal |
79 |
8 |
Hastly written Tools & Scripts for Personal Use Ca... |
2026-06-27 |
| subdomains.sh |
79 |
12 |
A wrapper around tools used for subdomain enumerat... |
2025-12-09 |
| LFIDump |
78 |
15 |
A simple python script to dump remote files throug... |
2026-06-29 |
| windfire |
78 |
2 |
Blazing fast, asynchronous URL prober & fingerprin... |
2026-06-19 |
| Firefly-SRC |
77 |
2 |
SRC资产探测平å�°ã€�æ•´ç�†æ”¶å½•å›½å†…外èµ�é‡ |
2026-07-06 |
| Find-Hardcoded |
77 |
17 |
You can find hardcoded Api-Key,Secret,Token Etc.. |
2026-02-13 |
| taser |
77 |
13 |
Python resource library for creating security rela... |
2026-06-12 |
| ScopeHunter |
77 |
14 |
ScopeHunter is a command-line tool for finding in ... |
2026-05-02 |
| AIHTTPAnalyzer |
77 |
20 |
AIHTTPAnalyzer revolutionizes web application secu... |
2026-07-05 |
| EndPointer |
77 |
10 |
This is the open sourced code for the extension, E... |
2026-07-07 |
| fetchmeurls |
76 |
16 |
A Tool for Bug Bounty Hunters that uses Passive an... |
2025-12-31 |
| CodeAllTheThings |
76 |
17 |
A list of threat sinks used in the manual security... |
2026-01-22 |
| ExternalAttacker-MCP |
76 |
17 |
A modular external attack surface mapping tool int... |
2026-07-11 |
| wb |
75 |
10 |
Quickly fetches files from Wayback Machine. |
2026-07-11 |
| legal-bug-bounty |
75 |
21 |
#legalbugbounty project — creating safe harbors ... |
2026-07-01 |
| Hacker-Scoper |
75 |
10 |
CLI tool for filtering URLs/IPs with automatically... |
2026-07-10 |
| monitor-new-subdomain |
74 |
17 |
Subdomain Monitor A production-ready subdomain mon... |
2026-05-20 |
| autopoisoner |
74 |
14 |
Web cache poisoning vulnerability scanner. |
2026-06-23 |
| bugbounty-companion |
73 |
8 |
A BugBounty companion that checks out high-reward ... |
2026-05-18 |
| pwn |
73 |
9 |
PWN is an open security automation framework that ... |
2026-07-10 |
| bugbountydork |
72 |
27 |
Bug Bounty Dork |
2026-07-11 |
| Wordlists |
72 |
8 |
[Custom |
|
| bugbountytips |
71 |
20 |
Webapp to search tips on Twitter through #bugbount... |
2026-07-08 |
| github-dorks |
71 |
17 |
Useful Github Dorks for BugBounty - |
2026-06-28 |
| bugbountybooks |
70 |
16 |
No description |
2026-07-13 |
| Zin |
70 |
26 |
A Payload Injector for bugbounties written in go |
2024-11-29 |
| maltego_transforms |
70 |
17 |
Use the Hacker Target IP Tools API for Reconnaissa... |
2026-07-09 |
| dnsresolver |
70 |
11 |
A Lightning-Fast DNS Resolver written in Rust 🦀 |
2026-05-26 |
| ldapconsole |
70 |
10 |
The ldapconsole script allows you to perform custo... |
2026-07-11 |
| Mephisto |
70 |
13 |
A comprehensive WordPress vulnerability scanner an... |
2026-07-10 |
| chaos |
70 |
8 |
Origin IP scanning utility developed with ChatGPT |
2026-07-11 |
| Bookmarks |
69 |
17 |
Reclaim control of your Burp Suite Repeater tabs w... |
2026-04-16 |
| sublazerwlst |
69 |
22 |
Bundle of wordlists for brute-forcing subdomains (... |
2026-05-14 |
| github-regexp |
69 |
20 |
Basically a regexp over a GitHub search. |
2025-10-04 |
| PentestingChecklist |
69 |
12 |
Comprehensive, data-driven security assessment che... |
2026-07-07 |
| Awesome-Bug-Bounty |
69 |
10 |
This is my personal repo, which includes bug bount... |
2026-06-19 |
| websocket-connection-smuggler |
68 |
13 |
websocket-connection-smuggler |
2026-06-22 |
| Corscan |
68 |
14 |
Advanced CORS Header Checker Tool with Vulnerabi... |
2026-04-23 |
| halive |
68 |
6 |
A fast http and https prober, to check which URLs ... |
2026-03-25 |
| grepaddr |
68 |
16 |
Use grepaddr to extract (grep) all kinds of addres... |
2026-06-20 |
| rate-limit-checker |
67 |
13 |
Check whether the domain has a rate limit enabled. |
2026-06-30 |
| Bug-Bounty-Tools |
67 |
1 |
Your Comprehensive Collection of Bug Bounty Tools ... |
2026-01-21 |
| google-acquisitions |
66 |
8 |
Most of the Google Acquisitions for Bug Bounty Hun... |
2026-05-13 |
| extractify |
66 |
15 |
A tool for extract Endpoints, URLs and Secrets fro... |
2026-06-02 |
| warlusts |
66 |
24 |
If you found this, you are among the truly lucky, ... |
2026-07-07 |
| swaggerHole |
66 |
12 |
A python3 script searching for secret on swaggerhu... |
2026-02-17 |
| BugBountySubdomains |
65 |
15 |
Tools to gather subdomains from Bug Bounty program... |
2025-11-11 |
| BBProfiles |
65 |
25 |
Burp Bounty (Scan Check Builder in BApp Store) is ... |
2026-07-09 |
| BurpSQLTruncSanner |
65 |
22 |
Messy BurpSuite plugin for SQL Truncation vulnerab... |
2026-06-07 |
| same-origin-xss |
65 |
5 |
Same Origin XSS challenge |
2026-07-09 |
| h1-search |
65 |
19 |
Tool that will request the public disclosures on a... |
2026-04-17 |
| mac-cyber-bootstrap |
65 |
5 |
Full macOS bootstrap for cybersecurity, CTF & bug ... |
2026-07-10 |
| fback |
65 |
11 |
Fback is a tool that helps you create target-speci... |
2026-06-25 |
| OSINT-Tools |
65 |
9 |
The OSINT Framework is a powerful collection of to... |
2026-07-11 |
| awesome-bugbounty-mcp |
64 |
8 |
A curated list of MCP servers for bug bounty. |
2026-07-07 |
| rfd-checker |
64 |
19 |
RFD Checker - security CLI tool to test Reflected ... |
2026-02-15 |
| kurl |
64 |
0 |
HTTP Requests for security researchers |
2025-11-19 |
| TTWAF |
64 |
10 |
「🧱�Test a list of payloads and see if you c... |
2026-06-12 |
| dorkScraper |
63 |
15 |
DorkScraper is a simple tool written in Python to ... |
2026-07-09 |
| differer |
63 |
5 |
differer finds how URLs are parsed by different la... |
2026-07-02 |
| badmoodle |
63 |
8 |
Moodle community-based vulnerability scanner |
2026-06-25 |
| dooked |
62 |
28 |
DNS and Target HTTP History Local Storage and Sear... |
2026-06-12 |
| hackliner |
62 |
14 |
HackLiners: CyberSec/BugHunting OneLiners |
2025-12-02 |
| BugBounty |
61 |
11 |
web fuzzing && bug hunter |
2025-09-04 |
| bugbounty_changelogs |
61 |
7 |
No description |
2026-05-28 |
| Chart-Of-Wordlist |
61 |
13 |
Chart-Of-Wordlist helps to create your own custom ... |
2025-12-09 |
| Beginner-Bug-Bounty-Automation |
61 |
9 |
Many script that can be modified according to your... |
2026-03-06 |
| roboxtractor |
60 |
12 |
Extract endpoints marked as disallow in robots fil... |
2026-07-10 |
| aether |
60 |
10 |
AI Smart Contract Security Analysis and PoC Genera... |
2026-07-11 |
| anewer |
60 |
5 |
anewer appends lines from stdin to a file if they ... |
2025-12-03 |
| bounty-targets-alert |
60 |
14 |
It's an watcher for new scopes added to bounty-tar... |
2026-03-22 |
| SSTI-XSS-Finder |
60 |
12 |
XSS Finder Via SSTI |
2026-07-11 |
| nozaki |
60 |
15 |
HTTP fuzzer engine security oriented |
2026-07-09 |
| KrazePlanetTraining |
59 |
21 |
Free BugBounty KrazePlanetTraining |
2026-07-11 |
| BugBountyBlueprint |
59 |
7 |
A tool offering templates for streamlined bug boun... |
2026-07-07 |
| hacks |
59 |
12 |
Build some cyber security tools in Rust 🦀 :ro... |
2026-06-14 |
| bug-bounty-writeup |
59 |
10 |
This repo contains different variants of Bug Bount... |
2026-06-17 |
| XSSearch |
59 |
15 |
XSSearch is a comprehensive reflected XSS tool bui... |
2025-12-09 |
| wp-file-manager-CVE-2020-25213 |
58 |
26 |
https://medium.com/@mansoorr/exploiting-cve-2020-2... |
2026-04-13 |
| smith |
58 |
14 |
Simple wrapper for meg that sieves through meg's o... |
2026-05-19 |
| CVE-2025-53770 |
58 |
4 |
Unauthenticated Remote Code Execution via unsafe d... |
2026-06-16 |
| go-recon |
58 |
9 |
External recon toolkit |
2026-07-11 |
| Bucket-Flaws |
58 |
17 |
Bucket Flaws ( S3 Bucket Mass Scanner ): A Simple ... |
2025-03-05 |
| Sub-Ringan-Framework |
58 |
13 |
Tool for automate bug hunting process ðŸ”� --> ðŸ� |
2026-06-19 |
| continuous-nuclei |
57 |
16 |
Running nuclei Continuously |
2025-07-31 |
| 0x0p1n3r |
57 |
18 |
0x0p1n3r is set of combination of other tools and ... |
2025-01-03 |
| Morgan |
57 |
9 |
Morgan is a powerful tool designed to help securit... |
2026-05-10 |
| Bot-Bounty |
57 |
18 |
Python Script for Telegram Bot is specially built ... |
2026-06-17 |
| CVE-2022-42889-text4shell |
57 |
8 |
Apache commons text - CVE-2022-42889 Text4Shell pr... |
2026-07-11 |
| jsscm |
57 |
8 |
JSSCM detects expired domains for Stored XSS explo... |
2026-04-17 |
| temodar-agent |
57 |
11 |
Temodar Agent is an AI-powered WordPress plugin an... |
2026-07-11 |
| malicious-rMQR-Codes |
57 |
4 |
Collection of (4000+) malicious rMQR Codes for Pen... |
2026-07-09 |
| PandorasBox |
56 |
22 |
Security tool to quickly audit Public Box files an... |
2026-05-02 |
| penetration-testing |
56 |
13 |
Materi memulai penetration testing dari nol berbah... |
2026-07-10 |
| cloudrecon |
56 |
3 |
This script is used to search for cloud certificat... |
2026-07-07 |
| security-mindmap |
56 |
16 |
This repository stores various roadmap(Mindmaps) f... |
2026-06-12 |
| AutoBypassEncryptAndSign |
56 |
9 |
auto decrypt the request ciphertext and auto bypas... |
2026-07-04 |
| Resources |
56 |
11 |
No description |
2026-07-03 |
| gitls |
56 |
9 |
🖇 Enumerate git repository URL from list of URL... |
2026-06-22 |
| safe-harbour |
56 |
10 |
security.txt collection of most popular world-wide... |
2026-02-18 |
| PassMute |
56 |
7 |
PassMute - A multi featured Password Transmutation... |
2026-07-11 |
| gf-patterns |
55 |
18 |
A collection of useful grep patterns and tools by ... |
2026-07-07 |
| grapX |
55 |
22 |
grapX will iterate through the URLs and grep the e... |
2026-05-11 |
| CVE-2023-36845 |
55 |
13 |
Juniper Firewalls CVE-2023-36845 - RCE |
2026-03-10 |
| wsee |
55 |
15 |
A CDN Domain Fronting Tool or Websocket Discovery ... |
2025-12-17 |
| bugbounty-gpt |
54 |
17 |
A helpful gpt-based triage tool for BugCrowd bugbo... |
2026-06-30 |
| My-Methodologies |
54 |
20 |
Tools and methods that I personally use for Recon ... |
2026-07-07 |
| uforall |
54 |
11 |
uforall is a fast url crawler this tool crawl all ... |
2026-07-11 |
| Learn-android-bug-bounty |
54 |
13 |
Documenting all the sources from where I'm learnin... |
2026-07-11 |
| xssrecon |
54 |
10 |
XSSRecon automates the process of testing URL para... |
2026-06-26 |
| GoGitDumper |
53 |
11 |
Dump exposed HTTP .git fast |
2026-06-26 |
| shania |
53 |
17 |
Scan secrets from Continuous Integration Build Log... |
2025-11-10 |
| DeadDNS |
53 |
15 |
DNS hijacking via dead records automation tool |
2025-06-11 |
| open-redirect |
53 |
22 |
Open Redirect Finder. |
2026-07-09 |
| hfinder |
53 |
11 |
Help recon of hostnames from specific ASN or CIDR,... |
2026-02-12 |
| NemesisTools |
53 |
13 |
NemesisTools PowerFull Hacking Tools |
2026-07-11 |
| certina |
53 |
6 |
Certina is an OSINT tool for red teamers and bug h... |
2026-05-06 |
| credcheck |
53 |
6 |
Credentials Checking Framework |
2026-05-06 |
| Beelzebub |
53 |
13 |
Beelzebub all in one Hacking Tools, Shell finder, ... |
2026-07-12 |
| xkeys |
52 |
12 |
Extract Sensitive Keys, Secret, Token Or Intereste... |
2025-12-09 |
| PwnFox-For-Chromium |
52 |
6 |
A BurpSuite extension that allows you to use Chrom... |
2026-07-04 |
| awsEnum |
52 |
7 |
Enumerate AWS cloud resources based on provided cr... |
2026-03-17 |
| Virtual-Host |
52 |
17 |
Modified Nuclei Templates Version to FUZZ Host He... |
2026-02-03 |
| active-ip |
52 |
11 |
🕵��♂�� A tool with several scanning ... |
2026-06-01 |
| Vigilo |
52 |
15 |
An AI hacker for Web3 Smart Contract. for bug boun... |
2026-07-06 |
| google-search |
52 |
9 |
Returns results from Google search. |
2026-05-28 |
| jecretz |
52 |
10 |
Jira Secret Hunter - Helps you find credentials an... |
2026-04-09 |
| js4bugbounty |
51 |
4 |
No description |
2026-06-19 |
| Awesome-Security-Repos |
51 |
10 |
Here's a list of cyber security related github rep... |
2026-06-10 |
| subdog |
51 |
11 |
A powerful subdomain enumeration tool that aggrega... |
2026-07-11 |
| scary-strings |
51 |
5 |
If these strings are in your code, you might have ... |
2026-02-17 |
| BurpMCP |
51 |
2 |
Burp Suite Extension with MCP Server to enhance ma... |
2026-06-30 |
| Pentesting-Resources |
50 |
12 |
Collection of some pentesting and bugbounty resour... |
2026-04-20 |
| bugbounty-Tips-and-Tricks |
50 |
9 |
A curated collection of bug bounty tips, tricks, p... |
2026-07-08 |
| js-finding |
50 |
9 |
JS Finding can be used to extract JavaScript (JS) ... |
2026-07-11 |
| takeover |
50 |
12 |
A tool for testing subdomain takeover possibilitie... |
2026-02-12 |
| Gau-Expose |
50 |
19 |
It grep subdomains, email/username, build custom w... |
2025-12-23 |
| bxss |
50 |
11 |
Alternative to XSS Hunter for blind XSS. |
2026-02-12 |
| url-status-checker |
50 |
12 |
Status Checker is a Python tool for swiftly checki... |
2026-02-25 |
| Ensemble |
50 |
8 |
A Bug Bounty Platform that allows hunters to issue... |
2026-06-17 |
| CertStream-Domains |
50 |
7 |
[Automated |
UpToDate] Daily Dumps of CertStream C... |
| PayloadsAll |
50 |
16 |
A list of useful payloads and bypass for Web Appli... |
2026-02-28 |
| Pentestcheatsheet |
50 |
16 |
A powerful single-file offline OSCP+/OSEP Penetrat... |
2026-07-07 |
| SecToolkit |
50 |
12 |
Welcome SecToolkit repository! This is a comprehen... |
2026-06-08 |
| awesomeBugbounty |
49 |
20 |
No description |
2026-06-30 |
| crlf-injector |
49 |
17 |
A CRLF ( Carriage Return Line Feed ) Injection att... |
2025-08-31 |
| redirex |
49 |
4 |
tool that generates bypasses for open redirects |
2026-07-07 |
| jailbreak |
49 |
18 |
jailbreakme.xyz is an open-source decentralized ap... |
2026-06-26 |
| Nuclei-Community-Templates |
49 |
10 |
A collaborative hub for Nuclei templates. Contribu... |
2026-06-26 |
| robotstester |
48 |
4 |
This Python script can enumerate all URLs present ... |
2026-05-08 |
| Burp-Encode-IP |
48 |
7 |
Burp Suite extension to encode an IP address focus... |
2026-06-18 |
| pathprober |
48 |
5 |
Probe and discover HTTP pathname using brute-force... |
2025-12-09 |
| go-cves |
48 |
2 |
收录goè¯è¨€ç¼–写的项目ã€�框架和组件出 |
2026-03-18 |
| cloudfish |
48 |
7 |
Subdomain enumeration using Cloudflare's scanning ... |
2026-06-06 |
| DNS-Hunt |
48 |
7 |
The DNS Hunt will make your life easier, and of c... |
2026-04-19 |
| bugbounty-agent |
47 |
12 |
Automated bug bounty reconnaissance and scanning a... |
2026-07-11 |
| rec0n |
47 |
7 |
A fully automated subdomain reconnaissance and sen... |
2026-06-13 |
| OpenRediWrecked |
47 |
7 |
A powerful and sophisticated tool for detecting an... |
2026-04-22 |
| ultimate_bughunter_tools |
47 |
10 |
Ultimate Package Of 50 Bug Bounty Hunting Tools |
2026-04-24 |
| WebHackUrls |
47 |
8 |
Simple python OSINT tool for urls recon thanks to ... |
2026-04-20 |
| Black_Viru5_Recon_v1.0 |
47 |
8 |
These Repositories About My Recon Methodology To ... |
2026-06-19 |
| ReconPro |
47 |
4 |
ReconPro is a specialized Google dorking tool desi... |
2026-07-04 |
| rajappan |
47 |
17 |
An All in one Project for Digital Privacy. A step ... |
2026-06-23 |
| BugBoard |
47 |
9 |
Bugboard is a comprehensive open-source cybersecur... |
2026-07-11 |
| originiphunter |
47 |
10 |
A powerful Go tool for finding origin IPs of domai... |
2026-07-09 |
| nuclei_templates |
46 |
14 |
Collection of templates from various resources |
2026-06-17 |
| Exegol-resources |
46 |
20 |
Hacking resources for the Exegol project |
2026-07-11 |
| jsmap |
46 |
4 |
Fetch Javascript sourcemaps, bounty hunter style |
2026-04-19 |
| PCWT |
46 |
15 |
No description |
2025-12-09 |
| s3-buckets-aio-pwn |
46 |
11 |
An AIO Tool to check for Vulnerable Amazon S3 Buck... |
2026-04-22 |
| apkizer |
46 |
8 |
apkizer is a mass downloader for android applicati... |
2025-12-09 |
| BurpCRLFScan |
46 |
2 |
使用java编写的CRLF-Injection-burp被动扫� |
2026-05-25 |
| XSS-Payload |
46 |
11 |
「💉�XSS Payload List |
2026-04-19 |
| BrokenSMTP |
46 |
15 |
Small python script to look for common vulnerabili... |
2026-06-30 |
| crlfi |
45 |
8 |
CRLF Bug scanner for WebPentesters and Bugbounty H... |
2026-04-03 |
| Open-Source-Nuclei-Templates-Downloader |
45 |
11 |
Script that download 37+ open source nuclei templa... |
2025-11-30 |
| bountyRecon |
45 |
15 |
Bash script to automate Bug Bounty Reconnaissance |
2025-12-09 |
| AutomationGuide |
45 |
14 |
Learn how to automate XSS, SSRF, LFI, SQLI, NoSQLi |
2026-04-27 |
| yeswehack_vdp_finder |
45 |
10 |
This extension tells if visited sites have vulnera... |
2026-03-13 |
| waf-stressor |
45 |
9 |
Production-grade Web Application Firewall testing ... |
2026-07-08 |
| webcap |
45 |
5 |
An ultra lightweight web screenshot tool with adva... |
2026-07-09 |
| SQL-Injection-Payloads-List |
45 |
9 |
SQL Injection Payloads List. |
2026-07-10 |
| bugBounty-cheatSheet |
44 |
5 |
https://github.com/EdOverflow |
2026-03-24 |
| owncraft |
44 |
17 |
offensive notes & resources |
2026-06-23 |
| ActionsTOCTOU |
44 |
7 |
Example repository for GitHub Actions Time of Chec... |
2026-07-04 |
| cybersecurity-bug-bounty |
44 |
10 |
An ongoing & curated collection of awesome softwar... |
2026-04-10 |
| Lisbook |
44 |
104 |
Listen. Learn. Interact. Powered by open-source ma... |
2026-07-12 |
| Bounty_Hunter |
43 |
4 |
Herramienta de BugBounty atutomatizada |
2026-07-07 |
| zzl |
43 |
10 |
Zzl is a reconnaissance tool that collects subdoma... |
2026-05-04 |
| Gh0stR3c0n |
43 |
16 |
All in one web Recon app |
2026-04-11 |
| bountyReconV2 |
43 |
9 |
Framework to automate Bug Bounty Reconnaissance |
2025-12-09 |
| zkFuzz |
43 |
4 |
ZK Circuit Fuzzer (IEEE S&P'26) |
2026-07-12 |
| ras-fuzzer |
43 |
15 |
RAS(RAndom Subdomain) Fuzzer |
2026-06-22 |
| enumeraite |
43 |
3 |
AI-Powered Web Attack Surface Enumeration |
2026-07-09 |
| gimmepatz |
43 |
6 |
Personal Access Token (PAT) recon tool for bug bou... |
2026-07-12 |
| ssl_pinning_remover |
43 |
10 |
An Android SSL Pinning Remover tool for Security r... |
2026-06-09 |
| ICU |
43 |
9 |
An Extended, Modulair, Host Discovery Framework |
2026-07-02 |
| accesslist |
43 |
6 |
"ACCESS LIST" Bypass collections used during pent... |
2026-07-03 |
| TeleStrike |
43 |
12 |
TeleStrike is a red team utility designed for adve... |
2026-07-06 |
| SubWalker |
42 |
15 |
Simultaneously execute various subdomain enumerati... |
2025-12-09 |
| open-sesame |
42 |
7 |
A python tool which runs to display random publicl... |
2026-07-02 |
| SQL-INJECTION-PWN |
42 |
10 |
A 1 Liner SQL Injection Attack using SQLMAP and va... |
2026-07-07 |
| SSLEnum |
42 |
6 |
Extract SSL certificate data (Subject Name, Subje... |
2026-07-09 |
| dProgBb |
42 |
14 |
Detect Program Bug Bounty |
2025-12-04 |
| Sandman |
42 |
8 |
A Target Tracking , NoteTaking , CheckLists and Da... |
2025-12-09 |
| AIAuditor |
42 |
11 |
Lightweight BApp that seamlessly integrates powerf... |
2026-07-07 |
| WebExploit |
42 |
6 |
Web Exploit here ! advanced web hacking and hacker... |
2026-06-25 |
| BugBountyTricks |
41 |
10 |
「��Bug Bounty Tricks |
2026-07-07 |
| BugBountyTargets |
41 |
7 |
No description |
2026-06-25 |
| Some-BugBounty-Tips-from-my-Twitter-feed |
41 |
13 |
No description |
2026-06-03 |
| curate |
41 |
12 |
A tool for fetching archived URLs (to be rewritten... |
2026-07-01 |
| endpointdiff |
41 |
5 |
Wrapper around LinkFinder to quickly determine whe... |
2025-02-07 |
| wordlist_generator |
41 |
9 |
Unique wordlist generator of unique wordlists. |
2025-12-09 |
| scancss |
41 |
10 |
automatically crawl every URL and find cross site... |
2025-06-03 |
| grep-backURLs |
41 |
4 |
Automated way to extract juicy info with subfinder... |
2026-03-11 |
| SniffCon-Ultimate-Recon-Dashboard-For-Bug-Bounty-And-Pentesting |
41 |
7 |
Sniffcon has a wide list of powerful online bug bo... |
2026-05-27 |
| haktrailsfree |
41 |
17 |
Get 10k subdomains in securitytrails using cookie ... |
2026-07-11 |
| Domainker |
40 |
17 |
BugBounty Tool |
2025-12-09 |
| BugBountyTemplate |
40 |
11 |
A simple Cherry Tree template that can be used to ... |
2026-02-07 |
| lolcrawler |
40 |
10 |
Headless web crawler for bugbounty and penetration... |
2026-06-07 |
| Dutch_Gov_Scope |
40 |
6 |
Dutch Government Bugbounty scope, subdomains and e... |
2026-07-12 |
| kube-scan |
40 |
12 |
Kubernetes Scanner |
2025-01-14 |
| daily-commonspeak2 |
40 |
12 |
commonspeak2 subdomains wordlist generated daily *... |
2025-12-10 |
| gwdomains |
40 |
10 |
sub domain wild card filtering tool |
2026-02-12 |
| Bug-Bounty-Resources |
40 |
15 |
Dive into a handpicked selection of tools, guides,... |
2026-06-07 |
| gal |
40 |
14 |
Get all possible href |
src |
| Wordlists |
40 |
12 |
A Collection of Wordlists for Penetration Testing |
2026-07-12 |
| ChangeTower |
40 |
7 |
ChangeTower is intended to help you watch changes ... |
2026-06-19 |
| Raven |
40 |
7 |
Raven is a powerful and customizable web crawler w... |
2026-06-01 |
| favicon-hashtrick |
40 |
6 |
Python script implementing the favicon hash trick ... |
2026-04-16 |
| SSRF-Scanner |
40 |
11 |
A Complete SSRF (Server Side Request Forgery) Scan... |
2026-06-28 |
| game.akashblackhat |
40 |
0 |
this app coded by developer = akashblackhat python... |
2025-02-24 |
| ReconNinja |
40 |
8 |
⚡ ReconNinja v9.1.2 — 38-phase recon framework... |
2026-07-07 |
| hacker-checklist |
39 |
16 |
Hacking with the power of checklists. |
2026-02-12 |
| ScanApi |
39 |
19 |
Subdomains-enumeration, subdomain-takeover monitor... |
2026-06-10 |
| Emissary |
39 |
10 |
Send notifications on different channels such as S... |
2024-06-12 |
| Vulnerability-Disclosures |
39 |
8 |
Vulnerability analysis and proof of concepts |
2026-07-12 |
| bughunting-ar |
39 |
11 |
هذا المستودع هي Ù…Øاولة منا Ù... |
2026-04-05 |
| SQL-Injection-Google-Dork-List |
39 |
10 |
Updated 6000 Sql Injection Google Dork 2021 |
2026-05-26 |
| recce |
39 |
9 |
Domain availbility checker |
2025-01-03 |
| sslsearch |
39 |
4 |
Hunt SSL Certificates for interesting keywords on ... |
2026-05-30 |
| omnichron |
39 |
1 |
Unified TypeScript interface for multiple web arch... |
2026-06-24 |
| ppfang |
39 |
0 |
A tool which helps identifying client-side prototy... |
2025-04-17 |
| PostMessage_Fuzz_Tool |
38 |
8 |
#BugBounty #BugBounty Tools #WebDeveloper Tool |
2025-07-01 |
| BugBountyTips |
38 |
9 |
Welcome to the 403 and 401 Bypass Techniques and B... |
2026-06-16 |
| bugbounty |
38 |
4 |
è„†å¼±æ€§å ±å¥¨é‡‘åˆ¶åº¦ã�«é–¢ã�™ã‚‹è©³ç´°æ–‡æ›¸ã‚ |
2026-06-09 |
| BugBounty_Profile |
38 |
8 |
Recon_profile |
2025-09-04 |
| BugBountyTips |
38 |
7 |
记录一些国外æ¼�æ´žèµ�é‡‘çŒŽäººçš„æŒ–æ´žæŠ€å· |
2026-04-17 |
| SuperTruder |
38 |
7 |
A python3 intruder that gave me bounties, easy to ... |
2026-02-06 |
| DI.WE.H |
38 |
4 |
Repositório com conteúdo sobre web hacking em po... |
2026-02-07 |
| AssetViz |
38 |
4 |
AssetViz simplifies the visualization of subdomai... |
2026-06-05 |
| xsschecker |
38 |
8 |
xsschecker tests endpoints for reflected XSS by in... |
2026-05-28 |
| app |
38 |
6 |
🚀 CSRFShark - a utility for manipulating cross-... |
2026-07-02 |
| Bug-Bounty-Tampermonkey-Scripts |
38 |
24 |
No description |
2026-05-31 |
| nucleihub-templates |
38 |
21 |
This repo collects nuclei template from 600+ githu... |
2026-06-01 |
| bugbounty-mcp-server |
37 |
11 |
Comprehensive MCP server for bug bounty hunting an... |
2026-07-12 |
| subfree |
37 |
8 |
Your subdomains are free for the taking - no API k... |
2026-02-14 |
| bounty.sh |
37 |
11 |
simple bash script to earn bounties |
2026-06-05 |
| Do1ng |
37 |
10 |
Do1ng 个人维护的安全知识框架, 包括但 |
2025-03-18 |
| Pentesting |
37 |
12 |
Misc. Public Reports of Penetration Testing and Se... |
2026-03-31 |
| BurpText4ShellScan |
37 |
1 |
Text4Shell的burp被动扫��件 |
2026-07-06 |
| bug-bounty-tips |
37 |
12 |
Our main goal is to share tips from some well-know... |
2026-07-08 |
| Awesome-Bugbounty-Writeups_devanshbatham |
36 |
5 |
No description |
2026-04-27 |
| ScreenShooter |
36 |
13 |
Convert your masscan/subdomain-scan results (80,44... |
2025-12-09 |
| MemBi |
36 |
7 |
All the members of bugbounty and infosec. If you d... |
2026-06-22 |
| hacking_books_collection |
36 |
7 |
A collection of PDF/books about the modern web app... |
2026-07-08 |
| SimpleReconSubdomain |
36 |
7 |
Passive and active subdomain enumeration tool for ... |
2026-07-09 |
| postMessageFinder |
36 |
5 |
No description |
2025-12-09 |
| HackerProxyPro |
36 |
7 |
Burp Suite Proxy Toggler Lite Add-on for Mozilla F... |
2026-05-25 |
| XSS-FINDER |
35 |
12 |
#xss #xssfinder #xss-scanner #bugbounty #hacktool |
2026-05-29 |
| BugBountyStuff |
35 |
9 |
Stuff for bug bounty |
2025-11-06 |
| backbomb |
35 |
8 |
💣 Dockerized penetration-testing/bugbounty/app-... |
2026-07-09 |
| BugBounty-2024 |
35 |
3 |
Start Bug Bounty Hunting & earn some $$$$ |
2025-03-19 |
| ParamFirstCheck |
35 |
12 |
ParamFirstCheck identifies in a list of urls those... |
2026-01-30 |
| BugBounty |
35 |
1 |
No description |
2025-06-06 |
| InfoSec-Alfred |
35 |
6 |
Scrap Latest Information Security Resources |
2026-02-27 |
| bounty-notes |
35 |
13 |
My bug bounty notes |
2026-01-20 |
| about |
35 |
9 |
A central place to keep track of relevant BountyMa... |
2026-05-07 |
| Bug-Hunting-methodologies |
35 |
10 |
this repo contains some public methodologies which... |
2026-07-02 |
| collectvars |
35 |
9 |
collectvars collects JavaScript variables, highlig... |
2026-05-18 |
| ip_widget |
35 |
3 |
Taskbar IP widget for kali linux (or any distro ru... |
2026-03-15 |
| obsidian-ivre-plugin |
35 |
3 |
Grabs data from IVRE and brings it into Obsidian n... |
2026-05-05 |
| SecuSploitX |
35 |
7 |
Sploit -- All-in-one, AI-powered cybersecurity too... |
2026-06-30 |
| substats |
34 |
5 |
Subdomain enumeration statistics and wordlists fro... |
2026-01-20 |
| ScopesExtractor |
34 |
4 |
A tool for monitoring bug bounty programs across m... |
2026-07-06 |
| BBstats |
34 |
9 |
Bug Bounty statistics tool. |
2026-05-05 |
| AdminDirectoryFinder |
34 |
9 |
Admin Directory Finder is a tool designed to scan ... |
2026-07-11 |
| nexss |
34 |
6 |
NeXSS is a modern, self-hosted Blind XSS (Cross-Si... |
2026-06-21 |
| csp-analyzer |
34 |
10 |
Analyze Content-Security-Policy header of a given ... |
2026-06-30 |
| sub-scout |
34 |
5 |
Simple bash Script to automate initial recon using... |
2026-01-27 |
| kicks3 |
34 |
13 |
S3 bucket finder from html,js and bucket misconfig... |
2024-11-28 |
| crystalball |
34 |
2 |
An enchanting 🔮 web screenshot tool for capturi... |
2025-11-12 |
| Orkestra |
34 |
11 |
Web-based Android debugger with inspection capabil... |
2026-05-09 |
| rejig |
34 |
8 |
Turn your VPS into an attack box |
2026-04-17 |
| BypassFuzzer-Burp |
34 |
3 |
The Java Burp Extension version of my BypassFuzzer... |
2026-07-11 |
| tldscan |
34 |
2 |
A high-performance domain scanner that discovers a... |
2026-07-07 |
| bugbounty-cheatsheet |
33 |
11 |
No description |
2025-12-04 |
| BugBountyNotes |
33 |
4 |
简�记录下自己在挖掘SRC |
2026-02-10 |
| pwny.cc |
33 |
8 |
Repository of useful payloads and tips for pentest... |
2026-06-16 |
| jsmap |
33 |
0 |
Fetch Javascript sourcemaps, bounty hunter style b... |
2025-10-31 |
| Subdomain-Enumeration-Guide |
33 |
13 |
This is a comprehensive Subdomain Enumeration Guid... |
2026-04-26 |
| jsmon-cli |
33 |
10 |
Command line interface for Jsmon Security Platform |
2026-07-10 |
| dorker |
33 |
11 |
Better Google Dorking with Dorker. |
2026-05-31 |
| paramx |
33 |
9 |
ParamX is a tool designed to extract and categoriz... |
2026-05-31 |
| deepsec |
33 |
8 |
No description |
2026-06-30 |
| emailextractor |
33 |
8 |
High-speed Go email scraper that crawls sites and ... |
2026-07-07 |
| Barcha |
33 |
5 |
Barcha is your Swiss‑Army knife for SQL Injectio... |
2026-07-04 |
| reconness-agents |
32 |
13 |
Reconness Agents Script |
2026-01-22 |
| Bug_Bounty_List |
32 |
4 |
Day by day Lots of Newbie Come into bug Bounty The... |
2025-07-25 |
| netlas-python |
32 |
6 |
Netlas.io Python SDK & CLI Tool |
2026-07-01 |
| snetra |
32 |
6 |
A Python based scanner uses shodan-internetdb to s... |
2026-04-03 |
| bf_active_sub |
32 |
10 |
Subdomain Bruteforce - Bounty Quick Code |
2026-04-22 |
| Awesome-Security-Resources |
32 |
16 |
Vulnerability Assessment and Penetration Testing T... |
2026-06-12 |
| Bounty-VPS |
32 |
7 |
Bug Bounty Setup Tools On Fresh VPS. This scripts... |
2026-06-30 |
| GoogleDorker |
32 |
5 |
Google Dork Finder is a Python tool designed to fa... |
2026-07-08 |
| Intro-To-Bug-Hunting |
32 |
5 |
I provide educational resources in this repository... |
2026-02-05 |
| Subdomain-Takeover-Checker |
32 |
1 |
A tool for detecting subdomain takeover vulnerabil... |
2026-07-12 |
| SecOps-CLI-Guides |
32 |
8 |
A Collection of penetration testing and Linux admi... |
2026-07-11 |
| Raptor |
32 |
4 |
Passive subdomain enumeration tool with http-probe... |
2025-12-09 |
| BugBountyHunting |
31 |
12 |
Some Tutorials and Things to Help Bug Hunter |
2025-12-28 |
| bugbounty |
31 |
5 |
Grafana Labs bug bounty |
2026-06-05 |
| Facebook-BugBounty-Writeups |
31 |
4 |
Collection of Facebook Bug Bounty Writeups |
2026-05-01 |
| salsa |
31 |
6 |
SALSA 💃⚡ - SALesforce Scanner for Aura (and b... |
2026-05-25 |
| clickjack |
31 |
10 |
An efficient tool To Find click jacking vulnerabil... |
2026-07-12 |
| formatify |
31 |
4 |
Formatify is a Burp Suite extension that instantly... |
2026-03-28 |
| BCheck-Burp-scripts |
31 |
6 |
Bcheck scripts for Burp |
2026-05-27 |
| OffSec-MISC |
31 |
4 |
Offensive Security MISC Annotations and Payloads f... |
2026-06-24 |
| Some-things |
31 |
10 |
Scripts, POCs & bullshit |
2026-06-30 |
| bincache |
31 |
4 |
📦 The Largest Collection of Pre-Compiled Linux ... |
2026-05-04 |
| chiasmodon-mobile |
31 |
2 |
Chiasmodon Mobile - OSINT Tool for Domain Informat... |
2026-07-02 |
| pentesting |
31 |
3 |
CyberSec Resources: FRAMEWORKS & STANDARDS; Pentes... |
2026-04-02 |
| BugBountyWeb3 |
30 |
2 |
BugBounty-Tips |
2026-07-01 |
| BugBounty-2.0 |
30 |
5 |
Modern real world bug bounty payloads and exploita... |
2026-07-04 |
| phpunit-brute |
30 |
19 |
Tool to try multiple paths for PHPunit RCE CVE-201... |
2026-06-01 |
| dom-red |
30 |
7 |
Small script to check a list of domains against op... |
2026-03-31 |
| qsinject |
30 |
8 |
qsinject (Query String Inject) is a tool that allo... |
2024-08-21 |
| simple-oob-scanner |
30 |
7 |
Simple tool to test for SSRF/OOB HTTP Read within ... |
2024-07-23 |
| AutoSubRecon |
30 |
8 |
bash script for automating subdomain enumeration p... |
2026-06-30 |
| CORS-Scanner |
30 |
13 |
No description |
2025-12-09 |
| Godzilla |
30 |
14 |
Godzilla is an automated scanner tool for bug hunt... |
2026-04-08 |
| BypassNinja |
30 |
6 |
Modern Bypass 403 |
2026-06-09 |
| openredscan |
30 |
6 |
Multifunctional open redirection vulnerability sca... |
2026-01-14 |
| nodep |
30 |
4 |
A tool for check available dependency packages acr... |
2026-05-04 |
| AlphaScan |
30 |
4 |
A BurpSuite extension for vulnerability Scanning |
2026-06-05 |
| SearchToolkit |
30 |
8 |
SearchToolkit is advanced collection of tools, har... |
2026-07-08 |
| Burp-Pentest-Coverage-Tracker |
30 |
3 |
Pentest Coverage Tracker is a Burp Suite extension... |
2026-07-07 |
| bugbounty-cicd |
29 |
6 |
A set of Gitlab pipelines and Github workflows to ... |
2026-05-01 |
| db |
29 |
6 |
Bugbounty utility to store list of enumerated subd... |
2025-05-11 |
| bugbounty |
29 |
0 |
Basic tool for Information Gathering 🚀 |
2026-06-12 |
| android-scripts |
29 |
6 |
Some simple scripts that I use during bug bounty h... |
2026-06-19 |
| WhoEnum |
29 |
8 |
Mass querying whois records |
2026-06-14 |
| diffJs |
29 |
13 |
Script for monitoring changes in javascript files ... |
2026-07-02 |
| CorsOne |
29 |
4 |
CorsOne - Advanced CORS Misconfiguration Scanner |
2026-06-23 |
| WDIR |
29 |
3 |
Good resources about web security that I have read... |
2026-06-08 |
| hackguard |
29 |
5 |
FAST WEB APPLICATION VULNERABILITY SCANNER written... |
2026-07-11 |
| nextassets |
29 |
0 |
Bug Hunter/Red Team/Yellow Team/Blue Team/Green Te... |
2026-06-16 |
| bugbounty101 |
28 |
23 |
An entry level resource to learning bug bounty. |
2026-07-08 |
| nuclei-template |
28 |
9 |
My custom created nuclei for SQLi, bugbounty, pent... |
2026-05-14 |
| ORtester |
28 |
10 |
Open Redirect scanner - (out of date) |
2025-12-09 |
| Bugbounty-Reading-Resoureces-blogs-researches-and-writeups |
28 |
4 |
No description |
2026-06-16 |
| ZombieVPN |
28 |
11 |
CVE-2020-12828 PoC and Analysis. |
2025-12-09 |
| oty |
28 |
11 |
Oty is a fast, customizable, CLI tool designed to ... |
2026-01-13 |
| sqlscan |
28 |
10 |
A small and an efficient tool to find SQL injectio... |
2026-02-22 |
| er |
28 |
4 |
� Easy Regex |
2025-11-17 |
| pyxss |
28 |
11 |
Simple XSS vulnerability checker tool very useful ... |
2026-07-11 |
| coolsubh |
28 |
11 |
This Is The Ultimate Bug Bounty Automation & Web H... |
2025-10-12 |
| apk-analyzer |
28 |
6 |
Analyze an APK archive. |
2026-01-09 |
| 4oFour |
28 |
3 |
A tech enumeration toolkit focused on 404 Not foun... |
2026-07-10 |
| Red-Team |
28 |
4 |
Red teaming is an attack technique used in cyber s... |
2026-05-11 |
| bugbounty |
27 |
5 |
No description |
2024-08-12 |
| www-project-top-25-parameters |
27 |
11 |
OWASP Foundation Web Respository |
2026-05-03 |
| ghostrecon |
27 |
6 |
gh0str3con is a All in one cloud based web Recon t... |
2026-07-11 |
| bheh-sub-pwner |
27 |
10 |
This bash script tool, will perform advanced subdo... |
2026-04-22 |
| top-burpsuite-plugins-extensions |
27 |
9 |
No description |
2026-07-09 |
| apiffuf |
27 |
5 |
API URL fuzzer that cross-joins hosts and paths in... |
2026-07-07 |
| BitTraversal |
27 |
4 |
Burpsuite Plugin to detect Directory Traversal vul... |
2025-11-24 |
| CVE-2022-44268 |
27 |
8 |
CVE-2022-44268 ImageMagick Arbitrary File Read - P... |
2026-05-10 |
| OscpCheckList2026 |
27 |
11 |
No description |
2026-07-06 |
| flydns |
27 |
4 |
Related subdomains finder |
2026-05-25 |
| Awesome-Hacking |
116088 |
10512 |
A collection of various awesome lists for hackers,... |
2026-07-13 |
| strix |
40890 |
4314 |
Open-source AI penetration testing tool to find an... |
2026-07-13 |
| h4cker |
28389 |
5269 |
This repository is maintained by Omar Santos (@san... |
2026-07-13 |
| hexstrike-ai |
10278 |
2157 |
HexStrike AI MCP Agents is an advanced MCP server ... |
2026-07-13 |
| HackTools |
6870 |
775 |
The all-in-one browser extension for offensive sec... |
2026-07-12 |
| keyhacks |
6282 |
1223 |
Keyhacks is a repository which shows quick ways in... |
2026-07-11 |
| naabu |
6058 |
693 |
A fast port scanner written in go with a focus on ... |
2026-07-11 |
| awesome-bug-bounty |
5759 |
1061 |
A comprehensive curated list of available Bug Boun... |
2026-07-12 |
| KingOfBugBountyTips |
5455 |
981 |
Our main goal is to share tips from some well-know... |
2026-07-12 |
| axiom |
4404 |
718 |
The dynamic infrastructure framework for everybody... |
2026-07-12 |
| black-hat-rust |
4364 |
434 |
Applied offensive security with Rust - https://ke... |
2026-07-12 |
| afrog |
4336 |
474 |
A Security Tool for Bug Bounty, Pentest and Red Te... |
2026-07-12 |
| bug-bounty-reference |
4223 |
1028 |
Inspired by https://github.com/djadmin/awesome-bug... |
2026-07-12 |
| claude-bug-bounty |
3951 |
698 |
AI-powered bug bounty hunting from your terminal -... |
2026-07-13 |
| bounty-targets-data |
3849 |
664 |
This repo contains hourly-updated data dumps of bu... |
2026-07-13 |
| Awesome-OSINT-List |
3696 |
485 |
📡 Comprehensive collection of OSINT tools for c... |
2026-07-13 |
| pentestagent |
2775 |
556 |
PentestAgent is an AI agent framework for black-bo... |
2026-07-12 |
| FBI-tools |
2563 |
369 |
🕵� OSINT Tools for gathering information and ... |
2026-07-12 |
| BurpSuite-For-Pentester |
2553 |
509 |
This cheatsheet is built for the Bug Bounty Hunter... |
2026-07-12 |
| sn0int |
2479 |
222 |
Semi-automatic OSINT framework and package manager |
2026-07-11 |
| Bug-Bounty-Beginner-Roadmap |
2391 |
310 |
This is a resource factory for anyone looking forw... |
2026-07-12 |
| dnsReaper |
2210 |
194 |
dnsReaper - subdomain takeover tool for attackers,... |
2026-07-12 |
| Gpt-Agreement-Payment |
2144 |
11 |
ChatGPT Plus/Team/Pro 订阅å��议端到端é‡�放å... |
2026-07-12 |
| collection-document |
2110 |
508 |
Collection of quality safety articles. Awesome art... |
2026-07-11 |
| Pentest-Swarm-AI |
2037 |
401 |
Autonomous penetration testing using a swarm of AI... |
2026-07-12 |
| bug-bounty-dorks |
2026 |
491 |
List of Google Dorks for sites that have responsib... |
2026-07-12 |
| pentest-ai-agents |
1983 |
388 |
Turn Claude Code into your offensive security rese... |
2026-07-12 |
| Bug-bounty |
1944 |
593 |
Ressources for bug bounty hunting |
2026-07-12 |
| Claude-OSINT |
1932 |
371 |
Two paired Claude skills · 90+ recon modules · 4... |
2026-07-13 |
| BBTz |
1902 |
470 |
BBT - Bug Bounty Tools (examples💡) |
2026-07-11 |
| google-dorks-bug-bounty |
1879 |
270 |
A list of Google Dorks for Bug Bounty, Web Applica... |
2026-07-07 |
| Bug-Bounty-Roadmaps |
1716 |
294 |
Bug Bounty Roadmaps |
2026-07-12 |
| awesome-google-vrp-writeups |
1634 |
275 |
� A list of writeups from the Google VRP Bug Bo... |
2026-07-11 |
| dumpall |
1582 |
152 |
一款信�泄�利用工具，适用于.git/.sv |
2026-07-11 |
| clairvoyance |
1492 |
134 |
Obtain GraphQL API schema even if the introspectio... |
2026-07-10 |
| First-Bounty |
1395 |
158 |
A complete, beginner-friendly bug bounty roadmap t... |
2026-07-12 |
| cook |
1361 |
141 |
A wordlist framework to fullfill your kinks with y... |
2026-07-02 |
| v3-periphery |
1330 |
1248 |
🦄 🦄 🦄 Peripheral smart contracts for inte... |
2026-07-11 |
| pentest-ai |
1277 |
249 |
Offensive-security MCP server with 205 wrapped too... |
2026-07-12 |
| Immunefi-bug-bounty-writeups-list |
1202 |
143 |
curation of all(most) immunefi bug bounty writeups... |
2026-07-12 |
| CyberStrike |
1189 |
194 |
AI-powered offensive security agent with 7,300+ ac... |
2026-07-13 |
| diodb |
1073 |
327 |
Open-source vulnerability disclosure and bug bount... |
2026-07-12 |
| bug-bounty-platforms |
1070 |
210 |
A community-powered collection of all known bug bo... |
2026-07-12 |
| sublert |
1034 |
165 |
Sublert is a security and reconnaissance tool whic... |
2026-07-10 |
| resolvers |
1023 |
113 |
The most exhaustive list of reliable DNS resolvers... |
2026-07-12 |
| reconmap |
939 |
134 |
Reconmap is a collaboration-first security operati... |
2026-07-11 |
| offensive-bookmarks |
924 |
69 |
A collection of bookmarks for penetration testers,... |
2026-07-11 |
| wpprobe |
920 |
119 |
A fast WordPress plugin enumeration tool |
2026-07-13 |
| SwiftnessX |
915 |
128 |
A cross-platform note-taking & target-tracking app... |
2026-06-25 |
| sectemplates |
910 |
128 |
Open source templates you can use to bootstrap you... |
2026-07-11 |
| DataSurgeon |
903 |
72 |
Quickly Extracts IP's, Email Addresses, Hashes, F... |
2026-07-09 |
| study-bug-bounty |
901 |
107 |
Beginner Guide to Bug Hunting |
2026-07-11 |
| penetration-testing-cheat-sheet |
832 |
167 |
Work in progress... |
2026-07-12 |
| vigolium |
776 |
120 |
Vigolium - High-fidelity vulnerability scanner fus... |
2026-07-12 |
| pentest-agents |
759 |
151 |
Bug bounty agent framework for Claude Code, Codex,... |
2026-07-12 |
| InjuredAndroid |
757 |
163 |
A vulnerable Android application that shows simple... |
2026-07-11 |
| recon-skills |
744 |
140 |
162 offensive security skills for recon and pentes... |
2026-07-12 |
| AllForOne |
738 |
111 |
AllForOne allows bug bounty hunters and security ... |
2026-07-11 |
| pentest |
729 |
105 |
Pentesting and Bug Bounty Notes, Cheetsheets and G... |
2026-07-11 |
| xalgorix |
728 |
128 |
Autonomous AI pentesting agents — real-time reco... |
2026-07-13 |
| bounty-targets |
718 |
130 |
This project crawls bug bounty platform scopes (li... |
2026-07-07 |
| chatgpt-prompts-bug-bounty |
711 |
100 |
ChatGPT Prompts for Bug Bounty & Pentesting |
2026-07-11 |
| xurlfind3r |
707 |
78 |
A command-line utility designed to discover URLs f... |
2026-07-11 |
| vajra |
703 |
159 |
Vajra is a highly customizable target and scope ba... |
2026-06-14 |
| My-CyberSecurity-Store |
700 |
196 |
This repository contains a comprehensive collectio... |
2026-07-13 |
| ars0n-framework-v2 |
676 |
144 |
Bug Bounty Hunting Framework Designed to Help Begi... |
2026-07-10 |
| ars0n-framework |
669 |
147 |
A Modern Framework for Bug Bounty Hunting |
2026-07-13 |
| goop |
653 |
54 |
Yet another tool to dump a git repository from a w... |
2026-07-11 |
| bbrf-client |
647 |
88 |
The Bug Bounty Reconnaissance Framework (BBRF) can... |
2026-07-09 |
| Bug-Bounty-Wordlists |
634 |
122 |
No description |
2026-07-11 |
| aztec-v1 |
632 |
103 |
Public repository for the AZTEC V1 protocol. For t... |
2026-06-11 |
| KEV |
612 |
43 |
Ostorlab KEV: One-command to detect most remotely ... |
2026-06-19 |
| revsuit |
564 |
69 |
RevSuit is a flexible and powerful reverse connect... |
2026-07-11 |
| rustbuster |
559 |
64 |
A Comprehensive Web Fuzzer and Content Discovery T... |
2026-07-07 |
| wifi-penetration-testing-cheat-sheet |
547 |
88 |
Work in progress... |
2026-07-11 |
| src-hunter-skill |
546 |
70 |
实战 SRC / 众测 / Bug bounty �洞挖掘 Clau... |
2026-07-12 |
| awesome-rtc-hacking |
545 |
52 |
a list of awesome resources related to security an... |
2026-07-09 |
| WebHackingTools |
541 |
105 |
Automatically install some web hacking/bug bounty ... |
2026-07-13 |
| BCHackTool |
531 |
88 |
🔥 Professional Penetration Testing Framework v4... |
2026-07-06 |
| JShunter |
528 |
59 |
jshunter is a command-line tool designed for analy... |
2026-07-12 |
| rekono |
526 |
80 |
Pentesting automation platform that combines hacki... |
2026-07-11 |
| cheat-sheets |
520 |
61 |
A list of cheat sheets for application security |
2026-07-11 |
| god-eye |
513 |
70 |
AI-powered subdomain enumeration tool with local L... |
2026-07-11 |
| nahamsec.training |
485 |
105 |
The labs for my Udemy course (https://www.udemy.co... |
2026-07-08 |
| android-penetration-testing-cheat-sheet |
484 |
75 |
Work in progress... |
2026-07-04 |
| xss_vibes |
481 |
86 |
A modern tool written in Python that automates you... |
2026-07-11 |
| sessionprobe |
464 |
37 |
SessionProbe is a multi-threaded tool designed for... |
2026-07-11 |
| Bug-Bounty-Hunting-Methodology-2025 |
463 |
101 |
Bug Bounty Methodology 2025: Tools, techniques, an... |
2026-07-10 |
| DirDar |
453 |
94 |
DirDar is a tool that searches for (403-Forbidden)... |
2026-05-26 |
| Payloader |
440 |
112 |
渗�测试Payload速查平� |
Pentest Payload ... |
| subcat |
424 |
54 |
Lightning-fast subdomain discovery tool for securi... |
2026-07-11 |
| numasec |
419 |
49 |
The AI Agent for Cyber Security. |
2026-07-10 |
| ios-penetration-testing-cheat-sheet |
418 |
79 |
Work in progress... |
2026-07-12 |
| hysp |
412 |
7 |
📦 An independent package manager that every hac... |
2026-06-27 |
| communitytools |
406 |
73 |
Open-source Claude Code skills, agents, and slash ... |
2026-07-11 |
| chomp-scan |
397 |
69 |
A scripted pipeline of tools to streamline the bug... |
2026-02-12 |
| mantishack |
382 |
63 |
Mantis Hack |
2026-07-12 |
| image-upload-exploits |
355 |
85 |
This repository contains various media files for k... |
2026-06-16 |
| bbrf-server |
335 |
50 |
The Bug Bounty Reconnaissance Framework (BBRF) can... |
2026-06-12 |
| awesome-skills-security |
332 |
57 |
Security testing toolkit for AI Agent: curated Sec... |
2026-07-11 |
| SecArchive |
326 |
59 |
🥷 SecArchive - Cybersecurity Resource Collectio... |
2026-07-03 |
| h1-brain |
325 |
46 |
MCP server that connects AI assistants to HackerOn... |
2026-07-11 |
| SILENTCHAIN |
324 |
85 |
AI-powered vulnerability scanner extension for Bur... |
2026-07-11 |
| handbook |
318 |
49 |
A living document for penetration testing and offe... |
2026-06-08 |
| flounder |
310 |
50 |
Autonomous white-hat security auditor for AI-drive... |
2026-07-12 |
| Subdominator |
310 |
28 |
The Internets #1 Subdomain Takeover Tool |
2026-07-01 |
| powershell-reverse-tcp |
300 |
65 |
PowerShell scripts for communicating with a remote... |
2026-07-10 |
| SRCMS |
299 |
159 |
SRCMS�业应急�应与缺陷管�系统 |
2026-05-29 |
| Bug_Bounty_Notes |
289 |
96 |
A collection of notes for bug bounty hunting |
2026-07-03 |
| crt.sh |
283 |
39 |
Crtsh Subdomain Enumeration |
This bash script mak... |
| Facebook-Bug-Bounty-Write-ups |
277 |
48 |
Hunting Bugs for Fun and Profit |
2026-05-28 |
| huntr |
275 |
87 |
Public Roadmap |
huntr.dev |
| bug-bounty |
266 |
55 |
TON security bug bounty description |
2026-07-11 |
| mySapAdventures |
258 |
74 |
A quick methodology on testing / hacking SAP Appli... |
2026-06-15 |
| forbidden |
257 |
48 |
Bypass 4xx HTTP response status codes and more. Th... |
2026-06-13 |
| Automated-Scanner |
254 |
52 |
Trying to make automated recon for bug bounties |
2026-07-03 |
| Drana-Infinity |
251 |
48 |
Drana-Infinity is a locally hosted advanced AI ass... |
2026-07-12 |
| BugTrace-AI |
251 |
51 |
[ARCHIVED] Evolved into BugTraceAI v2 — github.c... |
2026-07-11 |
| dorky |
247 |
18 |
A tool to quickly do keyword searches over Gitlab ... |
2026-04-30 |
| Bug-Bounty-Methodology |
244 |
42 |
No description |
2026-07-08 |
| dorkscout |
244 |
29 |
DorkScout - Golang tool to automate google dork sc... |
2026-05-09 |
| WebHeckScanner |
243 |
48 |
A hacking tool for bug bounties. Sharing and modif... |
2026-04-17 |
| hawkeye |
242 |
42 |
Hawkeye filesystem analysis tool |
2025-12-20 |
| bug-bounty |
241 |
804 |
No description |
2026-07-12 |
| bug-bounty-standards |
238 |
14 |
A list of edge cases that occur in bug bounty prog... |
2026-07-11 |
| nox-framework |
238 |
32 |
High-performance OSINT/CTI framework for automated... |
2026-07-11 |
| vscodium-rust |
231 |
46 |
AI-native IDE with agentic workflows, iPhone emula... |
2026-07-11 |
| rustchain-bounties |
229 |
356 |
Earn RTC crypto by contributing to the RustChain e... |
2026-07-13 |
| AutoAR |
225 |
51 |
AutoAR is an automated security reconnaissance too... |
2026-07-10 |
| bounty-monitor |
224 |
48 |
Leverage certificate transparency live feed to mon... |
2026-05-06 |
| viewstamped-replication-made-famous |
220 |
13 |
A $20k consensus challenge based on TigerBeetle's ... |
2026-06-18 |
| pidrila |
220 |
27 |
Python Interactive Deepweb-oriented Rapid Intellig... |
2026-06-09 |
| bug-bounty-village-defcon32-workshop |
219 |
50 |
The repo contains all the the notes, slides, and s... |
2026-07-10 |
| Wa3r-OffSec-Kit |
217 |
37 |
� Offensive security knowledge base — 50+ doc... |
2026-07-07 |
| goaltdns |
213 |
29 |
A permutation generation tool written in golang |
2026-06-18 |
| secops-mcp |
203 |
33 |
All-in-one security testing toolbox that brings to... |
2026-07-06 |
| bug-bounty-labs |
202 |
63 |
All the labs in this repository simulate real worl... |
2026-07-03 |
| public-skills-builder |
202 |
44 |
Generate Claude Code bug bounty skills from public... |
2026-07-11 |
| bash_scripting |
195 |
65 |
bash scripting thing! |
2026-06-30 |
| TotalPass |
194 |
15 |
Default password scanner. 默认密ç �扫æ��器 |
2026-04-23 |
| aiscan |
190 |
20 |
AI-driven pi-like agent for cyber security — sin... |
2026-07-13 |
| Comp_Sci_Sem_2 |
190 |
40 |
According to all known laws of aviation, there is ... |
2026-07-11 |
| xssorRecon |
188 |
58 |
Automate Recon XSS Bug Bounty |
2026-07-11 |
| audits |
183 |
41 |
Audits performed by Solidified |
2026-07-08 |
| fucking-Awesome-Hacking |
183 |
20 |
A collection of various awesome lists for hackers,... |
2026-07-12 |
| scammy-bbp |
177 |
22 |
Self-hosted bug bounty programs that are "scammy" ... |
2026-06-30 |
| firebaseExploiter |
177 |
18 |
FirebaseExploiter is a vulnerability discovery too... |
2026-05-01 |
| secrets-ninja |
176 |
23 |
Secrets Ninja is an GUI tool for validating & inve... |
2026-07-10 |
| Magic-CheckList-for-Web-Applications |
175 |
65 |
Web Security Checklist (Bug Bounty & Pentesting) |
2026-06-13 |
| PoC_CVEs |
172 |
23 |
PoC_CVEs |
2026-07-04 |
| merklemap-cli |
166 |
9 |
Discover and enumerate all subdomains associated w... |
2026-07-08 |
| bounty-challenge |
163 |
32 |
[�] bounty-challenge incentivizes bug discovery... |
2026-07-10 |
| Past-Audit-Competitions |
159 |
30 |
Bug reports from Immunefi Bounty Boosts |
2026-07-05 |
| Clickjacking-Tester |
159 |
61 |
A python script designed to check if the website i... |
2026-06-30 |
| Arsenal |
157 |
22 |
Offline-first, searchable arsenal for pentesting &... |
2026-07-12 |
| KALI-CMDs |
156 |
38 |
"Essential Kali Linux commands for ethical hackers... |
2026-07-04 |
| GAE-RCE |
153 |
20 |
Google App Engine - Remote Code Execution bug ($36... |
2026-05-26 |
| Hexstrike-redteam |
153 |
43 |
AI-powered MCP penetration testing framework com... |
2026-07-11 |
| pathbuster |
152 |
15 |
A path-normalization pentesting tool. |
2026-07-07 |
| BugHunterMethodology |
151 |
40 |
A comprehensive bug bounty methodology compiled fr... |
2026-07-05 |
| subtake |
150 |
29 |
Automatic finder for subdomains vulnerable to take... |
2026-03-07 |
| react2shell-ultimate |
150 |
31 |
React2Shell Ultimate - The most comprehensive CVE-... |
2026-07-07 |
| not-your-average-web-crawler |
149 |
36 |
A web crawler (for bug hunting) that gathers more ... |
2025-12-09 |
| SQL_Injection-Techniques |
147 |
83 |
Advanced SQL Injection Techniques for Bug Bounty H... |
2026-07-12 |
| malware-apk |
146 |
40 |
As a bug hunter, are your bug bounty reports getti... |
2026-07-10 |
| google-hacking-assistant |
146 |
8 |
ðŸ”� Chromeæ‰©å±•ï¼Œä¸ºå®‰å…¨ç ”ç©¶å’Œæ¸—é€�测试... |
2026-06-25 |
| Bug-Hunting |
143 |
22 |
The aim of this Reposiotry is to Provide the Resou... |
2026-06-17 |
| bountyforge |
142 |
13 |
All-round bug bounty skill for Claude Code parall... |
2026-07-13 |
| bug-bounty-101 |
138 |
33 |
Happy Hunting |
2025-09-18 |
| BurpMCP-Ultra |
138 |
17 |
AI-powered MCP server for Burp Suite Professional ... |
2026-07-11 |
| Security-Guide |
135 |
36 |
Capture The Flag |
HackTheBox |
| Bug-Bounty |
133 |
27 |
Here Are Some Bug Bounty Resource From Twitter |
2026-07-08 |
| Ecommerce-Website-Security-CheckList |
133 |
28 |
List of considerations for commerce site auditing ... |
2026-06-05 |
| cloud_osint |
133 |
19 |
�� Curated Cloud OSINT resources — dorks, to... |
2026-07-08 |
| legion |
128 |
24 |
Scrappy assistant that automates web3 bug hunting ... |
2026-07-07 |
| Beetlebug |
127 |
23 |
Beetlebug is an open source insecure Android appli... |
2026-07-12 |
| public-reports |
126 |
41 |
bug bounty disclosed reports |
2026-07-12 |
| bugz-tools |
125 |
43 |
A collection of tools I wrote for bug bounty or ha... |
2026-05-21 |
| evil-twin |
125 |
15 |
Learn how to set up a fake authentication web page... |
2026-07-04 |
| nyxstrike |
124 |
31 |
AI Powered penetration testing Platform for offens... |
2026-07-11 |
| mach |
121 |
5 |
Mach is a fast, reliable, and extensible web fuzzi... |
2026-07-12 |
| xsubfind3r |
120 |
9 |
A command-line utility designed to discover subdom... |
2026-07-03 |
| collection-web3-bug-bounty |
119 |
12 |
No description |
2026-07-07 |
| noxen |
119 |
14 |
Android interception tool for component communicat... |
2026-07-12 |
| Bug-Bounty-Automation |
118 |
36 |
No description |
2026-06-15 |
| RECON-GHOST |
116 |
3 |
A powerful Bash-based automated reconnaissance too... |
2026-07-12 |
| Offensive-Pentesting-Web |
114 |
53 |
A proper approach to pentest a Web application wit... |
2026-07-05 |
| bug-bounty-guide |
112 |
29 |
No description |
2026-07-06 |
| xcrawl3r |
111 |
8 |
A command-line utility designed to recursively spi... |
2026-07-11 |
| Bug-Bounty-Wordlists |
108 |
30 |
This repository contains some of the most exhausti... |
2026-07-11 |
| facebook-bug-bounty-writeups |
107 |
26 |
Facebook Bug Bounties |
2026-06-20 |
| awesome-bug-bounty-tips |
107 |
16 |
A curated list of amazingly bug bounty tips from s... |
2026-05-06 |
| reconic |
107 |
5 |
A Powerful Network Reconnaissance Tool for Securit... |
2026-03-20 |
| awesome-infosec |
107 |
23 |
A curated list of awesome infosec blog posts, cour... |
2026-06-23 |
| amass-tools |
106 |
26 |
OWASP Amass data source scripts (assetfinder, find... |
2026-07-08 |
| AspGoat |
106 |
90 |
AspGoat is an intentionally vulnerable ASP.NET Cor... |
2026-07-08 |
| web3-bug-bounty-hunting-ai-skills |
105 |
28 |
18 Claude Code skill files for smart contract secu... |
2026-07-12 |
| GG-Dorking |
103 |
18 |
GG Dorking is a tool to generate GitHub and Google... |
2026-05-06 |
| Payloads |
101 |
20 |
Payload for bug bounty |
2026-07-10 |
| BrokenLinkHijacker |
101 |
14 |
A Fast Broken Link Hijacker Tool written in Python |
2026-04-13 |
| Keye |
100 |
33 |
Keye is a reconnaissance tool that was written in ... |
2026-05-13 |
| favicon_hash_shodan |
99 |
17 |
Calculate a site's favicon hash (MMH3) and pivot t... |
2026-07-03 |
| ai_osint |
99 |
13 |
🤖 Curated AI OSINT resources — Google dorks, ... |
2026-07-11 |
| practical-bug-bounty |
98 |
8 |
A Django web application for curating Bug Bounty e... |
2026-05-18 |
| CopyMyWrite |
98 |
18 |
Abusing DDMA alongside Copy On Write for Cross Pro... |
2026-07-12 |
| sectracker |
97 |
19 |
A Modern Bug Bounty and Security Research Manageme... |
2026-01-19 |
| mildew |
96 |
20 |
Dotmil subdomain discovery tool that scrapes domai... |
2026-06-08 |
| secbutler |
95 |
10 |
The perfect butler for pentesters, bug-bounty hunt... |
2026-06-18 |
| Immunefi-Bug-Bounty-Programs-Unofficial |
93 |
13 |
Every time a Bug Bounty Program in Immunefi modifi... |
2026-07-11 |
| cloud |
93 |
16 |
Monitoring the Cloud Landscape |
2026-07-08 |
| stalker |
91 |
6 |
Red Kite, the Extensible Attack Surface Management... |
2026-04-25 |
| RedteamAgent |
91 |
19 |
An AI red-team agent for authorized labs and web a... |
2026-07-10 |
| hacker-bob |
90 |
14 |
Claude Code bug bounty agent. Install in current w... |
2026-07-12 |
| exp0s3d |
89 |
17 |
Maximize your bug bounty hunting efficiency with e... |
2026-07-12 |
| onaws |
89 |
11 |
Fetch the details of assets hosted on AWS. |
2026-07-02 |
| orgs-data |
88 |
22 |
Mapping from bug bounty and vulnerability disclosu... |
2026-07-11 |
| Hunting-Tips |
86 |
18 |
Tips For Bug Bounty Hunters |
2025-09-04 |
| in-class-project-2 |
85 |
37 |
According to all known laws of aviation, there... |
2026-07-05 |
| keylogger |
84 |
33 |
Windows OS keylogger with a hook mechanism (i.e. w... |
2026-04-19 |
| gho-bug-bounty |
83 |
21 |
No description |
2025-09-04 |
| SourceCodeReview |
82 |
19 |
Source Code Review resources for Bug Bounty Hunter... |
2026-06-26 |
| Bug-Bounty-Dorks-And-Platforms |
81 |
39 |
This are some Dorks and Platform to find the Bug B... |
2026-07-08 |
| Bug-Bounty-Resources |
81 |
19 |
Bug-Bounty Resources and Articles |
2026-03-16 |
| awesome-blockchain-bug-bounty |
80 |
14 |
A comprehensive curated list of available Blockcha... |
2026-04-10 |
| Bug-Bounty-Beginner-Roadmap |
80 |
4 |
This repository is a curated resource for aspiring... |
2026-06-30 |
| TIKTOK-SSL-Pinning-Bypass |
79 |
8 |
Bypass TikTok SSL/TLS certificate pinning on Andro... |
2026-07-12 |
| Security-Books |
78 |
22 |
🛡� The Ultimate Cybersecurity Library |
160+ ... |
| Awesome-SRC-experience |
78 |
9 |
🚀 现代化 SRC æ¼�洞挖掘与安全攻防实æ |
2026-07-10 |
| One-Liner-OSINT |
77 |
21 |
One Liner OSINT is a collection of powerful one-li... |
2026-07-11 |
| WaspSting |
76 |
18 |
Tool to assist bug bounty hunters |
2026-06-30 |
| actarus |
75 |
24 |
Actarus is a custom tool for bug bounty |
2026-06-01 |
| Layla |
75 |
18 |
[EN] BETA: Layla - recon tool for bug bounty |
2026-07-07 |
| bounty-domains |
75 |
27 |
List of domains in scope for bug bounties (HackerO... |
2026-05-28 |
| 50-Days-Of-SQLi |
75 |
16 |
Learning and hunting SQL injection bugs for 50 con... |
2026-02-13 |
| hackerone-bug-bounty-reports |
71 |
23 |
Complete collection of bug bounty reports from Hac... |
2026-07-11 |
| Facebook-Bug-Bounty-Writeups |
71 |
9 |
No description |
2026-05-25 |
| Workflow-Bug-Bounty |
70 |
22 |
My Tools For Bug Bounty |
2026-04-05 |
| Bug-Bounty-Hunting-Methodology-2026 |
70 |
9 |
Welcome to the Bug Bounty Methodology 2026 Edition... |
2026-07-11 |
| dioterms |
70 |
8 |
Open-source vulnerability disclosure policy templa... |
2026-07-08 |
| Bug-Bounty-Roadmap |
69 |
5 |
Best Bug Bounty Roadmap for 2026 |
2026-07-11 |
| java-reverse-tcp |
68 |
13 |
JAR, Java, and JSP shells that work on Linux OS, m... |
2026-06-23 |
| OctoScan |
66 |
13 |
A versatile CLI tool orchestrating pentest tools f... |
2026-07-07 |
| daf |
66 |
9 |
Daily activity feed of bug fixes and code changes ... |
2026-05-23 |
| BB-Tips |
65 |
21 |
Collection of Bug Bounty Tips |
2026-06-15 |
| bug-bounty |
63 |
23 |
Repo for tracking bugs in bounty and WorkChain.io ... |
2025-09-04 |
| Burp_Suite-Antigravity_AI-Bug_Bounty_Hunter |
63 |
10 |
Burp_Suite-Antigravity_AI-Bug_Bounty_Hunter |
2026-07-07 |
| URILoot |
63 |
11 |
URILoot is a browser extension designed for Bug Bo... |
2026-06-26 |
| security_whitepapers |
62 |
159 |
Collection of misc IT Security related whitepapers... |
2025-10-31 |
| bug-bounty-resources |
61 |
18 |
Resources I consider useful for security research ... |
2025-12-28 |
| bug-reaper |
61 |
9 |
Web2 bug bounty Agent Skill — evidence-based, no... |
2026-07-08 |
| 365 |
61 |
9 |
BlueTeam, RedTeam, Bug bounty, CTI, OSINT, Threat ... |
2026-07-12 |
| ex-param |
61 |
14 |
ex-param is an automated tool designed for finding... |
2026-06-10 |
| awesome-molt-ecosystem |
61 |
27 |
The brutally honest map of where AI-agent money ac... |
2026-07-06 |
| hackerone_wordlist |
60 |
62 |
The wordlists that have been compiled using disclo... |
2026-03-04 |
| HuntTheBug |
60 |
17 |
Advanced reconnaissance framework for bug bounty h... |
2026-05-06 |
| Pinakastra |
60 |
7 |
AI-powered pentesting framework with automated rec... |
2026-07-07 |
| Parshu |
60 |
9 |
Filter URLs to save your time. |
2025-04-17 |
| Meta-Owned-IT-Assets |
60 |
9 |
Curated list of Meta (formerly Facebook) owned IT ... |
2026-06-11 |
| keysec-hunter---Chrome-extension |
60 |
9 |
KeySec Hunter is a Chrome extension that scans... |
2026-06-11 |
| notes |
59 |
16 |
Bug Bounty & Other Stuff |
2026-05-11 |
| LibreOffice_Tips_Bug_Bounty |
59 |
7 |
Some tips for Bug Bounty using LibreOffice |
2026-05-20 |
| ShoLister |
59 |
19 |
ShoLister is a tool that collects all available su... |
2026-07-03 |
| Threatswarm |
59 |
15 |
27 scope-enforced AI agents that run the full pent... |
2026-07-09 |
| bug-bounty-testing-essential-guideline-startup-bug-hunters |
58 |
17 |
Bug Bounty Testing Essential Guideline : Startup B... |
2026-06-19 |
| Wordlist-for-Bug-Bounty |
58 |
10 |
I collected it to help the bug hunter get a reward |
2026-06-10 |
| SSRFmap |
56 |
18 |
Simple Server Side Request Forgery services enumer... |
2026-01-07 |
| JWTLens |
55 |
9 |
JWTLens - Burp Suite extension for automated JWT s... |
2026-06-30 |
| bug-bounty |
54 |
12 |
STON.FI Bug Bounty program |
2026-07-08 |
| phantom-ethical-redteam |
53 |
14 |
An autonomous agent that acts as a DEF CON-level C... |
2026-07-05 |
| CyberDeck |
53 |
7 |
Hackers Cookbook - Tons of hacker cli recipes read... |
2026-07-12 |
| Recon-tools |
52 |
17 |
Some of my bug bounty tools |
2025-09-04 |
| bughunter-ai |
52 |
19 |
Autonomous Bug Bounty Hunting Framework powered by... |
2026-07-10 |
| awesome-repos |
51 |
5 |
Repositories, Links, Payloads, Blogs, Tools, etc..... |
2026-07-05 |
| Bugzee |
50 |
12 |
Simple Script to install recommended Bug Bounty Hu... |
2025-12-27 |
| xforwardy |
50 |
14 |
Host Header Injection Scanner |
2026-01-17 |
| xss-catcher |
50 |
7 |
Simple API for storing all incoming XSS requests a... |
2026-07-11 |
| Awesome-Hacking |
50 |
8 |
� Welcome to Hack-Academia, your ultimate resou... |
2026-06-02 |
| Bug_Bounty_Reports |
49 |
11 |
Summary of almost all paid bounty reports on H1 |
2026-07-12 |
| OhMyBounty |
49 |
13 |
Active monitoring bug bounty programs tool |
2026-06-08 |
| DIR-WORDLISTS |
48 |
17 |
Some wordlists collected form github to all bug bo... |
2026-07-06 |
| mastermind-bug-bounty |
48 |
5 |
Autonomous offensive security orchestration skill ... |
2026-07-12 |
| bounty_tools |
48 |
13 |
Various tools for managing bug bounty recon and ex... |
2025-11-28 |
| ClickjackPoc |
48 |
9 |
Seamlessly Detect and Construct Exploit POCs for C... |
2026-01-31 |
| Bug-Bounty-Resources |
47 |
16 |
No description |
2026-06-06 |
| Discovery-Header-Bug-Bounty |
47 |
18 |
Discovery Header Bug Bounty to DoD |
2026-07-08 |
| bash-hacks |
47 |
17 |
Handy bash and python scripts for bug bounty hunti... |
2025-10-27 |
| JWTXposer |
47 |
15 |
An advanced JWT extraction & decoding tool for bug... |
2026-07-11 |
| trusty-bbp |
47 |
2 |
Legitimate bug bounty programs value ethical pract... |
2026-06-30 |
| n8n-for-bug-bounty |
46 |
9 |
n8n workflows related to bug bounty |
2026-07-07 |
| 100DaysofBugBounty |
46 |
5 |
No description |
2026-07-09 |
| ethereum-bounty-hunters |
46 |
1 |
Repository dedicated to listing current bug bounty... |
2023-10-11 |
| recon-automation |
46 |
15 |
This script will install all the essential bug bou... |
2026-07-01 |
| bug-bounty |
45 |
11 |
bounty collection |
2026-05-28 |
| sublist3rV2 |
45 |
8 |
Fast subdomains enumeration tool for penetration t... |
2026-07-01 |
| Beemovie |
45 |
9 |
Bee Movie script for educational purposes only, an... |
2026-07-09 |
| bug-bounty |
44 |
13 |
Documenting my security research journey: This rep... |
2026-07-07 |
| leaklens |
44 |
4 |
Bug bounty focused JavaScript security analysis fo... |
2026-07-11 |
| awesome-bug-bounty |
43 |
20 |
No description |
2025-12-29 |
| MonMon |
43 |
8 |
Monitoring Monster (MonMon) is a monitoring tool f... |
2026-07-12 |
| xpfarm |
43 |
43 |
Free XP on bug bounty, vulnerability scanning by w... |
2026-05-21 |
| waybackshot |
43 |
5 |
(CLI wrapper) Takes a list of URLs and retrieve sc... |
2026-04-16 |
| Bug-Bounty-Script |
42 |
18 |
Bug-hunting Automation |
2026-05-10 |
| researchlab |
42 |
9 |
Spec-driven bug bounty writeups and real world se... |
2026-07-07 |
| vilicus |
42 |
10 |
Bug bounty API dashboard aggregating data from Hac... |
2026-06-07 |
| ChatGTP3-Prompts_Bug-Bounty |
42 |
2 |
A list of ChatGPT Prompts for Web Application Secu... |
2026-06-12 |
| ronin-recon |
42 |
10 |
A micro-framework and tool for performing reconnai... |
2026-06-06 |
| fastbugbounty |
41 |
11 |
Fast Bug Bounty Script |
2026-07-11 |
| Bug-Bounty-Search-Engine.io |
41 |
10 |
� Bug Bounty Search Engine - Advanced reconnais... |
2026-07-07 |
| crypto-audits |
41 |
23 |
A mapping for open source cryptocurrency, blockcha... |
2026-03-28 |
| webripper-pro |
41 |
9 |
Webripper Pro is a comprehensive, professional-gra... |
2026-05-27 |
| darkbuster |
41 |
1 |
Advanced Web Directory & File Bruteforcer with Upd... |
2026-07-10 |
| Bug_Bounty_Web_and_API_Tools |
40 |
15 |
Bug Bounty Web and API Payloads |
2026-05-02 |
| AI-Bug-Bounty |
40 |
9 |
A Development of AI to automate bug bounty |
2026-06-11 |
| paragon |
40 |
4 |
A web based checklist driven note taking app follo... |
2026-02-18 |
| PwnTraverse |
40 |
22 |
PwnTraverse, An advanced path traversal & endpoint... |
2026-06-28 |
| Hardware-Hacking-Tools |
40 |
3 |
Lists various tools used in hardware hacking. |
2026-07-11 |
| Oneliner-Bug-Bounty-Collection |
39 |
8 |
Oneliner Bug Bounty Collection collected from GitH... |
2026-07-10 |
| Hands-On-Bug-Hunting-for-Penetration-Testers |
39 |
21 |
Hands-On Bug Bounty for Penetration Testers, publi... |
2026-06-24 |
| Watch-Tower |
39 |
8 |
Simple Python Script for Tracking Bug Bounty Progr... |
2026-06-01 |
| ugly-scripts |
39 |
9 |
A collection of scripts for bug-bounty related stu... |
2025-08-03 |
| h1-asset-fetcher |
39 |
10 |
Fetch, download, and decompile Android/iOS/Exe ass... |
2026-07-07 |
| Kali-Linux-Configuration |
39 |
18 |
Comprehensive guide to configuring Kali Linux, a D... |
2026-07-08 |
| Burp-Suite-Obsidian-Integration |
39 |
4 |
Organize, track, and share vulnerability findings ... |
2026-03-30 |
| saas_enum |
39 |
5 |
Command-line tool for discovering SaaS platforms a... |
2026-07-07 |
| Roadmap |
38 |
7 |
Bug Bounty Roadmap |
2026-06-30 |
| recon-scripts |
38 |
6 |
A simple reconnaissance framework for bug bounty h... |
2026-07-01 |
| cook-ingredients |
38 |
10 |
The largest collection of wordlists in yaml for bu... |
2026-06-01 |
| BBSSRF |
38 |
9 |
BBSSRF - Bug Bounty SSRF is a powerful tool to che... |
2024-07-21 |
| audits |
38 |
2 |
Contest submissions and bug bounties |
2026-07-03 |
| cybermind |
38 |
5 |
âš¡ AI-powered cybersecurity CLI tool for Kali Lin... |
2026-06-06 |
| intel-codex |
38 |
6 |
Comprehensive operational knowledge base: OSINT, f... |
2026-07-09 |
| ShubhamWebScript-Website-vulnerability-Checker |
38 |
13 |
Find any website vulnerability and bugs in few sec... |
2026-06-29 |
| Bug-Bounty |
37 |
12 |
Bug Bounty Resources from Scratch to start Hunting... |
2026-04-11 |
| WonderSuite-Ai-Bug-Bounty |
37 |
6 |
AI-Powered Offensive Security Research Engine - de... |
2026-07-04 |
| Anvil |
37 |
4 |
Anvil is a runtime-first attack surface assessment... |
2026-06-22 |
| find-cve-agent |
37 |
6 |
CVE hunting harness for Claude Code - 20 skills, 5... |
2026-07-09 |
| solana-security-standard |
36 |
5 |
Solana's SOL-0XX security standard — bug-class r... |
2026-07-07 |
| HTTPCustomHouse |
36 |
4 |
HTTP request smuggling attack helper/CLI tools to ... |
2026-05-27 |
| CyberInject |
36 |
5 |
A comprehensive browser extension designed for aut... |
2026-07-10 |
| Bug-Bounty-Recon |
35 |
10 |
All The Notes And Tips I FOund In Github And Twitt... |
2025-05-30 |
| 100DaysofBugBounty |
35 |
6 |
It's collection of my learning during 100 days . |
2025-02-21 |
| VulneraMCP |
35 |
9 |
An AI-Powered Bug Bounty Hunting Platform - Compre... |
2026-07-10 |
| immunefi-terminal |
35 |
4 |
A datasette dashboard and source code downloader f... |
2026-06-01 |
| mongobleed-scanner |
35 |
5 |
MongoDB CVE-2025-14847 Heap Memory Leak Scanner |
... |
| Web-Scraper |
35 |
13 |
Web Scraper is a melange of Web tools for web hack... |
2026-07-11 |
| github-scanner-local |
35 |
17 |
Locally scan all the repositories of a github orga... |
2026-04-25 |
| 1ndi-hacks |
34 |
8 |
Bug Bounty Tools |
2025-04-01 |
| Bug_Bounty-Google_Dorks |
34 |
6 |
List of Google dorks to find VDPs and Bug Bounty P... |
2026-06-30 |
| OWASPBugBounty |
34 |
27 |
This is a container of web applications that work ... |
2026-01-07 |
| B00t2R00t |
34 |
9 |
A penetration testing Swiss Army Knife that's suit... |
2026-07-01 |
| coli |
34 |
10 |
COLI (Command Orchestration & Logic Interface) –... |
2026-06-21 |
| gh_scanner |
34 |
4 |
GH Scanner Tool is written in Python3 and designed... |
2025-04-21 |
| hackerone-tracker |
34 |
6 |
Track HackerOne reports and leaderboard changes on... |
2026-03-01 |
| ApiBrute |
34 |
3 |
An async API bruteforcer. it is a fast, lightweigh... |
2026-06-19 |
| haxtools |
34 |
1 |
A highly customised CTF, bounty hunting & penetrat... |
2026-02-12 |
| getting-started |
33 |
5 |
Getting started in bug bounty! |
2025-08-04 |
| ai-cyber-agent |
33 |
8 |
AI-powered cyber security scanner for red team ope... |
2026-07-03 |
| ecdsaPredictableNonce |
33 |
6 |
Ethereum Bug Bounty Submission: Breaking ecdsa tha... |
2026-02-11 |
| NextRecon |
33 |
3 |
Advanced Recon tool for Bug Bounty and Pentesting |
2026-05-26 |
| ibb |
33 |
6 |
Is like jq for Immunefi REST API. Search, filter a... |
2026-05-26 |
| PathFinder |
33 |
8 |
PathFinder - Advanced path traversal and directory... |
2026-06-29 |
| phishing-mobile-app |
33 |
19 |
Phishing mobile application made in React Native f... |
2026-05-30 |
| brs-xss |
33 |
5 |
MIT license BRS-XSS is a modular Python CLI scanne... |
2026-06-11 |
| osint-mcp-server |
33 |
7 |
OSINT intelligence MCP server for AI agents — 37... |
2026-07-09 |
| chad |
33 |
5 |
Search Google Dorks like Chad. / Broken link hijac... |
2026-07-01 |
| For-Bug-Bounty-Hunter- |
32 |
16 |
README.md |
2026-05-06 |
| bug-bounty-dorks |
32 |
9 |
List of Google Dorks for sites that have responsib... |
2025-01-26 |
| Bug-Bounty-Tips |
32 |
9 |
I will share my bug bounty tips here |
2025-02-01 |
| Bug-Bounty-RoadMap |
32 |
10 |
Bug Bounty Methodology-slides by Muhammad M. Awali... |
2026-07-08 |
| Bug-Bounty-Tips-Collection |
32 |
6 |
A collection of Bug Bounty Tips collected from Git... |
2026-04-20 |
| telegram_bbbot |
32 |
5 |
Telegram Bug Bounty Bot |
2025-01-21 |
| Wildfire-Toolkit |
32 |
9 |
A collection of automation scripts for bug bounty ... |
2026-01-23 |
| bountymeter |
32 |
3 |
[BASH] Bounty Meter is a command-line utility tool... |
2026-02-12 |
| filter-var-sqli |
32 |
1 |
Bypassing FILTER_SANITIZE_EMAIL & FILTER_VALIDATE_... |
2025-02-20 |
| PenScope |
32 |
2 |
Passive recon & attack surface mapper — zero req... |
2026-06-16 |
| Bug-Bounty-Search-Engine |
31 |
29 |
No description |
2026-07-12 |
| Bug_bounty_Notes |
31 |
14 |
No description |
2026-06-16 |
| pentest-toolkit |
31 |
9 |
GitHub - therealilyas/pentest-toolkit: PentestKit ... |
2026-07-07 |
| aws-s3-bucket-wordlist |
31 |
17 |
Most common AWS S3 bucket names. |
2026-05-14 |
| ghmon |
31 |
7 |
Automated GitHub secret scanning with smart alerti... |
2026-04-13 |
| fire |
31 |
2 |
Take domains on stdin and output them on stdout if... |
2026-05-23 |
| cybersec |
31 |
11 |
CyberSecurity Resources and Tools |
2026-06-22 |
| hackgpt |
31 |
0 |
HackGPT is a collective one place resource project... |
2026-04-04 |
| Function |
31 |
12 |
According to all known laws of aviation, there is ... |
2026-06-09 |
| BetterBugBounty |
30 |
12 |
BetterBugBounty - Here tools are classic, bugs are... |
2026-03-20 |
| Bug-Bounty-Dorks |
30 |
10 |
No description |
2024-12-06 |
| bountycatchremix |
30 |
9 |
Bug bounty domain manager with validation, exports... |
2026-03-25 |
| Tools |
30 |
6 |
🛠� This repository is continuously updated wi... |
2026-07-12 |
| HackerGPT-Plasmoid |
30 |
4 |
HackerGPT Plasmoid is a KDE Plasma plasmoid that p... |
2026-07-12 |
| Vulnshop |
30 |
0 |
Web Application Pentesting Lab with over 40 plus v... |
2026-07-04 |
| Bug-Bounty-Scripts |
29 |
8 |
Script for Bug Bounty |
2025-06-13 |
| Bug-Bounty-Page |
29 |
8 |
A repo to make our changes more transparent to bug... |
2023-01-28 |
| h1-asset-fetcher |
29 |
5 |
Tools for bug bounty |
2025-10-27 |
| beta |
29 |
21 |
Pre-release of Liquity Protocol smart contracts, i... |
2025-09-12 |
| PenHunter |
29 |
6 |
Pen Hunter is a comprehensive vulnerability scanni... |
2026-07-12 |
| penetration-testing-notes |
29 |
8 |
this my repo with notes i take in penetration test... |
2026-04-15 |
| Awesome-Hacking-Learning-Path |
29 |
7 |
A comprehensive hacking learning path covering Pen... |
2026-07-06 |
| Recon |
28 |
11 |
Bug Bounty Recon Tools |
2026-06-15 |
| Bug-Bounty-Checklist |
28 |
7 |
No description |
2026-05-11 |
| OpenBugBounty-Scrapper |
28 |
6 |
This script scrapes the list of open Bug Bounty Pr... |
2026-01-16 |
| AEGIS_RED_HORIZON |
28 |
9 |
Plataforma Automatizada de RedTeam y Bug Bounty |
2026-07-12 |
| greaper |
28 |
4 |
Bug Bounty ultimate tool |
2026-06-28 |
| findbbprograms |
28 |
10 |
Check if domain has bug bounty program or not |
2025-06-26 |
| Bug-Bounty-Methodology |
28 |
3 |
No description |
2026-07-11 |
| raymond |
28 |
2 |
Rayomd is a gathering information Framework for pe... |
2025-12-09 |
| AI-Pentest-Playbook |
28 |
11 |
🛡 The reference playbook for pentesting AI chat... |
2026-07-04 |
| ReconForge |
28 |
2 |
No description |
2026-07-10 |
| webdojo |
28 |
5 |
A learning and testing environment for web applica... |
2026-03-24 |
| claude-code-deepseek |
27 |
5 |
Run Claude Code CLI with DeepSeek API — cheap hi... |
2026-06-13 |
| Bug-bounty-methodology |
27 |
1 |
No description |
2025-10-08 |
| HTB-certifiedCBBH |
27 |
4 |
# HTB-certified-bug-bounty-hunter-exam-cheetsheet ... |
2026-03-15 |
| claude-ai-cyber-security-skills |
27 |
4 |
30 Claude Code Skills + 60+ integrated tools for H... |
2026-06-26 |
| Fuzzout |
27 |
4 |
Every Hacker's Go to Fuzzing List. Introducing the... |
2026-06-22 |
| cybersec-toolkit |
27 |
4 |
One command installs 580+ security tools on Linux ... |
2026-07-11 |
| Kali-Linux-Complete-Setup |
27 |
4 |
Step-by-step guide to install, configure, and hard... |
2026-06-17 |
| Ai-Prompts |
27 |
5 |
🧾 |
Use these AI prompts to refine your searche... |
| Bug-Bounty-Platforms |
26 |
7 |
Bug Bounty Platforms |
2025-10-01 |
| Bug-Bounty-Roadmaps-Collection |
26 |
6 |
No description |
2026-06-19 |
| bug-bounty-tools |
26 |
5 |
A BASH Script to automate the installation of the ... |
2026-06-28 |
| WordPress-BugBounty |
26 |
4 |
It serves as a practical guide for security resear... |
2026-07-07 |
| recon-raven |
26 |
8 |
Reconnaissance tool of Penetration test & Bug Boun... |
2026-06-22 |
| Clear-Sky |
26 |
9 |
Bug Bounty Recon Automation Script -- Scan AWS IP ... |
2026-04-13 |
| Needle |
26 |
10 |
Instant access to you bug bounty submission dashbo... |
2026-02-09 |
| writeups |
26 |
1 |
My CTF & Bug Bounty writups |
2023-03-23 |
| golang_bug_hunting |
26 |
1 |
Live for Go hackers (bug bounty) |
2026-05-02 |
| subdomainator |
26 |
4 |
Stay on top of new domains! Bug bounty hunters can... |
2025-02-12 |
| gotld |
26 |
1 |
Command-line tool to enumerate top-level domains, ... |
2024-09-25 |
| Cascavel |
26 |
4 |
� Cascavel — The zero-friction offensive secu... |
2026-07-10 |
| RayScan |
26 |
1 |
RayScan 2.0 — 开箱å�³ç”¨çš„ Web æ¼�洞扫æ��å™... |
2026-07-12 |
| Practical-Bug-Bounty-Hunting-for-Hackers-and-Pentesters |
25 |
7 |
Practical Bug Bounty Hunting for Hackers and Pente... |
2026-06-26 |
| pentest-scripts |
25 |
10 |
Compilation of scripts/tools (made by me or not) t... |
2026-03-28 |
| Sling-Shot-R3con |
25 |
5 |
🚀 Sling Shot R3con: Automate Your Bug Bounty an... |
2025-05-19 |
| KeysKit |
25 |
5 |
An opensource tool built to help bug bounty hunter... |
2026-04-10 |
| BurpJSReconRadar |
25 |
5 |
Burp Suite extension for passive JS reconnaissance... |
2026-06-26 |
| BadGPT |
25 |
0 |
BadGPT is a robust framework designed to simplify ... |
2026-05-10 |
| Math-Quiz |
25 |
13 |
According to all known laws of aviation, there is ... |
2026-07-12 |
| secrets |
24 |
12 |
Offsec Pentest and Bug Bounty Notes |
2026-02-12 |
| bug-bounty |
24 |
4 |
No description |
2025-08-07 |
| log4shell-looker |
24 |
3 |
log4jshell vulnerability scanner for bug bounty |
2026-02-26 |
| BugBountyTips |
24 |
2 |
BugBountyTips en Español |
2026-07-11 |
| BladeRecon |
24 |
5 |
Intelligence-driven reconnaissance framework for b... |
2026-07-11 |
| Bugbounty-VPS-config |
24 |
6 |
My Ubuntu 22.04 VPS general configs and scripts I ... |
2026-04-15 |
| bugbounty-monitor-bot |
24 |
4 |
A basic Bug Bounty target monitoring tool based on... |
2026-04-15 |
| urlx |
24 |
1 |
Multi-source URL discovery & live host probing for... |
2026-07-04 |
| semgrep-rules |
24 |
4 |
My custom semgrep rules |
2026-06-17 |
| Security-Engineer-Toolkit |
24 |
3 |
An all-in-one repository for setting up a new VM w... |
2026-06-14 |
| kali-dockerized |
24 |
6 |
Kali Linux in Docker + Ubuntu 22.04 in Docker for ... |
2025-07-25 |
| subtron |
24 |
3 |
Subtron is a professional grade subdomain enumerat... |
2026-02-14 |
| android-ssl-pinning-bypass |
24 |
1 |
Android SSL Pinning Bypass |
2026-06-10 |
| dns-exfiltrator |
24 |
8 |
Exfiltrate data with DNS queries. Based on CertUti... |
2026-05-25 |
| pentesting-cyber-mcp |
24 |
12 |
� 50+ MCP Security Servers for AI-Powered Pente... |
2026-07-11 |
| wordpress-plugins |
24 |
7 |
Scrape all wordpress plugins (updates every 6 hour... |
2026-07-13 |
| Bug-Bounty-Oneliners |
23 |
16 |
Oneliners curated from my experience and from the ... |
2025-09-04 |
| Pavan-BugBounty-PlayBook |
23 |
9 |
A BugBounty playbook covering vulnerability bypass... |
2026-04-18 |
| Wordlist |
23 |
8 |
Wordlists for Bug Bounty |
2025-10-14 |
| verylazytech.github.io |
23 |
7 |
Google Dorks for Bug Bounty |
2026-05-20 |
| bug_bounty_tools |
23 |
6 |
This project is to install some tools to help me a... |
2026-03-24 |
| Bug-Bounty-Resources |
23 |
6 |
Write-ups of All types Bugs |
2026-05-28 |
| BugBountySkills |
23 |
5 |
An obsessive, expert-tier knowledge base + AI skil... |
2026-07-10 |
| norske-bug-bounty-program |
23 |
5 |
List over kjente norske bug bounty-program 🇳🇠|
2025-12-26 |
| Bug-Bounty-Free-Resources |
23 |
4 |
Elevate your bug bounty game with our treasure tro... |
2026-04-15 |
| HackerOne-Disclosed-Reports |
23 |
13 |
A structured, auto-updating archive of disclosed H... |
2026-07-13 |
| ars0n-framework-v2-scan-data |
23 |
4 |
A repo to store public scan data for my bug bounty... |
2026-04-12 |
| hackfruit |
23 |
10 |
Hackfruit is an easy search tool that finds hackin... |
2025-08-03 |
| Explorer |
23 |
6 |
Explorer is a very useful tool which will help you... |
2025-03-03 |
| dark_wxlf |
23 |
7 |
bug bounty automation with 4-phase workflow: passi... |
2026-07-01 |
| webstrike-framework |
23 |
3 |
WebStrike — automated web-pentesting framework t... |
2026-06-24 |
| DomXssFinder |
23 |
3 |
Find sources and sinks in js code that could lead... |
2026-01-21 |
| crivo |
23 |
2 |
A tool for extracting and filtering URLs, IPs, dom... |
2026-07-01 |
| this-ones-for-you-my-retalyation.-also-haha-arrow-game-lolol |
23 |
0 |
According to all known laws of aviation, there is ... |
2026-06-21 |
| Cheat-for-common-bugs-for-Bug-Bounty-Hunting |
22 |
12 |
No description |
2026-07-11 |
| yahoo-subdomains |
22 |
11 |
Yahoo subdomains for bug bounty |
2024-07-07 |
| bugbounty_n8n_workflow |
22 |
5 |
Automating Bug Bounty with n8n |
2026-05-28 |
| HackerOneAlchemy |
22 |
5 |
A tool to generate statistics and help manage bug ... |
2025-01-06 |
| bug-bounty |
22 |
0 |
No description |
2026-07-09 |
| LeetSec-Tools |
22 |
4 |
Automated, aggressive reconnaissance engine for Bu... |
2026-07-11 |
| d0rk1ng |
22 |
1 |
The Complete Guide to Dorking for Bug Bounty Hunte... |
2026-06-11 |
| Go-Tools-for-BBH |
22 |
7 |
This Repo help you to download most helpful GO too... |
2025-10-23 |
| claude-security-research-skill |
22 |
2 |
AI-powered security research assistant for Claude ... |
2026-07-04 |
| faraday_bugbounty |
21 |
9 |
Faraday Workspaces for Bug Bounties |
2025-03-31 |
| BugSquasher |
21 |
7 |
BugSquasher Bug Bounty Tools List |
2026-03-18 |
| Bug-Bounty---Important-Books |
21 |
5 |
Bug Bounty - Important Books |
2026-03-10 |
| Bug_Bounty-POC |
21 |
5 |
keep reading and hunting |
2026-06-26 |
| web-recon |
21 |
6 |
Web application recon for bug bounty |
2025-12-31 |
| 1ndiwordlist |
21 |
5 |
Bug Bounty Recon wordlist Generator |
2025-04-01 |
| bug_bounty_tweets |
21 |
4 |
No description |
2025-01-26 |
| security-arsenal |
21 |
5 |
Security pentesting/devsecops/bug bounty/Cloud etc... |
2026-04-23 |
| blog |
21 |
4 |
CTF and Bug Bounty Hunting WriteUps. |
2026-06-08 |
| cryptokitties-bounty-2 |
21 |
4 |
Bug bounty program for CryptoKitties Offers featur... |
2026-05-18 |
| claude-code-bb |
21 |
8 |
CLAUDE.md configs and skills I use for bug bounty ... |
2026-07-12 |
| google-dork-generator |
21 |
4 |
Handy Collection of Google Dorks for Bug Bounty Hu... |
2026-02-24 |
| inscope |
21 |
1 |
Quickly filter in-scope domains & urls for bug bou... |
2026-07-09 |
| jsrip |
21 |
2 |
Crawl and analyze JavaScript for secrets, tokens, ... |
2026-07-01 |
| nuclei-templates-initial-access |
21 |
5 |
A standalone collection of widely used technologie... |
2026-07-11 |
| bugbounty |
21 |
5 |
Hey there! Welcome to my collection of bug bounty ... |
2026-06-19 |
| pler |
21 |
5 |
Pler - Domain Probe and Cloudflare Filter Tool. Pl... |
2026-06-07 |
| HuntersEye |
21 |
2 |
HuntersEye is designed for Bug Bounty Hunters, and... |
2025-12-13 |
| arsenal |
21 |
6 |
Tools for bug hunting in a container |
2025-12-09 |
| InstaRecon |
21 |
9 |
� Professional Instagram OSINT tool for penetra... |
2026-07-11 |
| resolvers |
21 |
8 |
List of Fresh DNS resolvers updates every 1 hour |
2026-07-13 |
| pvreplace |
21 |
4 |
A powerful URL parameter and request fuzzing tool ... |
2026-05-24 |
| crossjoin |
21 |
2 |
Generate a cross join, also known as a Cartesian p... |
2026-06-06 |
| cert-x-gen |
21 |
0 |
Polyglot execution engine and CLI for vulnerabilit... |
2026-07-01 |
| bucky |
21 |
0 |
An S3 account ID enumeration and bucket discovery ... |
2026-04-08 |
| BugBountyKit |
20 |
10 |
Ferramenta Profissional de Bug Bounty em Bash |
2026-07-10 |
| BugBounty-Dorks |
20 |
8 |
Highly recommended dorks for bug bounty |
2026-06-01 |
| Bug-Bounty-GitBook |
20 |
10 |
Biscuit's Bug Bounty Playbook is a curated hub for... |
2026-07-08 |
| vulysisBugBounty |
20 |
7 |
No description |
2025-08-03 |
| Bug-Bounty-Dorks-Vulns |
20 |
8 |
No description |
2026-07-11 |
| Proviesec-Bug-Bounty-Dorking-Site-PBBDS |
20 |
6 |
This page should help you with the recon for secur... |
2025-12-09 |
| monitor.sh |
20 |
6 |
Continuous Reconnaissance and Vulnerability Scanni... |
2026-04-29 |
| A-Comprehensive-Bug-Bounty-Roadmap- |
20 |
4 |
No description |
2026-05-30 |
| eth-neg-value-tx |
20 |
5 |
Ethereum Bug Bounty Submission: Sending Negative V... |
2026-03-31 |
| bug-bounty-wall-of-shame.github.io |
20 |
4 |
No description |
2026-05-23 |
| Offensive-Recon |
20 |
17 |
Passive Reconnaissance Techniques Approach helps f... |
2026-02-26 |
| serverspy |
20 |
8 |
Full-stack server fingerprinting tool for bug boun... |
2026-04-02 |
| pentestgod |
20 |
5 |
A collection of everything I learn while working a... |
2026-03-06 |
| jsmon-go |
20 |
0 |
JavaScript Change Monitor for Bug Bounty Hunting -... |
2026-01-09 |
| Active-Defense-Tracing-Tool |
20 |
3 |
帮助苦逼溯æº�人员快速分æž�和追踪å�¯ç– |
2026-04-24 |
| ewe |
20 |
6 |
EWE (Execution Workflow Engine) - Execute tasks in... |
2026-06-07 |
| isXSS-Burp |
20 |
2 |
Passively check for XSS character encodings |
2026-05-28 |
| Elite-Google-Dorks-Search-by-Biscuit |
20 |
8 |
Discover hidden information on the web with "Elite... |
2026-03-15 |
| cloud_data |
20 |
7 |
Get some useful data from Clouds for your targets |
2026-07-12 |
| PortPilot |
20 |
2 |
High performance, distributed port scanner for mos... |
2026-04-10 |
| subdomainx |
20 |
1 |
all-in-one subdomain enumeration and reconnaissanc... |
2026-07-10 |
| tts-buy-bug-bounty |
19 |
11 |
Solicitation and acquisition documents created for... |
2023-01-28 |
| learn-100 |
19 |
9 |
Cool resources and content for bug bounty hunting. |
2024-10-24 |
| attack-tools |
19 |
13 |
A set of tools, procedures, and playbooks for perf... |
2026-06-17 |
| awesome-bug-bounty |
19 |
3 |
A curated list of resources, tools, and wordlists ... |
2026-07-10 |
| BugBounty |
19 |
2 |
Cheat Sheets, Metodologies etc. |
2024-12-15 |
| craxify |
19 |
6 |
Craxify Automated Reconnaissance Framework for Bug... |
2025-10-05 |
| bounty-brain |
19 |
4 |
Bug bounty methodology, checklists, and hunting no... |
2026-07-12 |
| bbradar.io |
19 |
2 |
A web tool to aggregate the latest publicly listed... |
2026-07-12 |
| bugbounty-toolkit |
19 |
8 |
A curated collection of essential tools and script... |
2026-06-02 |
| security-writeups |
19 |
2 |
A curated collection of my security research and b... |
2026-07-02 |
| qping |
19 |
14 |
qping: qping is simple python tool for finding bun... |
2026-06-30 |
| GoldMine |
19 |
1 |
AI-powered tool designed to help security professi... |
2026-05-17 |
| vasuki |
19 |
8 |
An automation tool that scans sub-domains, sub-dom... |
2026-02-26 |
| gosqli |
19 |
5 |
gosqli is a fast and simple tool for detecting bli... |
2026-07-08 |
| ios-26-activation-research |
19 |
0 |
iOS 26.3 activation lock research -- 31 firmware v... |
2026-07-11 |
| BugBountyData |
18 |
8 |
List of Public Bug Bounty and Responsible Disclosu... |
2026-07-03 |
| aztec-2-bug-bounty |
18 |
8 |
No description |
2026-05-22 |
| recon-boot.sh |
18 |
5 |
Script for Reconnaissance(Bug Bounty) |
2025-03-19 |
| One-Liner |
18 |
11 |
Do bug hunting with One-Line script and get bounty |
2025-11-10 |
| bug-bounty-tips |
18 |
4 |
No description |
2026-07-03 |
| github-dorks-for-bug-bounty-hunters |
18 |
6 |
A collection of GitHub dorks for bug bounty hunter... |
2025-02-05 |
| recon |
18 |
3 |
Bug Bounty Recon Script |
2024-03-23 |
| BountyHound |
18 |
5 |
Monitors and curates bug-bounty related repositori... |
2026-07-06 |
| ShadowEnum |
18 |
8 |
ReconRoyale challenges, bug bounty experiments, an... |
2026-05-04 |
| The-ULTIMATE-Bug-Bounty-Dork |
18 |
2 |
Ultimate Google Dork Collection for Bug Bounty Hu... |
2026-02-15 |
| web3-sec-ai-prompts |
18 |
5 |
AI prompts for web3 security researchers — bug b... |
2026-07-06 |
| My-Mind-Maps |
18 |
5 |
Mind map for certifcation, vulnerability finding a... |
2026-05-18 |
| bugbounty |
18 |
1 |
this files only for bug bounty tools AtoZ |
2026-06-19 |
| claude-code-pentest |
18 |
5 |
6 Claude Code skills that automate the entire pent... |
2026-07-09 |
| Hexstrike-AI |
18 |
8 |
HexStrike AI MCP Agents is an advanced MCP server ... |
2026-07-11 |
| penstaller |
18 |
4 |
Penstaller: A Python tool to automate the installa... |
2026-04-18 |
| CTF-challenge |
18 |
0 |
An attempt to unite CTF players and bug bounty hun... |
2022-05-25 |
| domainExtractor |
18 |
10 |
Extract domains/subdomains/FQDNs from files and UR... |
2026-07-07 |
| socialfinder |
18 |
5 |
Hunt down social media accounts by username across... |
2026-06-28 |
| Hikvision-City-Hunter |
18 |
1 |
This tool is a modern evolution of older PoCs like... |
2026-07-07 |
| cryptocat-gitbook |
18 |
4 |
OLD repo for my GitBook (CTF writeups / vuln resea... |
2026-04-05 |
| hacker101-CTF-Solutions |
18 |
6 |
Comprehensive walkthroughs and solutions for Hacke... |
2026-06-04 |
| NameScraper |
18 |
3 |
A Selenium scraper for public domain search tools. |
2025-10-06 |
| CyberElite |
18 |
4 |
� Welcome to Hack-Academia — your go-to desti... |
2026-07-05 |
| file-scraper |
18 |
3 |
Scrape files for sensitive information, and genera... |
2026-05-18 |
| yentra |
18 |
3 |
Burp Suite extension + port-based highlighter: ded... |
2026-07-07 |
| VISTA |
18 |
2 |
🎯 VISTA — AI-Powered Security Testing Assista... |
2026-07-12 |
| GoatOS |
18 |
1 |
� GoatOS - A lightweight Linux distribution foc... |
2026-05-26 |
| Krypton |
18 |
6 |
Ethereum has brought us tools like Smart Contract,... |
2026-01-18 |
| BBClip |
17 |
7 |
Bug Bounty Clipboard |
2024-09-30 |
| ETHERBOTS-Bug-Bounty |
17 |
6 |
Code implemented on Rinkeby testnet, along with a ... |
2022-06-03 |
| andrankEnum |
17 |
5 |
Tool to get the top android apps for bug bounty pu... |
2023-08-23 |
| Sensitive-Data-Exposures-with-Github |
17 |
7 |
Techniques / Tips and tricks for finding sensitive... |
2025-06-12 |
| BountyGrimoire |
17 |
5 |
Autonomous AI agents for bug bounty hunting, 18 pa... |
2026-07-07 |
| Bug-Bounty-Dorks |
17 |
1 |
Google Dorks and keywords for bug hunters. |
2026-06-01 |
| All-About-Hacking |
17 |
2 |
A list of Mind-Map for those interested in getting... |
2025-07-05 |
| Elengenix |
17 |
3 |
AI-assisted orchestration for bug bounty hunting.... |
2026-07-12 |
| how-to-hack-github-actions |
17 |
1 |
How to hack Github Actions ($500 bug bounty) |
2025-04-10 |
| Cybersecurity-Notes |
17 |
8 |
Explore the cyber realm with our concise collectio... |
2026-06-21 |
| ErrorEyes-Domain-Scanner |
17 |
4 |
� erroreyes – Lightweight Subdomain Enumerati... |
2026-06-03 |
| endpoints-extractor |
17 |
4 |
A powerful Bash script for extracting URLs and API... |
2026-07-09 |
| sourceCodeProgramsH1 |
17 |
1 |
A full-stack web application that aggregates all H... |
2026-06-01 |
| SubHound |
17 |
4 |
Stay on the beat with SubHound - receive notificat... |
2024-04-28 |
| XSS_payloads_list |
17 |
0 |
A curated list of common and advanced Cross-Site S... |
2026-07-10 |
| tr01d |
17 |
1 |
Tr10d is a command-line tool designed for security... |
2026-01-29 |
| Admin-Panel-Finder-Of-Any-Website |
17 |
21 |
PERL-based website Admin Panel Finder - website se... |
2026-05-30 |
| scrapy-scraper |
17 |
7 |
Web crawler and scraper based on Scrapy and Playwr... |
2026-03-10 |
| ipfinder |
17 |
5 |
IP Finder tool, ipfinder collects IP addresses fro... |
2026-07-11 |
| drakben |
17 |
3 |
Autonomous AI pentesting agent that understands na... |
2026-07-07 |
| ssti-flask-hacking-playground |
17 |
5 |
App with Server Side Template Injection (SSTI) vul... |
2026-05-05 |
| wp-taint-scan |
17 |
1 |
Go static taint-analysis engine that finds vulnera... |
2026-07-01 |
| hashtag-fuzz |
17 |
1 |
The nightmare of WAFs & CDNs, Use multi tricks for... |
2026-05-18 |
| ReconFusionAi |
17 |
1 |
Next-Gen Secret Scanner powered by Local AI (Ollam... |
2026-07-12 |
| cyxbot |
16 |
5 |
Bug bounty bot for channel |
2022-12-31 |
| shell-scripts |
16 |
9 |
This repo contains scripts i used while bug bounty... |
2024-08-07 |
| penum |
16 |
11 |
Parallelized enumeration tool for red team engagem... |
2025-12-09 |
| bb-huge |
16 |
4 |
bb-huge 🤗 , Personal bug bounty findings hub an... |
2026-07-11 |
| KrazePlanetPrograms |
16 |
7 |
SelfHosted - Bug Bounty Programs |
Discover new an... |
| rs0n-bug-bounty-mcp-server |
16 |
5 |
An MCP (Model Context Protocol) server that gives ... |
2026-07-03 |
| BugBounty-Hub |
16 |
2 |
🌌 BugBounty Hub: Your one-stop destinati... |
2026-01-17 |
| kibanarec |
16 |
7 |
A Tool to Extract Open Kibana Instances on Interne... |
2025-12-09 |
| assetWatcher |
16 |
3 |
A tool to notify you of the latest changes in bug ... |
2025-11-06 |
| reFresh |
16 |
5 |
A bash tool used to install famous bug bounty tool... |
2026-02-13 |
| awesome-cyber-security |
16 |
5 |
A bunch of resources containing learning resources... |
2026-07-10 |
| XOE |
16 |
11 |
Exploit XXE Out-Of-Band Vulnerability Easily |
2025-12-13 |
| world-editor |
16 |
19 |
This is the codebase for the HYTOPIA world editor,... |
2026-05-08 |
| Hackers-LunchBox |
16 |
2 |
High level attack and finding maps for all your pe... |
2026-05-26 |
| js-recon-automation-kit |
16 |
4 |
A simple HAR-based JavaScript recon automation kit... |
2026-06-17 |
| CHAPTGPT-PROMPT-FOR-ETHICAL-HACKING |
16 |
4 |
A collection of ChatGPT prompts designed to assist... |
2026-06-28 |
| policymaker |
16 |
9 |
A free, open-source, multi-lingual, template-based... |
2026-07-08 |
| bounty-search-engine |
16 |
7 |
This search engine automates the discovery of sens... |
2026-03-18 |
| scada-scanner |
16 |
3 |
A high-performance, asynchronous SCADA/ICS scanner |
2026-02-26 |
| Parameter-Reflect-Finder |
16 |
7 |
Parameter-Reflect-Finder is a python based tool th... |
2025-10-25 |
| RedTiger |
16 |
5 |
RedTiger - Automated XSS vulnerability testing too... |
2026-07-11 |
| SubdomainFinder |
16 |
5 |
Find subdomains by searching public certificate re... |
2025-03-07 |
| vulntechfinder |
16 |
7 |
vulntechfinder is a powerful security tool that au... |
2026-07-11 |
| akira |
16 |
3 |
Autonomous offensive security agent. Plans engagem... |
2026-07-08 |
| subscan |
16 |
0 |
CLI tool for subdomain recon, DNS brute-force, sco... |
2025-06-24 |
| AcquiFinder |
16 |
2 |
Get acquisitions by scraping titles of crunchbase. |
2026-05-28 |
| hey-game-pepople-i-know-you-r-ment-to-like-make-these-long-but-come-on-its-fun-but-arrow-game-lol |
16 |
0 |
According to all known laws of aviation, there is ... |
2026-06-09 |
| BugBounty |
15 |
7 |
PenTest and BugBounty 🕵� |
2026-07-11 |
| Awake |
15 |
6 |
Bug Bounty Monitor |
2025-11-19 |
| IABE-BugBounty-Framework |
15 |
6 |
BugBounty framework with main function to ORGANIZE... |
2026-04-25 |
| bugbounty_profile |
15 |
8 |
Automate bug bounty recon using bash alias |
2025-10-07 |
| Google-Dorking-for-Bug-Bounty- |
15 |
6 |
Here's an updated Google Dorking list for 2025 Bug... |
2026-07-05 |
| Bugbounty |
15 |
6 |
Start your journey with Bug Bounty. |
2025-12-09 |
| FindBBP |
15 |
4 |
Bug Bounty Program Discovery tool, that discovers ... |
2026-06-10 |
| Frecon |
15 |
2 |
Continues Recon on Public Bug Bounty Program |
2026-06-01 |
| abspider-recon |
15 |
4 |
A modern, browser-based reconnaissance dashboard ... |
2026-07-09 |
| BugBountyToolz |
15 |
0 |
A collection of open-source tools designed to stre... |
2026-06-08 |
| bug-bounty-recon |
15 |
2 |
Recon tool utilises 58 different techniques using ... |
2026-06-06 |
| Bug-Hunting-With-Bash |
15 |
3 |
Cool One Liners at one place to make your recon an... |
2026-01-05 |
| quester |
15 |
5 |
QUESTER is a Web Pentesting & Bug Bounty Recon too... |
2025-09-15 |
| S0x4 |
15 |
8 |
DNS Misconfiguration : S0x4 - Same Site Scripting ... |
2025-12-09 |
| HackingGPT |
15 |
3 |
Advanced terminal tool for pentest and bug bounty,... |
2026-05-22 |
| Dork-Like-a-Demon-Shodan-Edition-for-Hackers-and-Bug-Bounty-Hunters |
15 |
0 |
Mastering Shodan Dorks from beginner to beast mode... |
2026-02-28 |
| ex-redirect |
15 |
3 |
ex-redirect — An automated open redirect scanner... |
2026-04-07 |
| report-templates |
15 |
2 |
This repository is dedicated to documenting and sh... |
2026-06-22 |
| Beatrix-suite |
15 |
1 |
The Black Mamba — Bug bounty hunting CLI framewo... |
2026-07-06 |
| Web-Recon-Automation |
15 |
2 |
A bash script to automate the necessary Reconnaiss... |
2026-05-08 |
| clpzcode |
15 |
2 |
The best CLI for pentest — AI coding agent with ... |
2026-06-07 |
| Web-See |
15 |
0 |
Web-See is Tool For Checkout Status Of Urls in Mas... |
2024-05-18 |
| BJS-PR-Bounty-Pool |
15 |
1 |
Bounties in this pool are incentives for pushing B... |
2026-05-09 |
| Facebook-SSL-Pinning-Bypass |
15 |
6 |
Bypass Facebook SSL/TLS certificate pinning on And... |
2026-07-12 |
| nucleihubquery |
15 |
8 |
A bash script that extracts `shodan-query, google-... |
2026-02-17 |
| unew |
15 |
3 |
A high-performance command-line utility for proces... |
2026-01-07 |
| FastRecvSMS |
15 |
4 |
SMS verification CLI. Buy temp numbers and receive... |
2026-06-26 |
| bba |
14 |
4 |
bug bounty automation |
2026-04-10 |
| Bug-Bounty-Roadmap1 |
14 |
3 |
Bug Bounty |
2026-06-09 |
| Bug-Bounty-Tools |
14 |
3 |
Awesome Bug bounty tools |
2026-06-15 |
| bug-bounty |
14 |
2 |
bug-bounty |
2025-11-24 |
| HTB_CBBH_Writeup |
14 |
6 |
HackTheBox: Certified Bug Bounty Hunter's Writeup ... |
2026-03-15 |
| Domain2IP-Converter |
14 |
11 |
Convert domain lists to resolved IP without duplic... |
2026-04-22 |
| Hacking-Toolkits |
14 |
4 |
Hack Tricks and survival kit (For Bug Bounty Progr... |
2026-04-15 |
| recon-framework |
14 |
3 |
Automated reconnaissance toolkit for web security ... |
2026-07-09 |
| Wounty |
14 |
4 |
Wounty is a simple web enumeration script that mak... |
2022-12-12 |
| The-Bug-Hunters-Methodology |
14 |
6 |
Welcome! This repo is a conglomeration of tips, tr... |
2025-06-12 |
| Dork-Like-a-Demon-FOFA-Edition-for-Hackers-Bug-Bounty-Hunters |
14 |
2 |
A hacker’s guide to FOFA dorking, packed with po... |
2026-05-18 |
| api-key-impact |
14 |
3 |
A list of different types of API keys and how to p... |
2026-05-06 |
| Subdomain-Takeover-Checker |
14 |
8 |
Python tool for detecting subdomain takeover vulne... |
2026-05-04 |
| getcontact-api-client |
14 |
4 |
A streamlined guide for mobile app penetration tes... |
2026-06-17 |
| WordListeXplorer |
14 |
2 |
A local wordlist intelligence and workflow managem... |
2026-07-07 |
| CommonWebVulns |
14 |
3 |
Here you will find information and examples about ... |
2024-06-01 |
| DGWiki |
14 |
10 |
DigitalGangsterWiki – A community-driven platfor... |
2026-04-05 |
| JWT-Authentication-Bypass-via-JWK-Header-Injection-for-Bug-Bounty |
14 |
0 |
JWT authentication bypass via insecure jwk header ... |
2026-02-28 |
| Reconator |
14 |
0 |
AI-powered reconnaissance framework for bug bounty... |
2026-06-30 |
| Bug-Bounty-Practical-Lab-Finding-and-Exploiting-an-Unused-API-Endpoint |
14 |
1 |
Manipulate a hidden API endpoint to change product... |
2026-02-28 |
| gitdork |
14 |
2 |
Google, Shodan, and GitHub dork generator for pent... |
2026-03-24 |
| MAXMAP |
14 |
2 |
Automated recon pipeline for bug bounty hunters & ... |
2026-06-17 |
| audits |
14 |
1 |
My public findings/reports from decentralized audi... |
2026-07-03 |
| Octocrawl |
14 |
1 |
Fast, parallel and easy to use web crawler for pen... |
2026-07-11 |
| whitesecross |
14 |
5 |
Whitesecross is an advanced Python-based XSS scann... |
2026-06-05 |
| bugcrowd |
14 |
2 |
(Unofficial) Ruby wrapper for the Bugcrowd HTTP AP... |
2023-11-29 |
| Auto-IDOR |
14 |
0 |
An interactive bash script for detecting IDOR vuln... |
2026-05-18 |
| CodeArgos |
14 |
6 |
A python module for red teams to support the conti... |
2025-12-09 |
| Endpoint-Javascript-Explorer |
14 |
0 |
Powerful JavaScript bookmarklet designed for disco... |
2026-04-09 |
| Xposure |
14 |
3 |
fully autonomous credential intelligence platform ... |
2026-07-07 |
| hackbrowser-mcp |
14 |
3 |
The first browser MCP built for security testing. ... |
2026-07-06 |
| WebHunterScreen |
14 |
0 |
This program aims to check active targets by savin... |
2025-09-01 |
| ShinobiShell |
14 |
0 |
An experimental shell that handles file exfiltrati... |
2026-03-07 |
| nagooglesearch |
14 |
0 |
Not another Google searching tool. |
2026-07-12 |
| Instagram-SSL-Pinning-Bypass |
14 |
1 |
Bypass Instagram SSL/TLS certificate pinning on An... |
2026-07-06 |
| Beginner-Bug-Bounty-Guide |
13 |
13 |
Beginner-Bug-Bounty-Guide |
2025-05-14 |
| bug-buster |
13 |
12 |
🪲 Bug Buster, a bug bounty platform powered by ... |
2025-11-08 |
| Bug-Bounty-tips-from-Twitter |
13 |
6 |
This is a collection of Bug Bounty Tips collected ... |
2026-03-01 |
| Ultimate-Bug-Bounty |
13 |
4 |
No description |
2024-07-05 |
| yahoo-bug-bounty |
13 |
4 |
List of hosts from yahoo.com |
2025-12-09 |
| HunterX |
13 |
6 |
King of Bug Bounty Tips Simple Tool |
2026-06-30 |
| Bug-Bounty |
13 |
3 |
Bug bounty cheat sheets and resources |
2026-06-13 |
| tk0-bugbounty |
13 |
3 |
Something and everything related to Bug Bounties |
2026-07-06 |
| AliveHunter |
13 |
9 |
Lightning-fast domain validator for security resea... |
2026-07-10 |
| recon |
13 |
2 |
Scripts for bug bounty-ing and attack surface mapp... |
2025-02-04 |
| lazy |
13 |
4 |
This is a lazy enumeration script made to make bug... |
2025-11-24 |
| Bug-Bounty-Program |
13 |
1 |
No description |
2026-06-06 |
| Bug-Ao-Bounty-Lib |
13 |
0 |
Objetivo desse repositório é construir uma lib p... |
2025-08-06 |
| RVD |
238 |
40 |
Robot Vulnerability Database. An archive of robot ... |
2026-07-11 |
| bountydash |
164 |
21 |
BountyDash is a tool to combine your rewards from ... |
2026-05-13 |
| Dons |
87 |
24 |
Dons Js Scanner is a sleek command-line tool that ... |
2026-04-25 |
| RVSS |
31 |
5 |
Robot Vulnerability Scoring System (RVSS) Python 3... |
2026-02-24 |
| pentesting-report-generator |
29 |
3 |
This repository is made to create your own pentest... |
2026-07-12 |
| LLM-PROMPT-INJECTION-PAYLOAD-S |
24 |
0 |
Unlock safe, high-signal prompt workflows for ethi... |
2026-06-05 |
| Apache-GOExploiter |
20 |
4 |
Apache (CVE-2025-24813) GOExploiter Checker & Expl... |
2026-07-11 |
| proxylist |
20 |
0 |
List of continuously updated proxy servers |
2026-07-10 |
| bug-reports |
18 |
5 |
No description |
2025-12-04 |
| Payloads_Tool_box |
16 |
5 |
At this repo you can find any tools, tricks or tem... |
2026-05-14 |
| bugbounty |
13 |
1 |
All Items Related to bug bounty |
2025-09-17 |
| Hacking_Extensions |
13 |
2 |
the collection of all useful extensions that are u... |
2026-02-26 |
| JWT-Authentication-Bypass-Exploiting-Unverified-Signature-for-Bug-Bounty |
13 |
0 |
Exploit a critical JWT flaw to bypass authenticati... |
2026-02-28 |
| locksmith |
13 |
2 |
Locksmith is a tool which allow simple way to test... |
2025-09-25 |
| JWT-Authentication-Bypass-via-Weak-Signing-Key-for-Bug-Bounty |
13 |
0 |
Exploiting weak JWT secrets to forge admin access ... |
2026-02-28 |
| Argos-Recon |
13 |
1 |
bugbounty recon osint python security pentesting a... |
2026-07-07 |
| private_bechek |
13 |
0 |
PrivateBChecks Collection BY CyberTechAjju |
2026-04-30 |
| writeups |
13 |
2 |
Technical writeups on Offensive Security, Red Team... |
2026-07-12 |
| noshit |
13 |
1 |
A simple bug bounty utility tool to remove uninter... |
2026-04-10 |
| spechunt |
13 |
1 |
An AI-powered bug bounty framework that provides s... |
2026-07-11 |
| OWASP-Automated-Threats-to-Web-Applications-OATv2 |
13 |
0 |
OWASP Automated Threats (OATv2) concise guide, hig... |
2026-02-28 |
| kai |
13 |
1 |
A curated atelier for security research. Decipheri... |
2026-05-16 |
| Web-App-Methodology |
13 |
1 |
Collection of web app methodology from initial rec... |
2022-07-30 |
| RYN27 |
13 |
0 |
Open source CLI tool for information gathering —... |
2026-06-27 |
| ShoRAK_recon |
13 |
1 |
ShoRAK Recon is a comprehensive tool designed for ... |
2026-07-10 |
| osint-recon-tool |
13 |
0 |
A CMS-aware OSINT and recon tool for red teamers a... |
2025-10-12 |
| bounties |
12 |
10 |
Bug bounty policies |
2026-05-29 |
| recon-007 |
12 |
7 |
Bug Bounty tool to automate the recon process. |
2024-09-16 |
| bug-bounty-report-generator |
12 |
5 |
No description |
2026-05-28 |
| BugBounty-Automated-Recons |
12 |
3 |
A tool for automating reconnaissance in bug bounty... |
2026-06-24 |
| master_discovery |
12 |
10 |
Files and Folders list used in file enumeration du... |
2024-08-12 |
| contracts-bounty |
12 |
3 |
GoCryptobot Contract Bug Bounty |
2024-08-29 |
| My-Current-Bug-Bounty-Recon |
12 |
4 |
No description |
2026-07-11 |
| bugbounty-dorks |
12 |
3 |
Google dorks for bug bounty hunting |
2025-04-07 |
| BugbountiesMCP |
12 |
3 |
A curated collection of MCP servers useful for bug... |
2026-04-22 |
| weaponize.it |
12 |
3 |
Weaponize.it is your go-to resource for gaining in... |
2025-10-29 |
| subzero |
12 |
4 |
Passive subdomain enumeration tool for bug-bounty ... |
2025-12-09 |
| Roadmap-pentest-bug-bounty |
12 |
2 |
No description |
2026-07-09 |
| huntr-com-bug-bounties-collector |
12 |
2 |
keep watching new bug bounty (vulnerability) posti... |
2026-05-05 |
| bug-bounty |
12 |
1 |
bug bounty |
2026-07-04 |
| BugBountyChecklist |
12 |
0 |
No description |
2026-04-08 |
| BugBounty_Roadmap |
12 |
1 |
How to Get Started into Bug Bounty Complete Begin... |
2026-04-01 |
| bugbounty-writeups-agent |
12 |
2 |
Local Flask app that converts bug bounty writeup U... |
2026-06-24 |
| Techincal_CheatSheet |
12 |
3 |
A cheat sheet regarding Penetration testing, Bug B... |
2026-06-11 |
| bug-bounty-toolkit |
12 |
1 |
Advanced Bash automation script for bug bounty rec... |
2026-02-21 |
| cybersecurity-roadmap-bug-bounty |
12 |
0 |
No description |
2026-03-29 |
| Bug-Bounty-Arsenal-v.3 |
12 |
0 |
Authorized web application security testing platfo... |
2026-06-05 |
| ars0n-framework-srt |
12 |
3 |
A lightweight version of my bug bounty hunting fra... |
2026-01-09 |
| hackbotone-mern-website |
12 |
2 |
HackbotOne website produce contents from various d... |
2025-05-10 |
| Bug-Bounty-Race-Exploiting-Race-Conditions-for-Infinite-Discounts |
12 |
0 |
Race Condition Vulnerability hands on experience t... |
2026-02-28 |
| JWT-Authentication-Bypass-via-Flawed-Signature-Verification-for-Bug-Bounty-Hunting |
12 |
0 |
Exploit insecure JWT signature verification by for... |
2026-02-28 |
| From-Recon-to-Root-A-MongoDB-NoSQL-Injection-Bug-Bounty-Journey |
12 |
0 |
Exploiting NoSQL injection to extract admin creden... |
2026-02-28 |
| MSP-Vendors-VDP-BBP |
12 |
0 |
An index of vendors in the MSP space who have publ... |
2025-08-12 |
| auth-bypass |
12 |
6 |
auth-bypass is a collection of common techniques a... |
2026-04-04 |
| instagram-persisted-query-diff |
12 |
0 |
Version-to-version diffs of Instagram Android inte... |
2026-07-11 |
| Ultimate-openai-gemini-claude-api-key-scraper |
12 |
3 |
🔑 Enterprise-grade async API key scanner for Gi... |
2026-07-05 |
| DorkRunner |
12 |
0 |
Dorkrunner is an interactive CLI-based Google & Du... |
2026-07-07 |
| crawlex |
12 |
1 |
Crawlex is a powerful Chrome extension designed to... |
2025-02-22 |
| Ech0Vulnx |
12 |
1 |
Ech0Vulnx is a powerful multi-purpose network scan... |
2026-07-05 |
| xss_finder |
12 |
0 |
Cross-Site Scripting (XSS) is one of the most well... |
2026-01-05 |
| loopfi-bug-bounty |
11 |
6 |
No description |
2025-08-07 |
| bug-bounty-dorks-archive |
11 |
5 |
This is collection of dorks to find bug bounty pro... |
2026-04-17 |
| bug-bounty-tools |
11 |
3 |
Collection of HTTP scanners and fuzzers. |
2025-11-17 |
| Markdown-Bug-Bounty-Recon |
11 |
3 |
A recon Framework for Bug Bounty Hunters that woul... |
2025-09-05 |
| kaiju-p2e-bug-bounty |
11 |
2 |
KaijuKingz P2E Bug Bounty |
2024-02-27 |
| AI-for-Cybersecurity-and-Bug-Bounty-Hunting |
11 |
3 |
AI for Cybersecurity and Bug Bounty Hunting, by EC... |
2026-06-23 |
| silicondzor |
11 |
4 |
The Armenian tech community, tech commentary, bug ... |
2025-09-11 |
| bugs.xdavidhu.me |
11 |
2 |
� My Bug Bounty Writeups |
2026-05-06 |
| dorkengine.github.io |
11 |
5 |
Introducing "Dork Engine" – the ultimate bug bou... |
2026-07-07 |
| Burp-Suite-AI-extensions-for-bug-bounty |
11 |
2 |
No description |
2026-05-24 |
| Vulnerability-Report-Template |
11 |
4 |
You can use this Vulnerability Report Template to ... |
2026-07-12 |
| BugBountyCTF-Reports |
11 |
0 |
This repository contains fully disclosed accepted ... |
2026-07-11 |
| subdomains_wordlist |
11 |
2 |
Subdomains wordlist generted from subdomains of pu... |
2025-09-19 |
| XSS-LAB |
11 |
5 |
A hands-on lab environment based on real bug bount... |
2026-05-24 |
| Reconal |
11 |
2 |
Lightweight OSINT reconnaissance tool with web UI ... |
2026-06-25 |
| audits |
11 |
1 |
Repository to store all audits from public contest... |
2025-05-18 |
| ctfpwn |
11 |
1 |
Framework for making CTFs, bug bounty and pentesti... |
2025-06-15 |
| S3-Checker |
11 |
2 |
S3-Checker is a fast, concurrent AWS S3 bucket dis... |
2026-05-24 |
| c-no-3v1l |
11 |
1 |
Blind Cross-Site Scripting (XSS) Testing Tool For ... |
2026-05-04 |
| KageRecon |
11 |
1 |
A modular, Docker-ready recon pipeline for Red Tea... |
2026-06-02 |
| keyana |
11 |
0 |
High-performance JavaScript reconnaissance tool wi... |
2026-05-24 |
| writeup-app |
11 |
0 |
Writeup-app is a simple program for sending notifi... |
2024-03-03 |
| Vex |
11 |
0 |
Vex ( Cross the line) : The ultimate XSS payload a... |
2026-06-14 |
| ReconOPS |
11 |
0 |
A structured recon-only framework for bug bounty h... |
2026-06-28 |
| Mr-shiravani |
11 |
0 |
18-year-old developer |
Specializing in front-end ... |
| corscan |
11 |
3 |
Corscan is a Go-based tool that automates the dete... |
2026-03-01 |
| Algopwn |
11 |
2 |
Algopwn is an interactive Python tool for security... |
2026-05-06 |
| CiscoResearcherToolkit |
11 |
0 |
The Cisco Researcher Toolkit is a comprehensive, A... |
2026-04-19 |
| Codehunter |
11 |
1 |
Ultra-fast pattern scanner for Bug Bounty and pent... |
2026-07-11 |
| argo |
11 |
0 |
�� LLM-native static vulnerability detection.... |
2026-07-11 |
| ReconBEEs |
11 |
1 |
A tool which can perform advance recon automatical... |
2023-08-05 |
| renegade-bug-bounty |
10 |
13 |
No description |
2026-06-03 |
| BugBounty-notes |
10 |
7 |
BugBounty Notes (with writeup ) for me |
2025-07-25 |
| Bug-Bounty |
10 |
4 |
Bug Bounty Notes |
2026-04-22 |
| Reconkil3r |
10 |
4 |
Script Recon Bug Bounty |
2025-03-19 |
| public-bugbounty-data |
10 |
6 |
Recon Data for public bug bounty sites useful for ... |
2026-06-06 |
| dorkforge |
10 |
8 |
Google dork builder for bug bounty recon |
2026-06-22 |
| 365Days-Bug-Bounty |
10 |
5 |
It is a 365 day cybersecurity learning challenge. ... |
2024-11-23 |
| bug-bounty-in-a-box |
10 |
4 |
💥 Bug bounty in a box! |
2023-08-31 |
| Bug-Bounty-Reporting-Templates |
10 |
2 |
Report Templates One of the most important element... |
2026-05-22 |
| Bug-Bounty-Ultimate-Tools |
10 |
2 |
Ultimate List Of Bug Bounty Tools |
2025-12-09 |
| Dump_Programs |
10 |
2 |
Dump bug bounty scopes from bug crowd, hackerone e... |
2024-01-04 |
| bashbounty |
10 |
2 |
Bash bounty is a tool to automation the process of... |
2023-08-05 |
| lmi4u |
10 |
4 |
lmi4u is designed to Install basic kind of tools (... |
2024-01-18 |
| rexC0n |
10 |
4 |
Powerful Bash-based subdomain enumeration tool for... |
2026-07-11 |
| advanced-bugbounty-mcp |
10 |
2 |
🔥 Advanced AI-Powered Bug Bounty Hunting Platfo... |
2026-07-03 |
| Bugbounty-Dorks |
10 |
0 |
Bug Bounty Program Finder |
2026-05-31 |
| Legal-bug-bounty |
10 |
1 |
This is the #legalbugbounty standardization projec... |
2025-09-27 |
| mcd-security |
10 |
12 |
The Maker Foundation's highest priority is the sec... |
2026-03-20 |
| ReconX |
10 |
1 |
Automated reconnaissance framework for bug bounty ... |
2026-07-08 |
| VenomRecon |
10 |
1 |
Autonomous attack surface mapping and vuln discove... |
2026-07-09 |
| ZERO |
10 |
1 |
Zero is a pipeline for custom vulnerability analys... |
2026-07-07 |
| Trinetra |
10 |
3 |
Trinetra is Web Crawling Tool For Bug Bounty And ... |
2026-02-28 |
| urlscan.io-Cheat-Sheet-by-SinaYeganeh |
10 |
1 |
A comprehensive cheat sheet for using urlscan.io i... |
2026-07-02 |
| sweetuu |
10 |
1 |
Sweetuu is a Advance Shell which can be used to ac... |
2025-08-18 |
| SecPayloads |
10 |
1 |
Sec-Payloads, It's a collection of multiple types ... |
2025-11-17 |
| endpointhunter |
10 |
1 |
EndpointHunter is a powerful bug bounty tool desig... |
2026-06-25 |
| automate-with-actions |
10 |
4 |
This project is automate the reconnaissance proces... |
2026-05-04 |
| bug-bounty |
9 |
9 |
OUT OF DATE: Internal documentation for TTS's bug ... |
2023-12-27 |
| bounty-targets |
9 |
7 |
🎯 Information About Bug Bounty Program Target... |
2025-01-05 |
| bug-bounty-fuzz-wordlist |
9 |
7 |
This is a wordlist of directory fuzzing directorie... |
2026-07-08 |
| BugBounty-Dorks |
9 |
4 |
Help to find batter TARGET for bug bounty |
2025-12-30 |
| Methodology |
9 |
4 |
Bug Bounty Methodology. |
2025-09-18 |
| bb-reports-generator |
9 |
4 |
Bug bounty reports generator |
2024-10-12 |
| Bug_Scraper |
9 |
8 |
A tool for bug bounty researchers to identify vali... |
2025-12-16 |
| BugHunt3r |
9 |
3 |
Virtual machine for Bug Bounty Hunters. |
2026-03-19 |
| huntr-extension |
9 |
7 |
huntr.dev browser extension, allowing you to view ... |
2024-08-12 |
| 3PleB |
9 |
4 |
Set up minimal bug bounty environment, No more blo... |
2025-12-01 |
| awesomebugbounty |
9 |
3 |
СпиÑ�ок иÑ�точников, площадоÐ... |
2026-06-13 |
| tools |
9 |
3 |
scripts for ctf , bug bounty and stuffs |
2026-02-14 |
| Web-Application-Penetration-Testing-Bug-Bounty-Notes |
9 |
3 |
Web application penetration testing |
2026-06-08 |
| ultimate-recon |
9 |
4 |
Automated 13-phase bug bounty recon script for Kal... |
2026-06-14 |
| r3dpower_toolkit |
9 |
5 |
A script to install a collection of tools for web ... |
2025-11-26 |
| reconX |
9 |
2 |
An Automated Recon Tool For Bug bounty Hunters |
2026-06-16 |
| BugBountyKit |
9 |
0 |
No description |
2025-11-09 |
| EyeOfRa |
9 |
2 |
Eye Of Ra A Program Watcher For Bug Bounty Platfor... |
2026-06-08 |
| webhook-mcp-server |
9 |
6 |
MCP for webhook.site - capture HTTP requests, emai... |
2026-07-12 |
| reconmind |
9 |
3 |
AI-Powered Bug Bounty Agent |
Recon → Scan → F... |
| Automated-Bug-Bounty-Scanner |
9 |
1 |
Automated Bug Bounty Scanner Tool |
2026-01-02 |
| repoleak |
9 |
2 |
A scanner for bug bounty hunters to find leaked se... |
2026-07-05 |
| Important_Websites |
9 |
3 |
These are websites which can help a Script Kiddie ... |
2026-03-20 |
| Hacking-PDF-Books |
9 |
2 |
My personal repo containing a variety of PDF books... |
2026-06-07 |
| oneinfinity |
9 |
0 |
One&Infinity — Autonomous Penetration Testing & ... |
2026-07-06 |
| lazyRecon |
9 |
0 |
Tool to automate the recon phase for bug bounties |
2025-03-21 |
| ProbeRaptor |
9 |
0 |
A modular bug bounty reconnaissance tool built in ... |
2026-03-05 |
| SecretHunter |
9 |
5 |
A powerful and lightweight tool for bug bounty hun... |
2026-07-04 |
| hxr |
9 |
0 |
Advanced security reconnaissance framework for bug... |
2026-06-08 |
| NeuroRift |
9 |
0 |
An AI-powered vulnerability research framework for... |
2026-04-01 |
| Bug-Hunting-Cheatsheet |
9 |
2 |
This cheatsheet serves as a comprehensive guide fo... |
2026-04-02 |
| ywh_program_selector |
9 |
1 |
YWH Programs Selector is a CLI tool to filter bug ... |
2026-01-29 |
| KeyReaper |
9 |
0 |
Extract and assess exposed Google Cloud (AIza) API... |
2026-07-07 |
| Invitation-Flow-Security-Testing-Checklist |
9 |
4 |
checklist for testing invitation / team-member inv... |
2026-07-03 |
| SQLi_Payload |
9 |
0 |
A curated, tested, and Burp-ready collection of SQ... |
2026-07-02 |
| BBHTv2 |
8 |
34 |
A single script for all the tools you need for bu... |
2025-07-31 |
| Bug-Bounty-Tips |
8 |
6 |
The Repository aims to provide maximum Tips posted... |
2026-01-05 |
| Bug-Bounty-Automation |
8 |
6 |
Bash Script to perform bug bounty automation |
2025-09-16 |
| google-bounty |
8 |
5 |
A google bug bounty clone using gemini |
2026-07-02 |
| bugbounty |
8 |
4 |
bug bounty cheat files |
2026-06-10 |
| bug-bounty |
8 |
4 |
IOTA Bug Bounty program. |
2025-05-20 |
| BbSpider |
8 |
5 |
Simple spider for bug bounty recon |
2025-06-18 |
| bug-bounty |
8 |
3 |
Example on setting up Bug Bounty Programs for Smar... |
2024-12-11 |
| BugBountyLearningResources |
8 |
2 |
Bug Bounty Learning Resources i mentioned on My Bl... |
2024-09-07 |
| myreconmethods |
8 |
5 |
This includes the methods of recon and exploit for... |
2024-08-12 |
| bug_bounty_scripts |
8 |
2 |
scripts made for bug bounty hunting and other task... |
2026-02-26 |
| Bug-Bounty-Platforms |
8 |
2 |
Sites which you permission to check their security |
2025-07-16 |
| easy_hunt |
8 |
3 |
this repo content common bug bounty hunting techni... |
2025-09-28 |
| disas_apk |
8 |
7 |
All-in-one tool to help bug bounty hunters easily ... |
2025-09-15 |
| InfoScraper |
8 |
3 |
Python implementation of two famous JavaScript pay... |
2026-07-08 |
| DorksNight |
8 |
5 |
DorksNight search deeply and gain result for bug ... |
2022-11-24 |
| leperchaun |
8 |
0 |
bug bounty automation |
2026-03-13 |
| oneliners |
8 |
2 |
Collection of One Liners from Different Sources fo... |
2026-01-23 |
| Web-Pentesting |
8 |
1 |
Only for bug bounty |
2025-11-25 |
| bug-bounty-dorks |
8 |
2 |
Bug Bounty Dorks 2025 |
2025-06-21 |
| BountyForge |
8 |
0 |
A lightweight offensive security recon framework f... |
2026-06-30 |
| Bug-bounty-dorks |
8 |
0 |
No description |
2025-10-18 |
| Bug-bounty-methodology |
8 |
0 |
this is my approach to bug bounty. i have inspired... |
2026-06-16 |
| Wide-Bounty |
8 |
1 |
AI-Driven Recon & Bug Bounty Toolkit |
2026-05-22 |
| Bug-Bounty-Vulnerability-Research |
8 |
0 |
Vulnerability research and exploits in Public Bug ... |
2022-07-26 |
| BugBrowser |
8 |
1 |
Bug Browser provides information security, program... |
2025-01-05 |
| Web-Pentest-Checklists-and-Bug-Bounty-Checklists |
8 |
0 |
Best Checklists for web Pentest Testing or for a B... |
2025-08-14 |
| kali |
8 |
1 |
Kali Linux containers for bug bounty and CTFs |
2026-05-16 |
| thexwriteup |
8 |
3 |
Store all the latest Medium Articles by specific t... |
2026-06-20 |
| Bug-Hunterx |
8 |
0 |
Automated tool under scripting in Bash, which allo... |
2024-07-02 |
| PutYourMoneyWhereYourContractIs |
8 |
0 |
Ethereum-based autonomous Bug Bounty framework for... |
2022-02-14 |
| hacklens |
8 |
2 |
HackLens is a full-featured, automated recon and v... |
2026-06-04 |
| newassets |
8 |
6 |
I have collected different open source tools for m... |
2025-03-07 |
| Secret-Search-Engine |
8 |
0 |
� Secret-Search-Engine Advanced recon toolkit w... |
2026-01-12 |
| bypassXSS |
8 |
2 |
A curated collection of advanced XSS bypass techni... |
2026-07-04 |
| china-src |
8 |
0 |
The Missing Security Response Center Data For Chin... |
2026-04-08 |
| -ILUSION-Advanced-Reconnaissance-Framework |
8 |
0 |
Framework avanzado de reconocimiento para Bug Boun... |
2026-06-08 |
| h4fan.github.io |
8 |
0 |
web sec |
bug bounty |
| SecTrainingData |
8 |
0 |
Data for training machine learning models related ... |
2025-08-07 |
| kidrecon |
8 |
1 |
automated tool for reconnaissance and enumeration... |
2025-08-09 |
| FiddlerKit |
8 |
1 |
for pentesting, security research, bug bounty hunt... |
2024-08-12 |
| bb-tools |
8 |
0 |
This repo contains wordlist gathered from bug boun... |
2026-05-03 |
| hacks |
8 |
1 |
A collection of scripts that I use in bug bounty a... |
2026-06-07 |
| ReconForge |
8 |
0 |
🛠� Automated installer for a comprehensive bu... |
2026-07-09 |
| ShoMe |
8 |
1 |
ShoMe is a web recon tool used to list out hidden ... |
2023-08-05 |
| submon |
8 |
2 |
Python script to monitor subs from crt.sh |
The sc... |
| JavaScript-Analysis-Masterclass-Lab |
8 |
0 |
JavaScript Analysis Masterclass Lab is a hands-on ... |
2026-04-06 |
| recon_automation_resources |
8 |
0 |
Este es un repo con recursos que menciono en el mÃ... |
2026-05-28 |
| SubProbe |
8 |
0 |
âš¡ JavaScript-aware crawler for security research... |
2026-05-13 |
| 2cmd |
8 |
2 |
Got a command that doesn't support input files lik... |
2025-06-04 |
| Android-Mobile-Pentesting-Roadmap |
8 |
2 |
This guide is built for anyone who wants to take m... |
2026-07-10 |
| CredStalker- |
8 |
0 |
CredStalker is a powerful automated security tool ... |
2026-07-12 |
| iismap |
8 |
0 |
IIS Vulnerability Scanner and Misconfiguration Map... |
2026-07-03 |
| XSS-Hunting-Automation |
8 |
1 |
Automação completa para caça de vulnerabilidade... |
2026-05-11 |
| WayPeek |
8 |
1 |
This extension helps bug bounty hunters and recon ... |
2026-05-29 |
| shadowrecon |
8 |
0 |
ShadowRecon is a professional, all-in-one cybersec... |
2025-12-29 |
| HHunter |
8 |
0 |
HHunter is a specialized security testing tool des... |
2026-07-12 |
| BugBountyTips |
7 |
5 |
No description |
2026-06-06 |
| bug-bounty-server-profiles |
7 |
6 |
No description |
2026-07-08 |
| bug-bounty-tools |
7 |
5 |
Various wordlists, tools and scripts written/compi... |
2026-07-08 |
| BugGPT-Tools |
7 |
7 |
AI generated tools/one-off-scripts pimarily for bu... |
2025-10-13 |
| Bug-Bounty |
7 |
4 |
No description |
2024-12-13 |
| Bug_Bounty_Hand_Book |
7 |
4 |
This is a 1st Part Of Bug Bounty Guideline . Hope ... |
2022-10-27 |
| bug-bounty-hunting-ai |
7 |
5 |
Demo code and presentation materials for the talk ... |
2026-05-17 |
| chaos_recondata |
7 |
7 |
CHAOS - Recon data for Public Bug Bounty Programs ... |
2025-09-17 |
| bugmenace |
7 |
2 |
A Bug Bounty Packer Build |
2022-10-19 |
| Bug-Bounty-Resources |
7 |
2 |
No description |
2025-10-15 |
| dorks |
7 |
2 |
Advanced Dorks for Bug Bounty! |
2026-02-26 |
| all-domains |
7 |
8 |
a tool for finding all existing domain that is in ... |
2026-05-20 |
| CBBH-Preparation |
7 |
3 |
Practical exercises and checklists to prepare for ... |
2026-03-15 |
| ReconX |
7 |
4 |
Web & API recon framework — 7-phase async pipeli... |
2026-06-13 |
| BugBounty-Notes |
7 |
1 |
No description |
2024-05-14 |
| bug-bounty-platforms |
7 |
0 |
Bug Bounty Platforms |
2026-06-01 |
| Bug-Bounty-Writeups |
7 |
0 |
Bug Bounty Writeups |
2026-05-19 |
| BugBountyToolkit-ZSH |
7 |
0 |
BBT Custom ZSH Configuration |
2023-09-29 |
| Mind-Maps |
7 |
4 |
Mindmaps for bug bounty Hunters🧑�🦰, pentes... |
2026-02-16 |
| BugBountyInfosFetcher |
7 |
0 |
No description |
2026-05-09 |
| Bug-Bounty-Tools |
7 |
1 |
A list of resources for those interested in gettin... |
2026-01-21 |
| termux-bug-bounty-guide |
7 |
1 |
No description |
2026-07-01 |
| bugbounty |
7 |
0 |
Google dorks for finding bug bounty programs |
2025-04-05 |
| claude-bug-bounty-stack |
7 |
1 |
Complete Claude Code setup for bug bounty hunting ... |
2026-07-02 |
| bounty_domains |
7 |
1 |
public and private bug bounty programs from differ... |
2025-12-07 |
| Immunefi-Bug-Bounty-Programs-Snapshots |
7 |
0 |
Every time a Bug Bounty Program in Immunefi modifi... |
2026-03-24 |
| Ettercap-Bug-Bounty-Automation-Pipeline |
7 |
0 |
Personal recon and vuln scanning pipeline — chai... |
2026-06-16 |
| bountybleed |
7 |
1 |
Quick & Dirty script that scan for the heartbleed ... |
2023-01-28 |
| awesome-hacker-search-engines |
7 |
3 |
A curated list of awesome search engines useful du... |
2026-01-31 |
| LulzSec_Dorks |
7 |
0 |
Google Dorks for Bug Bounty |
Find Sensitive Infor... |
| BugBullets |
7 |
1 |
An Ammo store containing < 100 words summary of se... |
2025-07-05 |
| Portscan |
7 |
0 |
Hardcoded nmap command automation for CTFs / Bug B... |
2024-07-17 |
| scopeNotifier |
7 |
1 |
Getting the latest scopes (domains that are eligib... |
2025-01-05 |
| acunetix-automation |
7 |
0 |
Python script to automate Acunetix scans for bug b... |
2026-07-02 |
| kodok |
7 |
6 |
Kodok is a Go-based JavaScript Security Scanner de... |
2026-05-29 |
| POT |
7 |
0 |
An automated highly concurrent Bug Bounty Reconna... |
2026-07-02 |
| oauth-sniper |
7 |
1 |
Tool to scan across multiple bug bounty programs f... |
2026-05-18 |
| secretsifter-desktop |
7 |
6 |
Standalone desktop app for macOS & Windows — sca... |
2026-04-29 |
| Ultimate-ssrf-Framework |
7 |
0 |
Advanced SSRF discovery, validation and analysis f... |
2026-06-14 |
| burpflow |
7 |
3 |
BurpFlow is one of the best Burp Suite automation ... |
2026-07-06 |
| v3nomEyE |
7 |
2 |
Automated P1 bug bounty framework — 17-phase re... |
2026-05-19 |
| bb-reformater |
7 |
0 |
A browser extension that helps bug bounty hunters ... |
2026-02-21 |
| Pentest-Pro |
7 |
0 |
An advanced, centralized toolkit and methodology d... |
2026-04-06 |
| Endpoints-Monitor |
7 |
0 |
A tool designed to help bug bounty hunters monitor... |
2026-05-20 |
| cybertools-api |
7 |
0 |
A versatile FastAPI-powered toolkit made for secur... |
2026-05-13 |
| Lotus |
7 |
1 |
An automated bash script for maximum coverage web ... |
2026-06-07 |
| JS-Recon |
7 |
1 |
JS Recon Analyzer is a powerful, local-first secur... |
2026-06-25 |
| BurpShot |
7 |
0 |
🚀 BurpShot – A high-performance Burp Suite ex... |
2026-06-05 |
| posrare |
7 |
0 |
"A tool for security researchers and bug bounty hu... |
2025-05-09 |
| CS2-P2C-TEMPLATES |
7 |
1 |
Шаблоны и research-репорты по CS2... |
2026-07-12 |
| Port_scanner |
7 |
0 |
A fast port scanner written in go with a focus on ... |
2024-07-18 |
| GmapsXploit |
7 |
0 |
GmapsXploit audits Google Maps, Places, Roads, and... |
2026-07-07 |
| Hunting-With-L0WK3Y |
7 |
1 |
This repository documents my path from cybersecuri... |
2026-03-25 |
| GoRecon |
7 |
1 |
Next-generation, modular penetration testing frame... |
2026-05-04 |
| R3CON-X |
7 |
0 |
R3CON-X is a Python-based automated recon tool for... |
2026-03-05 |
| Fuzzblitz |
7 |
0 |
Web Fuzzer & Vulnerability Scanner for Penetratio... |
2026-03-28 |
| LinkHub |
7 |
0 |
This program takes in the Html of an organization'... |
2026-04-24 |
| Bug-Bounty-3 |
6 |
33 |
Here Are Some Collected resource from twitter |
2025-09-04 |
| tts-bug-bounty-dashboard |
6 |
6 |
A prototype dashboard for the TTS bug bounty progr... |
2024-03-12 |
| BugBounty |
6 |
3 |
No description |
2024-02-03 |
| Bug-Bounty-Scriptssss |
6 |
4 |
scripts for our bug bounty methodology |
2021-09-29 |
| Bug_Bounty_Tools |
6 |
4 |
Random tools I've made for bug bounty hunting |
2024-10-09 |
| BugBountyAutomation |
6 |
3 |
No description |
2024-08-12 |
| practical-bug-bounty-content |
6 |
4 |
No description |
2026-06-07 |
| bug-bounty |
6 |
3 |
The bug bounties for the product testers which beg... |
2022-07-05 |
| BugBounty |
6 |
2 |
Automation of some bug bounty tools for my persona... |
2025-05-12 |
| BugBountyFile |
6 |
2 |
No description |
2026-03-23 |
| Hunting-automation |
6 |
2 |
Bug-bounty helper |
2026-03-02 |
| BountyReport |
6 |
2 |
Make your bug bounty report easy and fast. |
2023-11-07 |
| bug-bounty |
6 |
2 |
No description |
2024-04-25 |
| GoldExperience-BugBountyTool |
6 |
2 |
The ultimate tool for recon! |
2026-01-22 |
| security-bug-bounty |
6 |
2 |
Ecwid bug bounty program. |
2024-08-26 |
| bug-bounty-automation |
6 |
2 |
WIP Bug Bounty Automation |
2026-05-15 |
| Bug-bounty-notes |
6 |
2 |
Bug-bounty related notes |
2024-05-14 |
| succinct-bug-bounty |
6 |
2 |
No description |
2026-06-15 |
| Bug-Bounty-Utilities |
6 |
2 |
No description |
2026-06-06 |
| intigriti-slack-announce |
6 |
4 |
Go bot that publishes new intigriti bug bounty fin... |
2024-01-31 |
| Web-Application-Hacks |
6 |
2 |
Web Application Vulnerabilities, Bug Bounty |
2023-08-24 |
| bugbountydorks |
6 |
4 |
This repo contains all the Bug Bounty Dorks source... |
2025-10-27 |
| bug-hunting-toolkit |
6 |
3 |
Sleek command generator and resource hub for bug b... |
2026-01-13 |
| prompt |
6 |
2 |
Prompting Framework for web app bug bounty / pente... |
2026-07-09 |
| infosec-notes |
6 |
2 |
Notes about web application security, pentesting, ... |
2023-02-20 |
| PsychomongAUTOVAPT |
6 |
0 |
Bug Bounty Automation |
2024-07-08 |
| bugbounty-CVE-Report |
6 |
1 |
Bug bounty Report/ CVS and buig bounty tips |
2026-06-20 |
| BugPub |
6 |
1 |
The First Web3 Bug Bounty Marketplace |
2026-05-25 |
| My-BB-Scripts |
6 |
2 |
This repository contains that I use personally in ... |
2026-06-02 |
| bug-bounty-automation |
6 |
0 |
Bug bounty automation script |
2026-05-07 |
| Bug-Bounty-scripts |
6 |
1 |
No description |
2023-05-03 |
| mokens-bug-bounty |
6 |
1 |
Bug Bounty Program for Mokens Contract |
2022-10-10 |
| mastermind-bug-bounty |
6 |
1 |
结å�ˆè‡ªå·±æŒ–掘æ€�路的优化版，会æŒ�ç»è¿ |
2026-07-13 |
| darkrecon |
6 |
0 |
Bug Bounty Recon Automation Tool |
2026-07-12 |
| v2-bug-bounty |
6 |
0 |
https://sandbox.bidder.top |
2022-04-23 |
| bug-bounty-reference_ngalongc |
6 |
1 |
No description |
2025-06-28 |
| Bug-Bounty-Labs-Plataforma |
6 |
0 |
¡Bienvenido a Bug Bounty Labs! 🚀 Una plataform... |
2026-03-24 |
| Bug-Bounty-Reports-Ext |
6 |
0 |
No description |
2025-10-10 |
| 0din.ai |
6 |
2 |
The zero day investigative network (0din) is a Gen... |
2026-04-17 |
| Bugbounty-Reports |
6 |
0 |
My bug bounty write-ups and responsible disclosure... |
2026-07-11 |
| bbcrawler |
6 |
1 |
[OBSOLETE REPO] Bug Bounty Crawler and bot new rep... |
2023-07-20 |
| GDID |
6 |
2 |
Script made for your recon automation in Bug Bount... |
2024-01-12 |
| Google_map_api_scanner |
6 |
3 |
Now you can scan your google map api to see its vu... |
2025-04-07 |
| host-header-injection-tool |
6 |
0 |
Host Header Injection Automation Tool for Bug Boun... |
2026-07-11 |
| uabb |
6 |
0 |
Programs, Peoples, Companies and Resources about B... |
2025-08-17 |
| PenTest-Toolkit |
6 |
2 |
A modular penetration testing toolkit covering rec... |
2026-05-22 |
| Github_Brute-Dork |
6 |
2 |
Python script designed to identify Github search t... |
2025-09-22 |
| Owasp-CVSS-Risk-Calculator |
6 |
3 |
This Repository was build based on OWASP Risk Rank... |
2026-04-06 |
| Enumerator |
6 |
2 |
Enumerate all website listed under various bug bou... |
2023-08-09 |
| secretsifter-extension |
6 |
5 |
Live secrets and credentials scanner for Chrome. D... |
2026-04-24 |
| VulnHawk |
6 |
0 |
Welcome to VulnHawk, the cutting-edge tool designe... |
2025-07-27 |
| ChatGPT-Pentesting-Personality |
6 |
1 |
Collection of resources to make a more optimized C... |
2024-06-29 |
| core |
6 |
4 |
Minimal DAG-BFT blockchain in Rust. Sub-4 MB full-... |
2026-06-29 |
| Deptakeover |
6 |
0 |
Package takeover finder for bug bounty hunting. Sc... |
2026-06-28 |