| PayloadsAllTheThings |
81833 |
17477 |
A list of useful payloads and bypass for Web Appli... |
2026-10-19 |
| dirsearch |
14976 |
2458 |
Web path scanner |
2026-10-18 |
| subfinder |
14614 |
1636 |
Fast passive subdomain enumeration tool. |
2026-10-19 |
| nuclei-templates |
13121 |
3699 |
Community curated list of templates for the nuclei... |
2026-10-19 |
| hetty |
12514 |
822 |
An HTTP toolkit for security research. |
2026-10-19 |
| Resources-for-Beginner-Bug-Bounty-Hunters |
12277 |
2057 |
A list of resources for those interested in gettin... |
2026-10-18 |
| awesome-hacker-search-engines |
11347 |
1148 |
A curated list of awesome search engines useful du... |
2026-10-18 |
| bbot |
10716 |
936 |
The recursive internet scanner for hackers. 🧡 |
2026-10-19 |
| httpx |
10489 |
1179 |
httpx is a fast and multi-purpose HTTP toolkit tha... |
2026-10-19 |
| OneForAll |
10113 |
1436 |
OneForAll是一款功能强大的å�åŸŸæ”¶é›†å·¥å… |
2026-10-19 |
| wstg |
10057 |
1717 |
The Web Security Testing Guide is a comprehensive ... |
2026-10-19 |
| rengine |
8880 |
1348 |
reNgine is an automated reconnaissance framework f... |
2026-10-19 |
| reconftw |
8194 |
1243 |
reconFTW is a tool designed to perform automated r... |
2026-10-19 |
| HowToHunt |
7367 |
1985 |
Collection of methodology and test case for variou... |
2026-10-17 |
| AllAboutBugBounty |
6932 |
1269 |
All about bug bounty (bypasses, payloads, and etc) |
2026-10-18 |
| DefaultCreds-cheat-sheet |
6791 |
788 |
One place for all the default credentials to assis... |
2026-10-18 |
| hackerone-reports |
6608 |
1160 |
Top disclosed reports from HackerOne |
2026-10-19 |
| osmedeus |
6605 |
1036 |
A Modern Orchestration Engine for Security |
2026-10-19 |
| bugbounty-cheatsheet |
6567 |
1621 |
A list of interesting payloads, tips and tricks fo... |
2026-10-18 |
| apkleaks |
6354 |
599 |
Scanning APK file for URIs, endpoints & secrets. |
2026-10-18 |
| awesome-bugbounty-tools |
6329 |
1022 |
A curated list of various bug bounty tools |
2026-10-19 |
| scan4all |
6181 |
717 |
Official repository vuls Scan: 15000+PoCs; 23 kin... |
2026-10-18 |
| Awesome-Bugbounty-Writeups |
6160 |
1228 |
A curated list of bugbounty writeups (Bug type wis... |
2026-10-18 |
| commix |
5887 |
940 |
Automated Αll-in-One OS command injection exploit... |
2026-10-18 |
| can-i-take-over-xyz |
5824 |
806 |
"Can I take over XYZ?" — a list of services and ... |
2026-10-18 |
| dalfox |
5326 |
567 |
🌙🦊 Dalfox is a powerful open-source XSS scan... |
2026-10-18 |
| Claude-BugHunter |
5165 |
787 |
A Claude Code skill bundle for bug hunting and ext... |
2026-10-19 |
| hakrawler |
5147 |
538 |
Simple, fast web crawler designed for easy, quick ... |
2026-10-17 |
| WebHackersWeapons |
5091 |
853 |
⚔� Web Hacker's Weapons / A collection of cool... |
2026-10-18 |
| interactsh |
4593 |
487 |
An OOB interaction gathering server and client lib... |
2026-10-17 |
| malicious-pdf |
4484 |
594 |
💀 Generate malicious PDF test files for testing... |
2026-10-18 |
| knockpy |
4202 |
873 |
Knock Subdomain Scan |
2026-10-18 |
| IntruderPayloads |
3987 |
1176 |
A collection of Burpsuite Intruder payloads, BurpB... |
2026-10-17 |
| Fuzzing101 |
3914 |
432 |
An step by step fuzzing tutorial. A GitHub Securit... |
2026-10-19 |
| Findomain |
3794 |
397 |
The fastest and complete solution for domain recog... |
2026-10-18 |
| cariddi |
3793 |
345 |
Take a list of domains, crawl urls and scan for en... |
2026-10-17 |
| vulnerability-Checklist |
3656 |
845 |
This repository contain a lot of web and api vulne... |
2026-10-18 |
| awesome-mobile-security |
3564 |
380 |
An effort to build a single place for all useful a... |
2026-10-18 |
| pagodo |
3409 |
555 |
pagodo (Passive Google Dork) - Automate Google Hac... |
2026-10-18 |
| NoSQLMap |
3362 |
627 |
Automated NoSQL database enumeration and web appli... |
2026-10-18 |
| pentest-tools |
3344 |
777 |
A collection of custom security tools for quick ne... |
2026-10-19 |
| OneListForAll |
3269 |
542 |
Rockyou for web fuzzing |
2026-10-17 |
| awesome-oneliner-bugbounty |
3200 |
627 |
A collection of awesome one-liner scripts especial... |
2026-10-18 |
| ParamSpider |
3195 |
480 |
Mining URLs from dark corners of Web Archives for... |
2026-10-17 |
| S3Scanner |
3176 |
413 |
Scan for misconfigured S3 buckets across S3-compat... |
2026-10-18 |
| uncover |
3086 |
280 |
Quickly discover exposed hosts on the internet usi... |
2026-10-17 |
| gospider |
3008 |
335 |
Gospider - Fast web spider written in Go |
2026-10-16 |
| pentest-guide |
2842 |
571 |
Penetration tests guide based on OWASP including t... |
2026-10-17 |
| Web-Fuzzing-Box |
2799 |
444 |
Web Fuzzing Box - Web 模糊测试å—典与一些P |
2026-10-17 |
| reFlutter |
2779 |
295 |
Flutter Reverse Engineering Framework |
2026-10-18 |
| caido |
2700 |
154 |
🚀 Caido releases, wiki and roadmap |
2026-10-19 |
| gitGraber |
2453 |
375 |
gitGraber: monitor GitHub to search and find sensi... |
2026-10-16 |
| Sudomy |
2441 |
415 |
Sudomy is a subdomain enumeration tool to collect ... |
2026-10-18 |
| Tiny-XSS-Payloads |
2399 |
217 |
A collection of tiny XSS Payloads that can be used... |
2026-10-17 |
| jaeles |
2379 |
335 |
The Swiss Army knife for automated Web Application... |
2026-10-14 |
| ezXSS |
2349 |
385 |
ezXSS is an easy way for penetration testers and b... |
2026-10-14 |
| BruteX |
2312 |
639 |
Automatically brute force all services running on ... |
2026-10-15 |
| puredns |
2254 |
191 |
Puredns is a fast domain resolver and subdomain br... |
2026-10-17 |
| 31-days-of-API-Security-Tips |
2242 |
348 |
This challenge is Inon Shkedy's 31 days API Securi... |
2026-10-13 |
| OWASP-Web-Checklist |
2216 |
421 |
OWASP Web Application Security Testing Checklist |
2026-10-18 |
| Galaxy-Bugbounty-Checklist |
2205 |
458 |
Tips and Tutorials for Bug Bounty and also Penetra... |
2026-10-18 |
| subjack |
2124 |
346 |
DNS Takeover tool written in Go |
2026-10-18 |
| x8 |
2097 |
196 |
Hidden parameters discovery suite |
2026-10-18 |
| Dictionary-Of-Pentesting |
2081 |
375 |
Dictionary collection project such as Pentesing, F... |
2026-10-17 |
| BugBountyBooks |
2052 |
499 |
A collection of PDF/books about the modern web app... |
2026-10-18 |
| HolyTips |
2025 |
337 |
A Collection of Notes, Checklists, Writeups on Bug... |
2026-10-18 |
| learn365 |
1994 |
454 |
This repository is about @harshbothra_'s 365 days ... |
2026-10-16 |
| Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes |
1969 |
315 |
A comprehensive guide for web application penetrat... |
2026-10-18 |
| ScopeSentry |
1950 |
401 |
ScopeSentry-Cyberspace mapping, subdomain enumerat... |
2026-10-19 |
| Awesome-RCE-techniques |
1940 |
216 |
Awesome list of step by step techniques to achiev... |
2026-10-16 |
| SubDomainizer |
1903 |
234 |
A tool to find subdomains and interesting things h... |
2026-10-16 |
| nomore403 |
1898 |
220 |
🚫 Advanced tool for security researchers to byp... |
2026-10-17 |
| BruteForceAI |
1885 |
411 |
Advanced LLM-powered brute-force tool combining AI... |
2026-10-19 |
| Findsploit |
1855 |
332 |
Find exploits in local and online databases instan... |
2026-10-15 |
| metabigor |
1855 |
218 |
OSINT power without API key hassle |
2026-10-19 |
| top25-parameter |
1848 |
280 |
For basic researches, top 25 vulnerability paramet... |
2026-10-15 |
| BlackWidow |
1828 |
388 |
A Python based web application scanner to gather O... |
2026-10-17 |
| BurpBounty |
1817 |
336 |
Burp Bounty (Scan Check Builder in BApp Store) is ... |
2026-10-17 |
| gotestwaf |
1815 |
259 |
An open-source project in Golang to asess differen... |
2026-10-18 |
| inql |
1813 |
188 |
InQL is a robust, open-source Burp Suite extension... |
2026-10-18 |
| wordlists |
1803 |
206 |
Real-world infosec wordlists, updated regularly |
2026-10-17 |
| metlo |
1790 |
111 |
Metlo is an open-source API security platform. |
2026-10-13 |
| Android-Reports-and-Resources |
1716 |
335 |
A big list of Android Hackerone disclosed reports ... |
2026-10-16 |
| urlhunter |
1700 |
110 |
a recon tool that allows searching on URLs that ar... |
2026-10-14 |
| requests-ip-rotator |
1679 |
172 |
A Python library to utilize AWS API Gateway's larg... |
2026-10-16 |
| One-Liners |
1628 |
294 |
A collection of one-liners for bug bounty hunting. |
2026-10-13 |
| inventory |
1612 |
282 |
Asset inventory of over 800 public bug bounty prog... |
2026-10-14 |
| subzy |
1604 |
201 |
Subdomain takeover vulnerability checker |
2026-10-17 |
| GooFuzz |
1590 |
158 |
GooFuzz is a tool to perform fuzzing with an OSINT... |
2026-10-14 |
| BigBountyRecon |
1575 |
287 |
BigBountyRecon tool utilises 58 different techniqu... |
2026-10-18 |
| burp-ai-agent |
1546 |
230 |
Burp Suite extension that adds built-in MCP toolin... |
2026-10-18 |
| github-search |
1516 |
354 |
A collection of tools to perform searches on GitHu... |
2026-10-17 |
| awesome-vulnerable-apps |
1495 |
230 |
Awesome Vulnerable Applications |
2026-10-14 |
| AWSBucketDump |
1471 |
245 |
Security Tool to Look For Interesting Files in S3 ... |
2026-10-09 |
| git-hound |
1469 |
206 |
Fast GitHub recon tool. Scans for leaked secrets a... |
2026-10-15 |
| reFlutter |
1465 |
188 |
Flutter Reverse Engineering Framework |
2026-10-13 |
| bruteforce-lists |
1445 |
406 |
Some files for bruteforcing certain things. |
2026-10-17 |
| API-SecurityEmpire |
1445 |
252 |
API Security Project aims to present unique attack... |
2026-10-08 |
| Bug-Bounty-Wordlists |
1437 |
367 |
A repository that includes all the important wordl... |
2026-10-16 |
| agent |
1404 |
274 |
Agentic offensive-security in your terminal |
2026-10-18 |
| google-dorks |
1401 |
250 |
Useful Google Dorks for WebSecurity and Bug Bounty |
2026-10-17 |
| awesome-hacking-lists |
1396 |
266 |
A curated collection of top-tier penetration testi... |
2026-10-18 |
| XSpear |
1358 |
234 |
🔱 Powerfull XSS Scanning and Parameter analysis... |
2026-10-14 |
| public-bugbounty-programs |
1355 |
392 |
Community curated list of public bug bounty and re... |
2026-10-18 |
| PwnFox |
1355 |
129 |
PwnFox is a Firefox/Burp extension that provide us... |
2026-10-19 |
| vapi |
1354 |
340 |
vAPI is Vulnerable Adversely Programmed Interface ... |
2026-10-13 |
| FavFreak |
1317 |
179 |
Making Favicon.ico based Recon Great again ! |
2026-10-13 |
| bypass-firewalls-by-DNS-history |
1314 |
262 |
Firewall bypass script based on DNS history record... |
2026-10-13 |
| VHostScan |
1313 |
237 |
A virtual host scanner that performs reverse looku... |
2026-10-18 |
| Interlace |
1308 |
189 |
Easily turn single threaded command line applicati... |
2026-10-17 |
| go-dork |
1307 |
139 |
The fastest dork scanner written in Go. |
2026-10-13 |
| MobileHackersWeapons |
1306 |
215 |
Mobile Hacker's Weapons / A collection of cool too... |
2026-10-14 |
| nuclei-wordfence-cve |
1297 |
159 |
80k+ WordPress Nuclei templates, updated daily fro... |
2026-10-17 |
| webcopilot |
1294 |
201 |
An automation tool that enumerates subdomains then... |
2026-10-14 |
| Redcloud |
1278 |
204 |
Automated Red Team Infrastructure deployement usin... |
2026-10-18 |
| scilla |
1272 |
143 |
Information Gathering tool - DNS / Subdomains / Po... |
2026-10-12 |
| ksubdomain |
1228 |
166 |
Subdomain enumeration tool, asynchronous dns packe... |
2026-10-18 |
| shortscan |
1228 |
119 |
An IIS short filename enumeration tool |
2026-10-16 |
| Web-Cache-Vulnerability-Scanner |
1207 |
161 |
Web Cache Vulnerability Scanner is a Go-based CLI ... |
2026-10-14 |
| leaky-paths |
1197 |
171 |
A collection of special paths linked to common sen... |
2026-10-17 |
| ipranges |
1196 |
171 |
🔨 List all IP ranges from: Google (Cloud & Goog... |
2026-10-18 |
| BugBountyToolkit |
1194 |
281 |
A multi-platform bug bounty toolkit that can be in... |
2026-10-18 |
| vulnerable-code-snippets |
1184 |
222 |
Twitter vulnerable snippets |
2026-10-14 |
| HostHunter |
1174 |
193 |
HostHunter a recon tool for discovering hostnames ... |
2026-10-12 |
| CloudBrute |
1150 |
162 |
Awesome cloud enumerator |
2026-10-16 |
| BountyHunterInChina |
1144 |
125 |
é‡�生之我在安全行业讨å�£å�系列，分äº... |
2026-10-16 |
| JSFScan.sh |
1109 |
186 |
Automation for javascript recon in bug bounty. |
2026-10-16 |
| can-i-take-over-dns |
1108 |
99 |
"Can I take over DNS?" — a list of DNS providers... |
2026-10-15 |
| jwt-hack |
1089 |
131 |
JSON Web Token Hack Toolkit |
2026-10-18 |
| airecon |
1076 |
169 |
AIRecon is an autonomous cybersecurity agent that ... |
2026-10-18 |
| sitedorks |
1063 |
125 |
Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo ... |
2026-10-15 |
| magicRecon |
1055 |
163 |
MagicRecon is a powerful shell script to maximize ... |
2026-10-14 |
| cent |
1051 |
165 |
Community edition nuclei templates, a simple tool ... |
2026-10-13 |
| Hacking-Tools |
1049 |
266 |
This Repository is a collection of different ethic... |
2026-10-18 |
| mantis |
1039 |
138 |
Mantis is a security framework that automates the ... |
2026-10-18 |
| karma_v2 |
1035 |
190 |
â¡·â ‚ð�š”ð�šŠð�š›ð�š–ð�šŠ ð�šŸð�Ÿ¸â �⢾ is a Pas... |
2026-10-16 |
| ARL-plus-docker |
1000 |
158 |
基于ARL-V2.6.2修改�的版本 |
2026-10-14 |
| PrivEsc |
992 |
304 |
A collection of Windows, Linux and MySQL privilege... |
2026-10-15 |
| fuzz4bounty |
988 |
181 |
1337 Wordlists for Bug Bounty Hunting |
2026-10-18 |
| SpiderSuite |
987 |
126 |
SpiderSuite (web security crawler) releases, wiki ... |
2026-10-18 |
| subscraper |
977 |
108 |
Subdomain and target enumeration tool built for of... |
2026-10-09 |
| SubOver |
968 |
197 |
A Powerful Subdomain Takeover Tool |
2026-10-12 |
| CVE-2021-44228-PoC-log4j-bypass-words |
952 |
133 |
��💻 ✂� 🤬 CVE-2021-44228 - LOG4J Jav... |
2026-10-17 |
| mantra |
944 |
97 |
「🔑�A tool used to hunt down API key leaks i... |
2026-10-16 |
| Bug-Bounty-Methodology |
937 |
122 |
These are my checklists which I use during my hunt... |
2026-10-14 |
| Web-App-Pentest-Checklist |
925 |
198 |
A OWASP Based Checklist With 500+ Test Cases |
2026-10-19 |
| BugBountyScanner |
924 |
124 |
A Bash script and Docker image for Bug Bounty reco... |
2026-10-15 |
| security-tools |
924 |
183 |
My collection of various security tools created mo... |
2026-10-08 |
| urlfinder |
919 |
69 |
A high-speed tool for passively gathering URLs, op... |
2026-10-17 |
| sectemplates |
916 |
129 |
Open source templates you can use to bootstrap you... |
2026-10-12 |
| awesome-list-of-secrets-in-environment-variables |
913 |
77 |
🦄🔒 Awesome list of secrets in environment va... |
2026-10-12 |
| misconfig-mapper |
908 |
78 |
Misconfig Mapper is a fast tool to help you uncove... |
2026-10-14 |
| Awesome-Smart-Contract-Security |
907 |
176 |
A curated list of Smart Contract Security material... |
2026-10-17 |
| ReconAIzer |
905 |
113 |
A Burp Suite extension to add OpenAI (GPT) on Burp... |
2026-10-15 |
| getJS |
903 |
122 |
A tool to fastly get all javascript sources/files |
2026-10-08 |
| netlas-cookbook |
894 |
112 |
The goal of this guide is very simple - to teach a... |
2026-10-15 |
| apk2url |
881 |
101 |
An OSINT tool to quickly extract IP and URL endpoi... |
2026-10-16 |
| github-subdomains |
874 |
120 |
Find subdomains on GitHub. |
2026-10-19 |
| StaCoAn |
870 |
141 |
StaCoAn is a crossplatform tool which aids develop... |
2026-10-09 |
| findom-xss |
869 |
113 |
A fast DOM based XSS vulnerability scanner with si... |
2026-10-08 |
| Bug_Bounty_writeups |
855 |
124 |
BUG BOUNTY WRITEUPS - OWASP TOP 10 🔴🔴🔴🔠|
2026-10-17 |
| Facebook-BugBounty-Writeups |
851 |
152 |
Collection of Facebook Bug Bounty Writeups |
2026-10-17 |
| censys-subdomain-finder |
848 |
132 |
âš¡ Perform subdomain enumeration using the certif... |
2026-10-16 |
| n0kovo_subdomains |
846 |
111 |
An extremely effective subdomain enumeration wordl... |
2026-10-18 |
| OneDorkForAll |
829 |
198 |
An insane list of all dorks taken from everywhere ... |
2026-10-18 |
| ShadowClone |
823 |
116 |
Unleash the power of cloud |
2026-10-13 |
| h2csmuggler |
820 |
121 |
HTTP Request Smuggling over HTTP/2 Cleartext (h2c) |
2026-10-19 |
| Web_Hacking |
819 |
151 |
Bug Bounty Tricks and useful payloads and bypasses... |
2026-10-18 |
| Subdominator |
811 |
128 |
SubDominator helps you discover subdomains associa... |
2026-10-18 |
| Garud |
811 |
179 |
An automation tool that scans sub-domains, sub-dom... |
2026-10-13 |
| emploleaks |
798 |
67 |
An OSINT tool that helps detect members of a compa... |
2026-10-15 |
| socialhunter |
774 |
84 |
crawls the website and finds broken social media l... |
2026-10-14 |
| offensive-docker |
770 |
156 |
Offensive Docker is an image with the more used of... |
2026-10-12 |
| EmailAll |
754 |
121 |
EmailAll is a powerful Email Collect tool — 一æ... |
2026-10-18 |
| assessment-mindset |
753 |
115 |
Security Mindmap that could be useful for the info... |
2026-09-26 |
| CyberPhish |
744 |
112 |
A heavily armed customizable phishing tool for edu... |
2026-10-14 |
| awesome-mcp-security |
743 |
288 |
🔥🔒 Awesome MCP (Model Context Protocol) Secu... |
2026-10-11 |
| secret-regex-list |
737 |
71 |
List of regex for scraping secret API keys and jui... |
2026-10-12 |
| ZeusCloud |
737 |
54 |
Open Source Cloud Security |
2026-10-16 |
| arsenal-ng |
736 |
109 |
The classic launcher, evolved. Fast, Go-based comm... |
2026-10-17 |
| jsmon |
735 |
118 |
a javascript change monitoring tool for bugbountie... |
2026-10-12 |
| TOP |
731 |
126 |
TOP All bugbounty pentesting CVE-2023- POC Exp RC... |
2026-10-19 |
| keyFinder |
726 |
128 |
Passive API key and secret discovery browser exten... |
2026-10-18 |
| domained |
721 |
151 |
Multi Tool Subdomain Enumeration |
2026-10-08 |
| GDorks |
715 |
113 |
Google Dork List - Uncover the Hidden Gems of the ... |
2026-10-18 |
| chiasmodon |
703 |
59 |
Chiasmodon is an OSINT tool designed to assist in... |
2026-10-14 |
| docem |
692 |
107 |
A tool to embed XXE and XSS payloads in docx, od... |
2026-10-14 |
| scant3r |
685 |
149 |
ScanT3r - Module based Bug Bounty Automation Tool ... |
2026-10-15 |
| Application-Security |
685 |
62 |
Resources for Application Security including Web, ... |
2026-09-25 |
| awesome-bugbounty-builder |
678 |
131 |
Awesome Bug bounty builder Project |
2026-10-11 |
| ppfuzz |
674 |
72 |
A fast tool to scan client-side prototype pollutio... |
2026-10-16 |
| jfscan |
667 |
89 |
JFâš¡can - Super fast port scanning & service disc... |
2026-10-02 |
| Bug-Bounty |
666 |
111 |
Bug Bounty ~ Awesomes |
Books |
| samlists |
663 |
93 |
Free, libre, effective, and data-driven wordlists ... |
2026-10-02 |
| SonarSearch |
651 |
96 |
A rapid API for the Project Sonar dataset |
2026-10-02 |
| SQLiDetector |
645 |
113 |
Simple python script supported with BurpBouty prof... |
2026-10-13 |
| awesome-cicd-attacks |
636 |
58 |
Practical resources for offensive CI/CD security r... |
2026-10-18 |
| JSshell |
633 |
110 |
JSshell - JavaScript reverse/remote shell |
2026-09-03 |
| AutorizePro |
624 |
38 |
🧿 AutorizePro是一款强大越æ�ƒæ£€æµ‹ Burp æ... |
2026-10-18 |
| DarkAngel |
603 |
78 |
DarkAngel 是一款全自动白帽æ¼�洞扫æ��器ï... |
2026-10-11 |
| CRLFsuite |
602 |
82 |
The most powerful CRLF injection (HTTP Response Sp... |
2026-10-14 |
| leaker |
601 |
86 |
Passive leak enumeration tool. |
2026-10-18 |
| Gxss |
600 |
85 |
A tool to check a bunch of URLs that contain refle... |
2026-10-16 |
| gato-x |
593 |
62 |
GitHub Attack Toolkit - Extreme Edition - A static... |
2026-10-19 |
| basecrack |
585 |
90 |
Decode All Bases - Base Scheme Decoder |
2026-10-15 |
| vulnrepo |
584 |
118 |
VULNRΞPO - Free vulnerability report generator an... |
2026-10-14 |
| bXSS |
581 |
63 |
bXSS is a utility which can be used by bug hunters... |
2026-10-18 |
| webHunt |
577 |
150 |
Web App bug hunting |
2026-10-14 |
| awsome-security-write-ups-and-POCs |
574 |
123 |
Awesome Writeups and POCs |
2026-10-16 |
| Komo |
566 |
66 |
🚀Komo, a comprehensive asset collection and vul... |
2026-10-14 |
| TheTimeMachine |
553 |
81 |
Weaponizing WaybackUrls for Recon, BugBounties , O... |
2026-10-18 |
| SecurityExplained |
550 |
102 |
SecurityExplained is a new series after the previo... |
2026-10-12 |
| Dome |
544 |
73 |
Dome - Subdomain Enumeration Tool. Fast and reliab... |
2026-10-14 |
| webapp-wordlists |
537 |
120 |
This repository contains wordlists for each versio... |
2026-10-16 |
| bugbounty |
536 |
100 |
Bugbounty Resources |
2026-10-13 |
| gotator |
536 |
67 |
Gotator is a tool to generate DNS wordlists throug... |
2026-10-17 |
| CloudScraper |
536 |
115 |
CloudScraper: Tool to enumerate targets in search ... |
2026-10-12 |
| csprecon |
531 |
52 |
Discover new target domains using Content Security... |
2026-10-16 |
| Logsensor |
528 |
85 |
A Powerful Sensor Tool to discover login panels, a... |
2026-10-15 |
| ppmap |
518 |
72 |
A scanner/exploitation tool written in GO, which l... |
2026-10-05 |
| BugBountyTemplates |
511 |
105 |
A collection of templates for bug bounty reporting |
2026-10-17 |
| exifLooter |
498 |
30 |
ExifLooter finds geolocation on all image urls and... |
2026-10-17 |
| Android-Pentesting-Checklist |
485 |
100 |
Delve into a comprehensive checklist, your ultimat... |
2026-10-16 |
| bugbounty-lab101 |
479 |
79 |
A complete bug bounty workspace for HackerOne rese... |
2026-10-16 |
| awesome-attack-surface-monitoring |
478 |
66 |
Curated list of open-source & paid Attack Surface ... |
2026-10-16 |
| web3-security-resources |
472 |
74 |
Curated Web3 security learning hub for smart contr... |
2026-10-15 |
| bugbountyguide |
471 |
108 |
Bug Bounty Guide is a launchpad for bug bounty pro... |
2026-10-15 |
| RegHex |
467 |
74 |
A collection of regexes for every possbile use |
2026-10-13 |
| ARL-Next |
466 |
76 |
Modern attack-surface reconnaissance & asset monit... |
2026-10-19 |
| hakip2host |
465 |
65 |
hakip2host takes a list of IP addresses via stdin,... |
2026-09-25 |
| HawkScan |
461 |
88 |
Security Tool for Reconnaissance and Information G... |
2026-10-09 |
| oneliner-bugbounty |
459 |
72 |
oneliner commands for bug bounties |
2026-10-06 |
| DDoSlayer |
459 |
100 |
An Advanced Layer 7 DDoS tool, Able to bypass CF a... |
2026-10-06 |
| Offensive-Payloads |
459 |
152 |
List of payloads and wordlists that are specifical... |
2026-10-18 |
| recon-pipeline |
455 |
98 |
An automated target reconnaissance pipeline. |
2026-10-13 |
| LazyRecon |
453 |
104 |
An automated approach to performing recon for bug ... |
2026-10-02 |
| missing-cve-nuclei-templates |
453 |
49 |
Weekly updated list of missing CVEs in nuclei temp... |
2026-10-18 |
| Bug-Bounty-Agents |
450 |
76 |
AI-Powered Agents for Bub-Bounty Pentesting and Re... |
2026-10-17 |
| bug-bounties |
446 |
78 |
⚔� Community maintained directory, MCP and API... |
2026-10-19 |
| bugbounty |
445 |
98 |
No description |
2026-10-02 |
| fallparams |
442 |
52 |
Find All Parameters - Tool to crawl pages, find po... |
2026-10-01 |
| allsafe-android |
441 |
122 |
Intentionally vulnerable Android application. |
2026-10-14 |
| firefly |
438 |
41 |
Black box fuzzer for web applications |
2026-10-18 |
| BypassFuzzer |
437 |
53 |
Fuzz 401/403/404 pages for bypasses |
2026-10-15 |
| FOTOSPLOIT- |
435 |
50 |
FotoSploit $ git clone https://github.com/Cesar... |
2026-10-13 |
| Bug-bounty-Writeups |
430 |
72 |
Repository of Bug-Bounty Writeups |
2026-10-07 |
| gosint |
429 |
86 |
Gosint is a distributed asset information collecti... |
2026-09-28 |
| Full-Bug-Bounty-Hunting-Methodology-2026 |
429 |
88 |
How To approach recon on real targets — from pas... |
2026-10-18 |
| watchdog |
429 |
101 |
Watchdog - A Comprehensive Security Scanning and a... |
2026-10-08 |
| Taie-Bugbounty-killer |
428 |
32 |
挖掘国内外æ¼�æ´žå¹³å�°å¿…备的自动化æ�¡é’ |
2026-10-15 |
| authz0 |
428 |
56 |
🔑 Authz0 is an automated authorization test too... |
2026-09-03 |
| bxss |
420 |
55 |
Blind XSS Scanner is a tool that can be used to sc... |
2026-10-18 |
| awesome-search-queries |
416 |
49 |
Community curated list of search queries for vario... |
2026-10-17 |
| BugBounty |
413 |
167 |
RepoToStoreBugBountyInfo |
2026-10-16 |
| urldedupe |
412 |
66 |
Pass in a list of URLs with query strings, get bac... |
2026-10-01 |
| DLLHijackHunter |
408 |
47 |
Automated DLL Hijacking Discovery, Validation, and... |
2026-10-16 |
| mad-metasploit |
406 |
95 |
Metasploit custom modules, plugins, resource scrip... |
2026-10-03 |
| ipsourcebypass |
405 |
52 |
This Python script can be used to bypass IP source... |
2026-10-16 |
| gradejs |
405 |
14 |
GradeJS analyzes production Webpack bundles withou... |
2026-04-16 |
| s3-buckets-finder |
398 |
89 |
Find AWS S3 buckets and test their permissions. |
2026-10-07 |
| lit-bb-hack-tools |
395 |
63 |
Little Bug Bounty & Hacking Tools⚔� |
2026-10-11 |
| domain-protect |
394 |
62 |
OWASP Domain Protect - prevent subdomain takeover |
2026-08-04 |
| GoLinkFinder |
393 |
58 |
A fast and minimal JS endpoint extractor |
2026-10-16 |
| Gsec |
387 |
73 |
Web Security Scanner |
2026-10-14 |
| chameleon |
383 |
48 |
No description |
2026-10-02 |
| keywords |
377 |
183 |
No description |
2026-10-01 |
| match-replace-burp |
374 |
54 |
Useful "Match and Replace" burpsuite rules |
2026-09-24 |
| autossrf |
365 |
43 |
Smart context-based SSRF vulnerability scanner. |
2026-10-13 |
| url-tracker |
362 |
58 |
Change monitoring app that checks the content of w... |
2026-10-17 |
| QuickXSS |
361 |
64 |
Automating XSS using Bash |
2026-10-06 |
| cloudflare-origin-ip |
360 |
68 |
Try to find the origin IP of a webapp protected by... |
2026-10-18 |
| tips-solidity-code-auditors |
358 |
39 |
Gaining the most elusive of tips. Add your input a... |
2026-10-05 |
| sub404 |
355 |
58 |
A python tool to check subdomain takeover vulnerab... |
2026-10-06 |
| cut-cdn |
352 |
54 |
✂� Removing CDN IPs from the list of IP addres |
2026-09-26 |
| pentestmindmap |
351 |
84 |
a mindmap on pentest #pentestmindmap #oscp #lpt #e... |
2026-10-13 |
| 0l4bs |
351 |
48 |
Cross-site scripting labs for web application secu... |
2026-10-18 |
| recon-my-way |
349 |
119 |
This repository created for personal use and added... |
2026-10-02 |
| dora |
348 |
50 |
Find exposed API keys based on RegEx and get explo... |
2026-10-17 |
| XRCross |
346 |
70 |
XRCross is a Reconstruction, Scanner, and a tool f... |
2026-10-15 |
| dorks_hunter |
346 |
63 |
Simple Google Dorks search tool |
2026-10-13 |
| Jira-Lens |
344 |
54 |
Fast and customizable vulnerability scanner For JI... |
2026-09-25 |
| ssrf-sheriff |
343 |
70 |
A simple SSRF-testing sheriff written in Go |
2026-10-16 |
| slicer |
343 |
44 |
A tool to automate the boring process of APK recon |
2026-07-31 |
| CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera |
341 |
31 |
🎩 🤟� [P1-$10,000] Google Chrome, Microsof... |
2026-09-18 |
| Bug-Bounty-Methodology |
335 |
77 |
Bug Bounty Methodology |
2026-10-11 |
| TerminatorZ |
334 |
46 |
TerminatorZ is a highly sophisticated and efficien... |
2026-10-08 |
| TORCH |
333 |
48 |
Karpathy LLM based claude harness for PenetrationT... |
2026-10-15 |
| rescope |
331 |
58 |
Bugbounty scope tool |
2026-10-01 |
| pwn-machine |
331 |
54 |
PwnMachine is a self hosting solution based on doc... |
2026-10-17 |
| pdlist |
331 |
47 |
A passive subdomain finder |
2026-10-12 |
| Bug_Bounty_Tools_and_Methodology |
328 |
85 |
Bug Bounty Tools used on Twitch - Recon |
2026-10-12 |
| jaeles-signatures |
328 |
69 |
Default signature for Jaeles Scanner |
2026-10-11 |
| reconness |
327 |
38 |
ReconNess is a platform to allow continuous recon ... |
2026-10-02 |
| penetration-testing-roadmap |
327 |
54 |
Complete Roadmap for Penetration Testing |
2026-10-18 |
| resources |
325 |
43 |
Tools, data, and contact lists relevant to The dis... |
2026-10-05 |
| DorkAgent |
325 |
53 |
🤖 LLM-powered agent for automated Google Dorkin... |
2026-10-17 |
| InfosecHouse |
320 |
69 |
Tools & Resources for Cyber Security Operations |
2026-10-11 |
| vaf |
318 |
44 |
Vaf is a cross-platform very advanced and fast web... |
2026-10-02 |
| Nightingale |
314 |
58 |
Nightingale Docker for Pentesters is a comprehensi... |
2026-10-15 |
| Afuzz |
307 |
24 |
Afuzz is an automated web path fuzzing tool for th... |
2026-10-18 |
| hijagger |
307 |
24 |
Checks all maintainers of all NPM and Pypi package... |
2026-10-15 |
| knary |
306 |
52 |
A simple HTTP(S) and DNS Canary bot with Slack/Dis... |
2026-10-06 |
| megplus |
305 |
106 |
Automated reconnaissance wrapper — TomNomNom's m... |
2026-10-03 |
| AutoRecon |
305 |
68 |
Simple shell script for automated domain recogniti... |
2026-10-04 |
| Dependency-Confusion |
304 |
41 |
All About Dependency Confusion Attack, (Detecting,... |
2026-10-18 |
| all-about-apikey |
302 |
64 |
Detailed information about API key / OAuth token (... |
2026-09-14 |
| Scan-Spring-GO |
301 |
17 |
Spring 全家桶�洞扫�工具 |
17 个æ¼�æ´žæ... |
| qsfuzz |
300 |
39 |
qsfuzz (Query String Fuzz) allows you to build you... |
2026-09-26 |
| BugBountyTools |
299 |
90 |
Tools that i personally use for Bug Bounty Hunting... |
2026-09-14 |
| GoogleDorker |
299 |
47 |
GoogleDorker - Unleash the power of Google dorking... |
2026-10-18 |
| SubDomz |
298 |
66 |
An Automated Subdomain Enumeration Tool |
2026-10-17 |
| headi |
297 |
60 |
Customisable and automated HTTP header injection |
2026-10-02 |
| lorsrf |
295 |
45 |
Fast CLI tool to find the parameters that can be u... |
2026-10-02 |
| Kali-Linux |
291 |
51 |
A guide to using Kali Linux tools for web penetrat... |
2026-10-17 |
| XSSNow |
290 |
98 |
Find XSS payloads that actually work by filtering ... |
2026-10-13 |
| Bountystrike-sh |
289 |
62 |
Poor (rich?) man's bug bounty pipeline https://dub... |
2026-10-02 |
| Monitorizer |
289 |
53 |
Monitoring framework to detect and report newly fo... |
2026-10-18 |
| Jasmin-Ransomware |
288 |
82 |
Jasmin Ransomware is an advanced red team tool (Wa... |
2026-10-08 |
| dnsprobe |
284 |
55 |
DNSProb is a tool built on top of retryabledns tha... |
2026-10-02 |
| jsubfinder |
283 |
35 |
jsubfinder searches webpages for javascript & anal... |
2026-10-05 |
| vulnerable-mcp-servers-lab |
281 |
62 |
A collection of servers which are deliberately vul... |
2026-10-17 |
| project-black |
279 |
47 |
Pentest/BugBounty progress control with scanning m... |
2026-07-08 |
| mksub |
279 |
27 |
Generate tens of thousands of subdomain combinatio... |
2026-10-13 |
| cc.py |
277 |
44 |
Extracting URLs of a specific target based on the ... |
2026-10-01 |
| Sec-88 |
276 |
74 |
Cyber Security Notes, Methodology, Resources and T... |
2026-10-13 |
| fleex |
275 |
36 |
Fleex makes it easy to create multiple VPS on clou... |
2026-09-15 |
| SecretOpt1c |
274 |
39 |
SecretOpt1c is a Red Team tool that helps uncover ... |
2026-10-16 |
| robofinder |
272 |
30 |
Robofinder fetches historical robots.txt files fro... |
2026-10-14 |
| GarudRecon |
272 |
58 |
GarudRecon automates domain recon with top open-so... |
2026-10-15 |
| contact.sh |
269 |
48 |
An OSINT tool to find contacts in order to report ... |
2026-09-28 |
| bugbountyDorks |
264 |
81 |
This repo contains all the Bug Bounty Dorks source... |
2026-09-24 |
| investigator |
264 |
39 |
An online handy-recon tool |
2026-08-30 |
| BugBounty_CheatSheet |
263 |
54 |
BugBounty_CheatSheet |
2026-09-15 |
| Nucleimonst3r |
263 |
43 |
Nucleimonst3r is a powerful vulnerability scanner ... |
2026-10-14 |
| domscan |
259 |
32 |
Simple tool to scan a website for (DOM-based) XSS ... |
2026-09-16 |
| icp-domains |
254 |
37 |
输入一个域å��，输出ICP备案所有关è�”åŸ |
2026-09-30 |
| AnalyticsRelationships |
253 |
28 |
Get related domains / subdomains by looking at Goo... |
2026-10-04 |
| XORpass |
253 |
44 |
Encoder to bypass WAF filters using XOR operations... |
2026-10-13 |
| bughunter |
252 |
74 |
Tools for BugHunting |
2026-10-19 |
| favirecon |
251 |
35 |
Use favicons to improve your target recon phase. Q... |
2026-10-18 |
| burp-vps-proxy |
249 |
29 |
This Burp Suite extension allows for the automatic... |
2026-09-08 |
| debugHunter |
247 |
8 |
Discover hidden debugging parameters and uncover w... |
2026-10-18 |
| secfiles |
246 |
26 |
My useful files for penetration tests, security as... |
2026-10-19 |
| gf-secrets |
245 |
53 |
Secret and/or credential patterns used for gf. |
2026-10-02 |
| Search-for-all-leaked-keys-secrets-using-one-regex- |
244 |
42 |
Search for all leaked keys/secrets using one regex... |
2026-10-18 |
| s3cXSSer |
244 |
32 |
This extension will help you to detect GET/POST ba... |
2026-10-05 |
| probable_subdomains |
243 |
26 |
Subdomains analysis and generation tool. Reveal th... |
2026-05-04 |
| akca |
242 |
52 |
AKCA Advanced Web Security Scanner |
2026-10-18 |
| wordlistgen |
241 |
41 |
Quickly generate context-specific wordlists for co... |
2026-10-02 |
| cf-check |
238 |
43 |
CloudFlare Checker written in Go |
2026-09-26 |
| android-hacking-101 |
236 |
25 |
This repo is a helpful starting point for those in... |
2026-09-12 |
| BB-datas |
234 |
66 |
Tools and datas related to Bug Bounty. |
2026-08-02 |
| VPS-Bug-Bounty-Tools |
234 |
59 |
Script that automates the installation of the main... |
2026-09-28 |
| Sec_Mind_Maps |
233 |
35 |
cyber security mind maps collection |
2026-09-26 |
| Google-Dorker |
230 |
47 |
Automate dorking while doing bug bounty or other s... |
2026-10-16 |
| AndroidSecNotes |
229 |
59 |
An actively maintained, Self curated notes related... |
2026-10-07 |
| graphinder |
229 |
14 |
🕸� Blazing fast GraphQL endpoints finder usin... |
2026-09-10 |
| bug-bounty-domains |
229 |
48 |
Domains belonging to the most reputed public bug b... |
2026-10-07 |
| request_smuggler |
228 |
30 |
Http request smuggling vulnerability scanner |
2026-07-28 |
| github-endpoints |
228 |
41 |
Find endpoints on GitHub. |
2026-10-16 |
| Hacking-Bug-Bounty-Books |
227 |
60 |
Collection of Combination of 👨��💻Ethica... |
2026-10-18 |
| bbrecon |
227 |
38 |
Python library and CLI for the Bug Bounty Recon AP... |
2026-10-02 |
| learn365 |
226 |
37 |
This repository is about @AnubhavSingh_'s 365 days... |
2026-10-09 |
| prokzee |
225 |
25 |
A cross-platform desktop application for HTTP/HTTP... |
2026-10-12 |
| x8-Burp |
224 |
39 |
Hidden parameters discovery suite |
2026-10-02 |
| pentest_lab |
223 |
54 |
Local penetration testing lab using docker-compose... |
2026-10-15 |
| postleaks |
221 |
40 |
Search for sensitive data in Postman public librar... |
2026-09-25 |
| XSS-Payloads |
221 |
65 |
Collection of XSS Payloads for fun and profit |
2026-10-06 |
| TukTuk |
221 |
24 |
Tool for catching and logging different types of r... |
2026-09-04 |
| PyCript |
221 |
34 |
Burp Suite extension to decrypt/encrypt any encryp... |
2026-09-11 |
| offsectools_www |
220 |
29 |
A vast collection of security tools and resources ... |
2026-10-10 |
| tugarecon |
220 |
34 |
TugaRecon is an advanced subdomain reconnaissance ... |
2026-10-14 |
| asnip |
219 |
26 |
ASN target organization IP range attack surface ma... |
2026-10-06 |
| bbr |
218 |
33 |
An open source tool to aid in command line driven ... |
2026-10-06 |
| dsieve |
218 |
25 |
Filter and enrich a list of subdomains by level |
2026-10-11 |
| quiver |
216 |
42 |
Quiver is the tool to manage all of your tools for... |
2026-08-01 |
| crithit |
214 |
44 |
Takes a single wordlist item and tests it one by o... |
2026-10-01 |
| linx |
213 |
12 |
Reveals invisible links within JavaScript files |
2026-10-02 |
| android-h1 |
212 |
37 |
移动安全�洞挖掘专家SKILL，基于 Hacke... |
2026-10-13 |
| research |
212 |
45 |
Bug Bounty writeups, Vulnerability Research, Tutor... |
2026-10-18 |
| Astra |
211 |
28 |
Astra is a tool to find URLs and secrets inside a ... |
2026-10-02 |
| bugbounty-targets |
210 |
27 |
An automated GitHub Actions-based crawler that fet... |
2026-09-09 |
| privatecollaborator |
210 |
46 |
A script for installing private Burp Collaborator ... |
2026-10-02 |
| pp-finder |
209 |
21 |
PP-finder Help you find gadget for prototype pollu... |
2026-10-18 |
| gofingerprint |
209 |
36 |
GoFingerprint is a Go tool for taking a list of t... |
2026-07-31 |
| osmedeus-base |
208 |
42 |
Build your own reconnaissance system with Osmedeus... |
2026-10-01 |
| jiraffe |
206 |
28 |
One stop place for Jira security reconnaissance an... |
2026-09-19 |
| Bug-Hunting-Colab |
205 |
89 |
A Colab For Bug Hunting! |
2026-03-11 |
| Minesweeper |
203 |
46 |
A Burpsuite plugin (BApp) to aid in the detection ... |
2026-08-21 |
| Reconky-Automated_Bash_Script |
202 |
42 |
Reconky is an great Content Discovery bash script ... |
2026-10-02 |
| tools-tbhm |
201 |
56 |
Tools of "The Bug Hunters Methodology V2 by @jhadd... |
2026-10-05 |
| CloudHunter |
197 |
34 |
AWS, Azure, Alibaba and Google bucket scanner |
2026-09-17 |
| programs-watcher |
196 |
40 |
A Python script designed to monitor bug bounty pro... |
2026-10-01 |
| awesome-cybersec |
196 |
34 |
A collection of awesome platforms, blogs, document... |
2026-10-15 |
| favicorn |
196 |
17 |
All-sources tool to search websites by favicons |
2026-10-18 |
| Pentesting-Bugbounty |
195 |
45 |
Bringing infosec community, group and leaders toge... |
2026-10-02 |
| Awesome-Dorks |
195 |
47 |
Dorks for Bug Bounty Hunting |
2026-08-10 |
| Jira-Scan |
194 |
45 |
CVE-2017-9506 - SSRF |
2026-10-11 |
| knockknock |
193 |
28 |
A simple reverse whois lookup tool which returns a... |
2026-10-12 |
| bugbountydash |
192 |
37 |
[depreciated] Terminal dashboard for bug bounty hu... |
2026-09-24 |
| JSRecon-Buddy |
190 |
12 |
A simple browser extension to quickly find interes... |
2026-10-13 |
| sheye |
189 |
43 |
Opensource assets and vulnerability scanning tool |
2026-09-25 |
| no-sandbox |
187 |
11 |
No Sandbox - Applications That Run Chromium and Ch... |
2026-04-29 |
| bulwark |
187 |
37 |
An organizational asset and vulnerability manageme... |
2026-08-09 |
| edge |
186 |
22 |
Whois for the Cloud: Recon tool for cloud provide... |
2026-10-19 |
| Oneliner-Bugbounty |
185 |
40 |
A collection oneliner scripts for bug bounty |
2026-09-14 |
| ssrfuzz |
184 |
21 |
SSRFuzz is a tool to find Server Side Request Forg... |
2026-10-02 |
| medium-writeups |
182 |
30 |
This repository updates latest Bug Bounty medium w... |
2026-10-19 |
| SuperLibrary |
182 |
45 |
A massive, curated collection of information secur... |
2026-10-18 |
| Jbin-website-secret-scraper |
181 |
31 |
Jbin will gather all the URLs from the website and... |
2026-10-12 |
| autosetup |
181 |
32 |
Auto setup is a bash script compatible with Debian... |
2026-09-12 |
| udon |
179 |
9 |
A simple tool that helps to find assets/domains ba... |
2026-10-12 |
| DockerExploit |
179 |
43 |
Docker Remote API Scanner and Exploit |
2026-10-11 |
| pentesting-dockerfiles |
178 |
35 |
Pentesting/Bugbounty Dockerfiles. |
2026-04-05 |
| CVE-2021-21123-PoC-Google-Chrome |
176 |
23 |
��💻 � Google Chrome - File System Acces... |
2026-09-18 |
| Rekon |
175 |
59 |
The project contains multiple shell scripts for au... |
2026-09-17 |
| bugbountywiki |
174 |
15 |
The Bug Bounty Wiki |
2026-07-29 |
| CorsMe |
173 |
26 |
Cross Origin Resource Sharing MisConfiguration Sca... |
2026-09-25 |
| Bugbounty-Resources |
172 |
28 |
A list of resources for those interested in gettin... |
2026-09-26 |
| X-Recon |
172 |
29 |
A utility for detecting webpage inputs and conduct... |
2026-10-14 |
| D4rkXSS |
172 |
52 |
A list of useful payloads and Bypass for Web Appli... |
2026-08-11 |
| Hunt3r |
171 |
28 |
Made your bugbounty subdomains reconnaissance easi... |
2026-09-14 |
| subby |
171 |
11 |
An uber fast and simple subdomain enumeration tool... |
2026-10-06 |
| web-hacking-playground |
171 |
34 |
Web application with vulnerabilities found in real... |
2026-09-27 |
| sub.Monitor |
171 |
20 |
Self-hosted passive subdomain continous monitoring... |
2026-10-13 |
| XSSRocket |
169 |
35 |
XSSRocket it is a tool designed for offensive secu... |
2026-09-25 |
| proof-of-concepts |
166 |
39 |
A little collection of fun and creative proof of c... |
2026-02-01 |
| cewler |
166 |
19 |
CeWLeR - Custom Word List generator Redefined. CeW... |
2026-09-25 |
| OSINT-SearchOperators |
166 |
24 |
No description |
2026-10-11 |
| Bug-Hunting |
166 |
31 |
A Collection of Notes, Methodologies, POCs and eve... |
2026-10-18 |
| VulnPlanet |
166 |
24 |
Vulnerable code snippets with fixes for Web2, Web3... |
2026-04-10 |
| Recon-bugbounty |
165 |
21 |
Simple recon using multiple tools! |
2026-10-02 |
| Toolpacks |
164 |
18 |
Moved to:: https://github.com/pkgforge/soarpkgs |
2026-08-04 |
| bug-bounty |
162 |
33 |
My personal bug bounty toolkit. |
2026-10-02 |
| keyhacks.sh |
162 |
27 |
Automation of tokens/api keys testing. |
2026-10-09 |
| CRLF-Injection-Scanner |
161 |
71 |
Command line tool for testing CRLF injection on a ... |
2026-10-14 |
| DataExtractor |
161 |
37 |
A Burp Suite extension to extract datas from sourc... |
2026-10-05 |
| xsstools |
160 |
14 |
xss development frameworks, with the goal of makin... |
2026-08-26 |
| SourceWolf |
158 |
42 |
Amazingly fast response crawler to find juicy stuf... |
2026-10-15 |
| webstor |
158 |
20 |
WebStor efficiently enumerates all websites across... |
2026-09-22 |
| smartrecon |
158 |
41 |
smartrecon is a powerful shell script to automate ... |
2026-10-01 |
| CVE2PoC |
157 |
27 |
CVE2PoC is a tool that helps penetration testers, ... |
2026-10-07 |
| SQLi-Query-Tampering |
157 |
24 |
SQLi Query Tampering extends and adds custom Paylo... |
2026-05-24 |
| bugbountybloglist |
156 |
23 |
Quick research done on some bug bounty blogs! Chec... |
2026-10-12 |
| bugbounty_tools |
156 |
25 |
Collection of scripts and tools used during bug bo... |
2026-09-21 |
| webdork |
154 |
27 |
A Python tool to automate some dorking stuff to fi... |
2026-08-10 |
| ThreatTracer |
154 |
25 |
ThreatTracer - A tool to identify CVE by name & ve... |
2026-10-17 |
| WordList |
154 |
43 |
Custom wordlist, updated regularly |
2026-10-15 |
| insiders |
154 |
24 |
Archive of Potential Insider Threats |
2026-09-15 |
| bash-bounty |
153 |
39 |
Random Tools for Bug Bounty |
2026-10-12 |
| Bug-Bounty-Tips |
153 |
33 |
A collection of notes, checklists, writeups on bu... |
2026-10-18 |
| DNS-Discovery |
153 |
38 |
DNS-Discovery is a multithreaded subdomain brutefo... |
2026-09-05 |
| Task-Ninja |
153 |
24 |
Ultimate Tasks Automation Framework for Hackers, D... |
2026-09-25 |
| CloudSniffer |
153 |
61 |
CloudSniffer is a powerful tool designed to aid in... |
2026-10-17 |
| cazador_unr |
153 |
57 |
Hacking tools |
2026-10-16 |
| bughunter |
152 |
53 |
Bug Hunter is a command-line tool designed to assi... |
2026-09-12 |
| scriptkiddi3 |
152 |
26 |
Streamline your recon and vulnerability detection ... |
2026-10-06 |
| jsleak |
151 |
28 |
a Go code to detect leaks in JS files via regex pa... |
2026-07-06 |
| BB-legal-FR |
151 |
5 |
Quelques conseils autour des obligations légales,... |
2026-09-18 |
| faillapop |
151 |
11 |
Vulnerable-by-design solidity protocol to help Web... |
2026-10-13 |
| PassDetective |
151 |
10 |
PassDetective is a command-line tool that scans sh... |
2026-10-14 |
| ldap2json |
150 |
23 |
The ldap2json script allows you to extract the who... |
2026-10-15 |
| writeup-miner |
150 |
17 |
This is a useful Python script for extracting bug ... |
2026-09-26 |
| R3C0Nizer |
150 |
48 |
R3C0Nizer is the first ever CLI based menu-driven ... |
2026-10-12 |
| kitsec-core |
149 |
10 |
Pentesting, made easy. |
2026-03-23 |
| Swiftness |
148 |
29 |
A note-taking macOS app for penetration-testers. |
2026-08-28 |
| BugBounty |
147 |
33 |
Bug Bounty stuffs, payloads, scripts, profiles, ti... |
2026-10-18 |
| nodesub |
146 |
25 |
Nodesub is a command-line tool for finding subdoma... |
2026-10-14 |
| uddup |
145 |
19 |
Urls de-duplication tool for better recon. |
2026-10-01 |
| FastDork |
145 |
24 |
âš¡ FastDork speeds up repetitive dorking: build r... |
2026-10-07 |
| bugbounty |
143 |
15 |
Swisscom Vulnerability Disclosure Policy & Bug Bou... |
2026-10-16 |
| goverview |
143 |
24 |
goverview - Get an overview of the list of URLs |
2026-10-01 |
| ParaForge |
142 |
19 |
A BurpSuite extension to create a custom word-list... |
2026-07-17 |
| cvemapping |
142 |
19 |
This repo Gathers all available cve exploits from ... |
2026-10-18 |
| BugBountyTools |
140 |
54 |
A-to-Z Bug Bounty Hunting Tools |
2026-09-24 |
| xss-payload-list |
140 |
34 |
xss-payload-list |
2026-10-16 |
| asnrecon |
138 |
31 |
ASN reconnaissance script |
2026-09-04 |
| aquatone |
138 |
20 |
A Tool for Domain Flyovers |
2026-10-17 |
| subsnipe |
137 |
20 |
SubSnipe is a tool designed to help find subdomain... |
2026-09-13 |
| jsfinder |
137 |
15 |
Fetches JavaScript files quickly and comprehensive... |
2026-10-11 |
| SSRFPwned |
135 |
26 |
Checks for SSRF using built-in custom Payloads aft... |
2026-09-25 |
| smugglex |
135 |
14 |
Rust-powered HTTP Request Smuggling Scanner. |
2026-10-17 |
| chomtesh |
135 |
22 |
CHOMTE.SH is a powerful shell script designed to a... |
2026-10-14 |
| Digital-Forensics-Tools |
135 |
47 |
A curated list of essential digital forensics tool... |
2026-10-13 |
| dnsanity |
134 |
5 |
High-performance DNS validator using template-base... |
2026-09-10 |
| Custom-Nuclei-Templates |
133 |
35 |
No description |
2026-07-28 |
| misc |
132 |
24 |
Scripts and other stuff. |
2026-06-26 |
| Blind-SSRF |
132 |
21 |
Nuclei Templates to reproduce Cracking the lens's ... |
2026-10-18 |
| pentest-everything |
132 |
40 |
This is my penetration testing cheatsheet |
2026-09-30 |
| neural-network-hacking |
131 |
31 |
Hacking the Singularity. Deep learning hacking. We... |
2026-08-02 |
| All-in-one_BugBounty_PDF_bundles |
130 |
35 |
No description |
2026-05-04 |
| Rad-Team-tools |
130 |
15 |
�金技巧 |
红队 |
| Eagle |
130 |
36 |
Multithreaded Plugin based vulnerability scanner f... |
2026-10-15 |
| burpsuite |
129 |
42 |
BurpSuite Pro, Plugins and Payloads |
2026-10-12 |
| mac-cyber-bootstrap |
129 |
13 |
Full macOS bootstrap for cybersecurity, CTF & bug ... |
2026-10-15 |
| Awesome-HTTPRequestSmuggling |
129 |
22 |
A curated list of awesome blogs and tools about HT... |
2026-10-02 |
| ZimZilla |
129 |
38 |
THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTIN... |
2026-10-19 |
| fluffy-barnacle |
128 |
15 |
Disposable, ephemeral network infrastructure power... |
2026-10-13 |
| HTB-certified-bug-bounty-hunter-exam-cheetsheet |
126 |
20 |
All cheetsheets with main information from HTB CBB... |
2026-09-14 |
| frida |
126 |
33 |
Frida scripts for mobile application dynamic-analy... |
2026-10-04 |
| deksterecon |
125 |
36 |
Web Application recon automation |
2026-01-07 |
| inflate.py |
125 |
15 |
Artificially inflate a given binary to exceed comm... |
2026-09-15 |
| Bug-Bounty-Scripts |
124 |
28 |
The scripts I write to help me on my bug bounty hu... |
2026-10-05 |
| goblob |
124 |
8 |
A fast enumeration tool for publicly exposed Azure... |
2026-10-10 |
| gori |
123 |
15 |
A fast, keyboard-driven HTTP intercepting proxy an... |
2026-10-18 |
| Secbuild |
122 |
29 |
An automation tool to install the most popular too... |
2026-10-02 |
| OK-VPS |
122 |
46 |
Bug Bounty Vps Setup Tools |
2026-10-02 |
| bugbounty-wordlist |
121 |
19 |
Real world bug bounty wordlists |
2026-09-11 |
| bugbounty-disclosed-reports |
120 |
34 |
Public Disclosed Bug Bounty Reports formated in ma... |
2026-10-09 |
| Pentest-Mapper |
119 |
38 |
A Burp Suite Extension for pentester and bug bount... |
2026-07-17 |
| spellbook |
118 |
28 |
Framework for rapid development of offensive secur... |
2026-10-14 |
| micro-sentry |
118 |
8 |
Tiny Sentry client with idiomatic wrapper for Angu... |
2024-09-09 |
| Sub-Drill |
118 |
31 |
A very (very) FAST and simple subdomain finder bas... |
2026-10-01 |
| Toxic-MD |
117 |
302 |
Toxic MD is a powerful WhatsApp crash and bug bot ... |
2026-10-12 |
| YesWeBurp |
117 |
26 |
YesWeHack Api Extension for Burp |
2026-10-17 |
| RegexPassive |
117 |
25 |
🔠Collection of regexp pattern for security pas... |
2026-10-05 |
| russkiwlst |
117 |
29 |
Bundle of common passwords targeting RUSSIAN-speak... |
2026-10-08 |
| bugbounty |
116 |
18 |
All Things Bug Bounty |
2026-10-02 |
| crtfinder |
116 |
30 |
Fast tool to extract all subdomains from crt.sh we... |
2026-09-06 |
| Bug-Bounty-Tools |
115 |
44 |
The tools I have programmed to help me with bugbou... |
2026-10-18 |
| ghsec-jaeles-signatures |
115 |
39 |
Signatures for jaeles scanner by @j3ssie |
2026-10-02 |
| mzap |
115 |
18 |
⚡� Multiple target ZAP Scanning |
2026-10-14 |
| CVE-2022-23808 |
115 |
23 |
phpMyAdmin XSS |
2026-09-13 |
| bugbounty-openvpn-socks |
114 |
24 |
Run all your bug bounty VPN profiles in parallel a... |
2026-08-29 |
| xssfinder |
114 |
37 |
Toolset for detecting reflected xss in websites |
2026-10-05 |
| BackupFinder |
113 |
20 |
BackupFinder discovers backup files on web servers... |
2026-10-13 |
| daily-bugbounty-writeups |
112 |
10 |
This repository contains Bug Bounty writeups |
2026-10-18 |
| LFITester |
112 |
27 |
LFITester is a Python3 program that automates the ... |
2026-09-25 |
| PSFuzz |
111 |
26 |
Proviesec Fuzz Scanner - dir/path web scanner |
2026-09-10 |
| vulnsearch |
111 |
22 |
A deep look at some recon methodologies and web-ap... |
2026-10-06 |
| hack-pet |
111 |
18 |
� Managing command snippets for hackers/bug bou... |
2026-10-02 |
| Custom-Nuclei-Templates |
111 |
28 |
Community curated list of templates for the nuclei... |
2026-10-18 |
| wwwordlist |
111 |
14 |
Wwwordlist is a wordlist generator for pentesters ... |
2026-10-02 |
| log4j |
111 |
22 |
Trickest Workflow for discovering log4j vulnerabil... |
2026-10-01 |
| SubEvil |
110 |
13 |
SubEvil is an advanced open source intelligence fr... |
2026-10-14 |
| AWS-Scanner |
109 |
43 |
Scans a list of websites for Cloudfront or S3 Buck... |
2026-09-22 |
| XSS-Payload-without-Anything |
109 |
30 |
XSS Payload without Anything. |
2026-08-22 |
| X-RSA |
109 |
26 |
Cryptography Tool |
RSA Attacks |
| bhedak |
108 |
20 |
A replacement of "qsreplace", accepts URLs as stan... |
2026-10-12 |
| FrogPost |
108 |
7 |
FrogPost: postMessage Security Testing Tool |
2026-10-09 |
| bugradar |
108 |
17 |
Advanced external automation on bug bounty program... |
2026-10-07 |
| gerobug |
107 |
24 |
The First Open Source Bug Bounty Platform |
2026-10-03 |
| AttackSurfaceManagement |
106 |
21 |
Discover the attack surface and prioritize risks w... |
2026-09-14 |
| gitlab-subdomains |
106 |
14 |
Find subdomains on GitLab. |
2026-10-01 |
| Offensive-Pentesting-Scripts |
106 |
36 |
Scripts that are intended to help you in your pen-... |
2026-10-06 |
| fuzzlists |
106 |
18 |
A collection of useful lists for Penetration Testi... |
2026-10-14 |
| related-domains |
106 |
7 |
Find related domains of a given domain. |
2026-10-01 |
| BugBounty |
105 |
16 |
A quick bug bounty guide for beginners |
2026-10-07 |
| CosmWasm-audit-roadmap |
105 |
16 |
Roadmap to get up to speed with CosmWasm smart con... |
2026-08-28 |
| awesome-reference |
104 |
33 |
Reference list of useful links to learn about pro... |
2026-09-03 |
| HackerToolkit |
104 |
6 |
HackerToolkit offers a curated selection of tools ... |
2026-09-26 |
| awesome-security |
104 |
9 |
A collection of awesome ethical hacking and securi... |
2026-10-16 |
| JWTweak |
103 |
19 |
Detects the algorithm of input JWT Token and provi... |
2026-07-13 |
| cdn-ranges |
102 |
26 |
Tool to download IPv4 and IPv6 ranges of CDN provi... |
2026-09-29 |
| Mephisto |
102 |
20 |
A comprehensive WordPress vulnerability scanner an... |
2026-10-19 |
| scope |
102 |
21 |
An automated GitHub Actions-based crawler that fet... |
2026-10-18 |
| bugbounty_stuff |
101 |
13 |
No description |
2026-10-02 |
| awesome-smartcontract-hacking |
100 |
18 |
Here we collect and discuss for Smart contract sec... |
2026-09-22 |
| KaliIntelligenceSuite |
99 |
26 |
Kali Intelligence Suite (KIS) shall aid in the fas... |
2026-08-09 |
| hfuzz |
99 |
13 |
Wordlist for web fuzzing, made from a variety of r... |
2026-08-22 |
| ninjasworkout |
98 |
26 |
Vulnerable NodeJS Web Application |
2026-10-16 |
| nuclei-templates |
98 |
30 |
All Nuclei Templates |
2026-10-19 |
| -Ultimate-Cybersecurity-Roadmap |
98 |
13 |
Ultimate Cybersecurity Roadmap (2025 Edition) |
Be... |
| BugBountyKnowledgeBase |
97 |
26 |
Obsidian Vault for bug bounty hunters |
2026-09-15 |
| BugBounty-Methodology |
97 |
20 |
No description |
2026-10-17 |
| Resources |
97 |
19 |
A Storehouse of resources related to Bug Bounty Hu... |
2026-10-02 |
| Email-Vulnerability-Checker |
97 |
13 |
Find Email Spoofing Vulnerablity of domains |
2026-10-04 |
| mainRecon |
96 |
16 |
mainRecon is an automated reconnaissance docker im... |
2026-10-02 |
| WayBackupFinder |
96 |
24 |
A passive way to find backups/ sensitive informati... |
2026-09-25 |
| wadl-dumper |
96 |
18 |
Dump all available paths and/or endpoints on WADL ... |
2026-07-31 |
| targets |
96 |
16 |
A collection of over 5.1 million sub-domains and a... |
2026-08-22 |
| nipejs |
95 |
20 |
Simplify your life with leak detection in JavaScri... |
2026-05-18 |
| learn250 |
95 |
12 |
No description |
2026-10-02 |
| BugBountyTips |
94 |
5 |
No description |
2026-09-02 |
| backup-gen |
94 |
12 |
Backup Files Wordlist Generator - generate a compr... |
2026-06-05 |
| Agnee |
93 |
16 |
Find sensitive information using dorks from differ... |
2026-09-03 |
| AdvancedKeyHacks |
93 |
27 |
API Key/Token Exploitation Made easy. |
2026-09-17 |
| Bugs-feed |
93 |
16 |
Bug's feed is a local hosted portal where you can ... |
2025-09-15 |
| HydraRecon |
93 |
16 |
All In One, Fast, Easy Recon Tool |
2026-10-02 |
| Hacking-Insecure-Firebase-Database |
92 |
10 |
Insecure Firebase |
Bugbounty |
| s3reverse |
92 |
26 |
The format of various s3 buckets is convert in one... |
2026-10-01 |
| bug_bounty_checklist |
92 |
25 |
My Notes & Resources Of Bug Bounty Checklists |
2026-10-12 |
| OffensiveCloudDistribution |
92 |
12 |
Leverage the ability of Terraform and AWS or GCP t... |
2026-04-13 |
| FFUF-Tips-And-Tricks |
92 |
11 |
Describe how to use ffuf different options with ex... |
2026-09-22 |
| BurnWP-Framework |
92 |
24 |
BurnWP Advanced Exploiter System instead Scanner &... |
2026-09-25 |
| XXElixir |
92 |
8 |
This tool is designed to test for file upload and ... |
2026-09-19 |
| Twitter-Seclists |
91 |
12 |
Curated lists of InfoSec on Twitter. Find out who'... |
2026-09-03 |
| talosplus |
91 |
15 |
Talosplus is a fast and robust template based Inte... |
2026-09-15 |
| directory-files-payload-lists |
90 |
23 |
Directory scans |
2026-10-17 |
| Acamar |
90 |
20 |
A Python3 based single-file subdomain enumerator |
2026-05-06 |
| bug-bounty-responses |
90 |
21 |
A collection of response templates for invalid bug... |
2025-10-04 |
| CVE-2022-41040-POC |
90 |
11 |
CVE-2022-41040 - Server Side Request Forgery (SSRF... |
2026-10-08 |
| vhost-brute |
89 |
32 |
A PHP tool to brute force vhost configured on a se... |
2026-01-15 |
| fresh.py |
88 |
17 |
An efficient multi-threaded DNS resolver validator |
2026-05-25 |
| jsdif |
88 |
12 |
A powerful JavaScript monitoring tool for bug boun... |
2026-07-30 |
| Subhunter |
88 |
21 |
A fast subdomain takeover tool |
2026-08-06 |
| Bugbounty-Resources |
87 |
25 |
No description |
2026-08-10 |
| bugbounty.zip |
87 |
13 |
No description |
2026-09-26 |
| PastebinMarkdownXSS |
87 |
10 |
XSS in pastebin.com and reddit.com via unsanitized... |
2026-07-29 |
| nuclei-MonaCodeScanner |
87 |
9 |
Nuclei templates for source code analysis. Detects... |
2026-09-13 |
| MobSecco |
87 |
11 |
Cloning apk for bypassing code tampering detection... |
2026-09-09 |
| swiss-bugbounty-programs |
86 |
15 |
List of bug bounty and coordinated vulnerability d... |
2026-08-17 |
| hinject |
86 |
16 |
Host Header Injection Checker |
2026-10-02 |
| nuubi |
86 |
23 |
Nuubi Tools (Information-ghatering |
Scanner |
| PentestingChecklist |
86 |
16 |
Comprehensive, data-driven security assessment che... |
2026-10-19 |
| pwn |
86 |
12 |
PWN is an open security automation framework that ... |
2026-10-17 |
| knoxsser |
85 |
15 |
A powerful bash script for massive XSS scanning le... |
2026-09-22 |
| bounty |
85 |
28 |
Misc bounty and vulndisc things |
2026-09-18 |
| rapiddns |
85 |
20 |
Rapidly enumerate subdomains and domains using rap... |
2026-09-25 |
| dnspy |
85 |
23 |
Find subdomains and takeovers. |
2026-10-01 |
| CVE-2021-43008-AdminerRead |
85 |
17 |
Exploit tool for CVE-2021-43008 Adminer 1.0 up to ... |
2026-03-01 |
| spk |
85 |
5 |
spk aka spritzgebaeck: A small OSINT/Recon tool to... |
2026-10-04 |
| osmedeus-workflow |
84 |
21 |
Community Workflow for the Osmedeus Engine that de... |
2026-10-04 |
| Discord-Recon |
84 |
19 |
Discord bot created to automate bug bounty recon, ... |
2026-09-19 |
| sqli-postgres-rce-privesc-hacking-playground |
84 |
23 |
Application with SQL Injection vulnerability and p... |
2026-08-18 |
| OSINT-Tools |
84 |
18 |
The OSINT Framework is a powerful collection of to... |
2026-10-18 |
| frida_setup |
83 |
16 |
One-click installer for Frida and Burp certs for S... |
2026-09-24 |
| MinerInTheMiddle |
83 |
22 |
This application was created as a POC for how to s... |
2026-10-11 |
| acunetix-13-kali-linux |
83 |
38 |
acunetix-13 install in kali linux |
2026-08-14 |
| YAPS |
83 |
9 |
Yet Another PHP Shell - The most complete PHP reve... |
2026-08-21 |
| bug-bounty-writeups |
82 |
17 |
A curated list of available Bug Bounty & Disclosu... |
2026-10-03 |
| Weaponize-Your-Burp |
82 |
18 |
Weaponize Your Burp is a repository for automation... |
2026-07-21 |
| Firefly-SRC |
81 |
3 |
SRC资产探测平å�°ã€�æ•´ç�†æ”¶å½•å›½å†…外èµ�é‡ |
2026-10-13 |
| LFIDump |
81 |
15 |
A simple python script to dump remote files throug... |
2026-10-15 |
| PyCript-WebSocket |
81 |
9 |
PyCript Websocket is now merge into https://github... |
2026-09-13 |
| bugbountybooks |
80 |
19 |
No description |
2026-10-12 |
| Inventus |
80 |
23 |
Inventus is a spider designed to find subdomains o... |
2026-09-16 |
| burp-bounty |
80 |
19 |
Burp Bounty profiles |
2026-07-20 |
| recon |
80 |
14 |
NodeJS script to extract assets for the Apple bug ... |
2026-08-11 |
| Hacker-Scoper |
80 |
10 |
CLI tool for filtering URLs/IPs with automatically... |
2026-10-07 |
| bugbounty-tools |
79 |
27 |
Random tools I've written for bug bounties |
2025-09-23 |
| Find-Hardcoded |
79 |
17 |
You can find hardcoded Api-Key,Secret,Token Etc.. |
2026-09-22 |
| Arsenal |
79 |
8 |
Hastly written Tools & Scripts for Personal Use Ca... |
2026-08-09 |
| EndPointer |
79 |
9 |
This is the open sourced code for the extension, E... |
2026-10-13 |
| subdomains.sh |
79 |
12 |
A wrapper around tools used for subdomain enumerat... |
2026-10-12 |
| autopoisoner |
78 |
14 |
Web cache poisoning vulnerability scanner. |
2026-10-06 |
| wb |
77 |
10 |
Quickly fetches files from Wayback Machine. |
2026-08-27 |
| taser |
77 |
13 |
Python resource library for creating security rela... |
2026-07-28 |
| Subcert |
77 |
14 |
Subcert is a subdomain enumeration tool, that find... |
2026-10-16 |
| ExternalAttacker-MCP |
77 |
18 |
A modular external attack surface mapping tool int... |
2026-09-25 |
| AIHTTPAnalyzer |
77 |
18 |
AIHTTPAnalyzer revolutionizes web application secu... |
2026-08-23 |
| windfire |
77 |
2 |
Blazing fast, asynchronous URL prober & fingerprin... |
2026-10-13 |
| fetchmeurls |
76 |
16 |
A Tool for Bug Bounty Hunters that uses Passive an... |
2026-07-23 |
| ScopeHunter |
76 |
14 |
ScopeHunter is a command-line tool for finding in ... |
2026-08-20 |
| CodeAllTheThings |
76 |
17 |
A list of threat sinks used in the manual security... |
2026-01-22 |
| github-dorks |
75 |
16 |
Useful Github Dorks for BugBounty - |
2026-10-03 |
| legal-bug-bounty |
75 |
22 |
#legalbugbounty project — creating safe harbors ... |
2026-10-08 |
| monitor-new-subdomain |
75 |
16 |
Subdomain Monitor A production-ready subdomain mon... |
2026-10-01 |
| bugbounty-companion |
74 |
9 |
A BugBounty companion that checks out high-reward ... |
2026-09-10 |
| Wordlists |
74 |
8 |
[Custom |
|
| bugbountydork |
73 |
27 |
Bug Bounty Dork |
2026-09-25 |
| dnsresolver |
72 |
11 |
A Lightning-Fast DNS Resolver written in Rust 🦀 |
2026-09-30 |
| warlusts |
71 |
24 |
If you found this, you are among the truly lucky, ... |
2026-10-18 |
| Vigilo |
71 |
21 |
An AI hacker for Web3 Smart Contract. for bug boun... |
2026-10-10 |
| maltego_transforms |
70 |
18 |
Use the Hacker Target IP Tools API for Reconnaissa... |
2026-09-26 |
| ldapconsole |
70 |
10 |
The ldapconsole script allows you to perform custo... |
2026-09-25 |
| websocket-connection-smuggler |
70 |
13 |
websocket-connection-smuggler |
2026-09-04 |
| github-regexp |
70 |
19 |
Basically a regexp over a GitHub search. |
2026-10-01 |
| Learn-android-bug-bounty |
70 |
18 |
Documenting all the sources from where I'm learnin... |
2026-10-09 |
| chaos |
70 |
8 |
Origin IP scanning utility developed with ChatGPT |
2026-09-27 |
| KUMO-Domain-Recon-Tool |
70 |
14 |
Kumo 蜘蛛 is a domain OSINT & security reconnais... |
2026-10-16 |
| subdog |
70 |
12 |
A powerful subdomain enumeration tool that aggrega... |
2026-10-08 |
| SQL-Injection-Payloads-List |
70 |
11 |
SQL Injection Payloads List. |
2026-10-16 |
| Bookmarks |
69 |
17 |
Reclaim control of your Burp Suite Repeater tabs w... |
2026-04-16 |
| sublazerwlst |
69 |
20 |
Bundle of wordlists for brute-forcing subdomains (... |
2026-05-14 |
| Awesome-Bug-Bounty |
69 |
10 |
This is my personal repo, which includes bug bount... |
2026-09-30 |
| bugbountytips |
68 |
20 |
Webapp to search tips on Twitter through #bugbount... |
2026-10-02 |
| Zin |
68 |
24 |
A Payload Injector for bugbounties written in go |
2026-10-15 |
| aether |
68 |
10 |
AI Smart Contract Security Analysis and PoC Genera... |
2026-10-14 |
| Corscan |
68 |
14 |
Advanced CORS Header Checker Tool with Vulnerabi... |
2026-04-23 |
| TTWAF |
68 |
10 |
「🧱�Test a list of payloads and see if you c... |
2026-10-14 |
| Bug-Bounty-Tools |
68 |
1 |
Your Comprehensive Collection of Bug Bounty Tools ... |
2026-07-27 |
| rate-limit-checker |
67 |
13 |
Check whether the domain has a rate limit enabled. |
2026-09-15 |
| google-acquisitions |
67 |
8 |
Most of the Google Acquisitions for Bug Bounty Hun... |
2026-07-27 |
| grepaddr |
67 |
16 |
Use grepaddr to extract (grep) all kinds of addres... |
2026-10-15 |
| BugBountySkills |
66 |
12 |
An obsessive, expert-tier knowledge base + AI skil... |
2026-10-17 |
| extractify |
66 |
15 |
A tool for extract Endpoints, URLs and Secrets fro... |
2026-10-12 |
| swaggerHole |
66 |
12 |
A python3 script searching for secret on swaggerhu... |
2026-02-17 |
| halive |
66 |
6 |
A fast http and https prober, to check which URLs ... |
2026-08-17 |
| penetration-testing |
65 |
15 |
Materi memulai penetration testing dari nol berbah... |
2026-10-13 |
| dorkScraper |
65 |
15 |
DorkScraper is a simple tool written in Python to ... |
2026-10-10 |
| h1-search |
65 |
18 |
Tool that will request the public disclosures on a... |
2026-04-17 |
| awesome-bugbounty-mcp |
64 |
8 |
A curated list of MCP servers for bug bounty. |
2026-10-09 |
| Awesome-Security-Repos |
64 |
10 |
Here's a list of cyber security related github rep... |
2026-10-08 |
| same-origin-xss |
64 |
5 |
Same Origin XSS challenge |
2026-08-21 |
| kurl |
64 |
0 |
HTTP Requests for security researchers |
2025-11-19 |
| BugBountySubdomains |
63 |
13 |
Tools to gather subdomains from Bug Bounty program... |
2026-07-29 |
| bugbounty_changelogs |
63 |
7 |
No description |
2026-09-08 |
| BBProfiles |
63 |
25 |
Burp Bounty (Scan Check Builder in BApp Store) is ... |
2026-10-02 |
| BurpSQLTruncSanner |
63 |
22 |
Messy BurpSuite plugin for SQL Truncation vulnerab... |
2026-10-05 |
| dooked |
63 |
28 |
DNS and Target HTTP History Local Storage and Sear... |
2026-10-01 |
| fback |
63 |
11 |
Fback is a tool that helps you create target-speci... |
2026-09-26 |
| differer |
63 |
5 |
differer finds how URLs are parsed by different la... |
2026-07-02 |
| anewer |
63 |
5 |
anewer appends only new lines from stdin to a file... |
2026-08-31 |
| argo |
63 |
11 |
LLM-native static vulnerability detection: point i... |
2026-10-10 |
| rfd-checker |
62 |
19 |
RFD Checker - security CLI tool to test Reflected ... |
2026-09-21 |
| badmoodle |
62 |
8 |
Moodle community-based vulnerability scanner |
2026-10-05 |
| Beginner-Bug-Bounty-Automation |
62 |
9 |
Many script that can be modified according to your... |
2026-08-31 |
| hackliner |
62 |
14 |
HackLiners: CyberSec/BugHunting OneLiners |
2025-12-02 |
| temodar-agent |
62 |
11 |
Temodar Agent is an AI-powered WordPress plugin an... |
2026-10-02 |
| KrazePlanetTraining |
61 |
22 |
Free BugBounty KrazePlanetTraining |
2026-10-18 |
| BugBounty |
61 |
11 |
web fuzzing && bug hunter |
2025-09-04 |
| Chart-Of-Wordlist |
61 |
13 |
Chart-Of-Wordlist helps to create your own custom ... |
2025-12-09 |
| bounty-targets-alert |
61 |
14 |
It's an watcher for new scopes added to bounty-tar... |
2026-08-11 |
| bug-bounty-writeup |
61 |
11 |
This repo contains different variants of Bug Bount... |
2026-10-08 |
| nozaki |
61 |
15 |
HTTP fuzzer engine security oriented |
2026-08-19 |
| xssrecon |
61 |
12 |
XSSRecon is a fast reflected-parameter discovery t... |
2026-10-12 |
| bugbounty-gpt |
60 |
20 |
A helpful gpt-based triage tool for BugCrowd bugbo... |
2026-10-08 |
| Bot-Bounty |
60 |
18 |
Python Script for Telegram Bot is specially built ... |
2026-10-12 |
| dj |
60 |
4 |
dj - Dynamic JS File Extractor - intelligently det... |
2026-10-04 |
| Beelzebub |
60 |
17 |
Beelzebub all in one Hacking Tools, Shell finder, ... |
2026-10-15 |
| wp-file-manager-CVE-2020-25213 |
59 |
26 |
https://medium.com/@mansoorr/exploiting-cve-2020-2... |
2026-09-09 |
| hacks |
59 |
12 |
Build some cyber security tools in Rust 🦀 :ro... |
2026-10-01 |
| roboxtractor |
59 |
12 |
Extract endpoints marked as disallow in robots fil... |
2026-10-02 |
| SSTI-XSS-Finder |
59 |
12 |
XSS Finder Via SSTI |
2026-10-02 |
| XSSearch |
59 |
15 |
XSSearch is a comprehensive reflected XSS tool bui... |
2025-12-09 |
| Sub-Ringan-Framework |
59 |
14 |
Tool for automate bug hunting process ðŸ”� --> ðŸ� |
2026-07-23 |
| malicious-rMQR-Codes |
59 |
4 |
Collection of (4000+) malicious rMQR Codes for Pen... |
2026-10-11 |
| BugBountyBlueprint |
58 |
7 |
A tool offering templates for streamlined bug boun... |
2026-09-14 |
| smith |
58 |
14 |
Simple wrapper for meg that sieves through meg's o... |
2026-05-19 |
| uforall |
58 |
11 |
uforall is a fast url crawler this tool crawl all ... |
2026-10-17 |
| Resources |
58 |
10 |
No description |
2026-10-12 |
| Pentestcheatsheet |
58 |
21 |
A powerful single-file offline OSCP+/OSEP Penetrat... |
2026-10-18 |
| CVE-2022-42889-text4shell |
58 |
7 |
Apache commons text - CVE-2022-42889 Text4Shell pr... |
2026-09-25 |
| jsscm |
58 |
8 |
JSSCM detects expired domains for Stored XSS explo... |
2026-09-17 |
| gf-patterns |
57 |
17 |
A collection of useful grep patterns and tools by ... |
2026-08-19 |
| PandorasBox |
57 |
22 |
Security tool to quickly audit Public Box files an... |
2026-10-05 |
| 0x0p1n3r |
57 |
18 |
0x0p1n3r is set of combination of other tools and ... |
2025-01-03 |
| CVE-2025-53770 |
57 |
4 |
Unauthenticated Remote Code Execution via unsafe d... |
2026-10-03 |
| Morgan |
57 |
9 |
Morgan is a powerful tool designed to help securit... |
2026-05-10 |
| go-recon |
57 |
9 |
External recon toolkit |
2026-10-16 |
| security-mindmap |
57 |
16 |
This repository stores various roadmap(Mindmaps) f... |
2026-10-13 |
| Bucket-Flaws |
57 |
17 |
Bucket Flaws ( S3 Bucket Mass Scanner ): A Simple ... |
2026-10-07 |
| bugbounty-Tips-and-Tricks |
56 |
13 |
A curated collection of bug bounty tips, tricks, p... |
2026-10-11 |
| continuous-nuclei |
56 |
16 |
Running nuclei Continuously |
2026-10-02 |
| My-Methodologies |
56 |
20 |
Tools and methods that I personally use for Recon ... |
2026-10-14 |
| cloudrecon |
56 |
3 |
This script is used to search for cloud certificat... |
2026-09-21 |
| AutoBypassEncryptAndSign |
56 |
9 |
auto decrypt the request ciphertext and auto bypas... |
2026-07-04 |
| gitls |
56 |
10 |
🖇 Enumerate git repository URL from list of URL... |
2026-09-21 |
| wsee |
56 |
15 |
A CDN Domain Fronting Tool or Websocket Discovery ... |
2026-08-22 |
| PassMute |
56 |
7 |
PassMute - A multi featured Password Transmutation... |
2026-09-25 |
| js4bugbounty |
55 |
4 |
No description |
2026-10-07 |
| enumeraite |
55 |
5 |
AI-Powered Web Attack Surface Enumeration |
2026-10-02 |
| CVE-2023-36845 |
55 |
12 |
Juniper Firewalls CVE-2023-36845 - RCE |
2026-03-10 |
| BurpMCP |
55 |
2 |
Burp Suite Extension with MCP Server to enhance ma... |
2026-09-15 |
| PwnFox-For-Chromium |
54 |
8 |
A BurpSuite extension that allows you to use Chrom... |
2026-09-21 |
| grapX |
54 |
22 |
grapX will iterate through the URLs and grep the e... |
2026-10-02 |
| safe-harbour |
54 |
10 |
security.txt collection of most popular world-wide... |
2026-10-02 |
| GoGitDumper |
53 |
11 |
Dump exposed HTTP .git fast |
2026-06-26 |
| shania |
53 |
17 |
Scan secrets from Continuous Integration Build Log... |
2025-11-10 |
| DeadDNS |
53 |
15 |
DNS hijacking via dead records automation tool |
2025-06-11 |
| xkeys |
53 |
12 |
Extract Sensitive Keys, Secret, Token Or Intereste... |
2026-07-22 |
| hfinder |
53 |
11 |
Help recon of hostnames from specific ASN or CIDR,... |
2026-02-12 |
| NemesisTools |
53 |
14 |
NemesisTools PowerFull Hacking Tools |
2026-09-30 |
| certina |
53 |
6 |
Certina is an OSINT tool for red teamers and bug h... |
2026-05-06 |
| Nuclei-Community-Templates |
53 |
10 |
A collaborative hub for Nuclei templates. Contribu... |
2026-10-11 |
| credcheck |
53 |
6 |
Credentials Checking Framework |
2026-05-06 |
| BugBoard |
53 |
11 |
Bugboard is a comprehensive open-source cybersecur... |
2026-10-13 |
| js-finding |
52 |
10 |
JS Finding can be used to extract JavaScript (JS) ... |
2026-09-27 |
| open-redirect |
52 |
23 |
Open Redirect Finder. |
2026-10-02 |
| awsEnum |
52 |
7 |
Enumerate AWS cloud resources based on provided cr... |
2026-03-17 |
| Virtual-Host |
52 |
16 |
Modified Nuclei Templates Version to FUZZ Host He... |
2026-02-03 |
| google-search |
52 |
9 |
Returns results from Google search. |
2026-09-04 |
| jecretz |
52 |
10 |
Jira Secret Hunter - Helps you find credentials an... |
2026-04-09 |
| originiphunter |
52 |
12 |
A powerful Go tool for finding origin IPs of domai... |
2026-10-13 |
| scary-strings |
52 |
5 |
If these strings are in your code, you might have ... |
2026-08-03 |
| bugbounty-agent |
51 |
14 |
Automated bug bounty reconnaissance and scanning a... |
2026-09-25 |
| bxss |
51 |
11 |
Alternative to XSS Hunter for blind XSS. |
2026-09-17 |
| active-ip |
51 |
11 |
🕵��♂�� A tool with several scanning ... |
2026-10-04 |
| url-status-checker |
51 |
12 |
Status Checker is a Python tool for swiftly checki... |
2026-10-04 |
| Ensemble |
51 |
8 |
A Bug Bounty Platform that allows hunters to issue... |
2026-07-14 |
| SecToolkit |
51 |
11 |
Welcome SecToolkit repository! This is a comprehen... |
2026-10-07 |
| Pentesting-Resources |
50 |
12 |
Collection of some pentesting and bugbounty resour... |
2026-10-02 |
| takeover |
50 |
13 |
A tool for testing subdomain takeover possibilitie... |
2026-10-01 |
| Gau-Expose |
50 |
18 |
It grep subdomains, email/username, build custom w... |
2025-12-23 |
| awesomeBugbounty |
49 |
20 |
No description |
2026-09-15 |
| crlf-injector |
49 |
17 |
A CRLF ( Carriage Return Line Feed ) Injection att... |
2025-08-31 |
| redirex |
49 |
4 |
tool that generates bypasses for open redirects |
2026-07-07 |
| rec0n |
49 |
6 |
A fully automated subdomain reconnaissance and sen... |
2026-10-18 |
| WebHackUrls |
49 |
8 |
Simple python OSINT tool for urls recon thanks to ... |
2026-10-12 |
| CertStream-Domains |
49 |
7 |
[Automated |
UpToDate] Daily Dumps of CertStream C... |
| PayloadsAll |
49 |
16 |
A list of useful payloads and bypass for Web Appli... |
2026-07-20 |
| crlfi |
48 |
8 |
CRLF Bug scanner for WebPentesters and Bugbounty H... |
2026-10-05 |
| nuclei_templates |
48 |
14 |
Collection of templates from various resources |
2026-09-25 |
| jsmap |
48 |
5 |
Fetch Javascript sourcemaps, bounty hunter style |
2026-10-12 |
| jailbreak |
48 |
19 |
jailbreakme.xyz is an open-source decentralized ap... |
2026-10-06 |
| Black_Viru5_Recon_v1.0 |
48 |
8 |
These Repositories About My Recon Methodology To ... |
2026-10-06 |
| robotstester |
48 |
4 |
This Python script can enumerate all URLs present ... |
2026-05-08 |
| Burp-Encode-IP |
48 |
7 |
Burp Suite extension to encode an IP address focus... |
2026-09-15 |
| go-cves |
48 |
2 |
收录goè¯è¨€ç¼–写的项目ã€�框架和组件出 |
2026-03-18 |
| cloudfish |
48 |
7 |
Subdomain enumeration using Cloudflare's scanning ... |
2026-06-06 |
| ReconPro |
48 |
4 |
ReconPro is a specialized Google dorking tool desi... |
2026-08-27 |
| DNS-Hunt |
48 |
7 |
The DNS Hunt will make your life easier, and of c... |
2026-04-19 |
| Exegol-resources |
47 |
19 |
Hacking resources for the Exegol project |
2026-10-01 |
| apkizer |
47 |
8 |
apkizer is a mass downloader for android applicati... |
2026-09-10 |
| ultimate_bughunter_tools |
47 |
10 |
Ultimate Package Of 50 Bug Bounty Hunting Tools |
2026-04-24 |
| OpenRediWrecked |
47 |
7 |
A powerful and sophisticated tool for detecting an... |
2026-07-23 |
| yeswehack_vdp_finder |
47 |
10 |
This extension tells if visited sites have vulnera... |
2026-09-22 |
| waf-stressor |
47 |
8 |
Production-grade Web Application Firewall testing ... |
2026-10-14 |
| pathprober |
47 |
5 |
Probe and discover HTTP pathname using brute-force... |
2026-08-16 |
| XSS-Payload |
47 |
11 |
「💉�XSS Payload List |
2026-09-01 |
| webcap |
47 |
6 |
An ultra lightweight web screenshot tool with adva... |
2026-09-10 |
| bountyRecon |
46 |
15 |
Bash script to automate Bug Bounty Reconnaissance |
2026-09-12 |
| PCWT |
46 |
15 |
No description |
2026-10-14 |
| zkFuzz |
46 |
4 |
ZK Circuit Fuzzer (IEEE S&P'26) |
2026-10-16 |
| AutomationGuide |
46 |
14 |
Learn how to automate XSS, SSRF, LFI, SQLI, NoSQLi |
2026-09-09 |
| s3-buckets-aio-pwn |
46 |
11 |
An AIO Tool to check for Vulnerable Amazon S3 Buck... |
2026-04-22 |
| accesslist |
46 |
7 |
"ACCESS LIST" Bypass collections used during pent... |
2026-08-12 |
| BrokenSMTP |
46 |
15 |
Small python script to look for common vulnerabili... |
2026-06-30 |
| rajappan |
46 |
17 |
An All in one Project for Digital Privacy. A step ... |
2026-10-14 |
| Burp-Pentest-Coverage-Tracker |
46 |
4 |
Pentest Coverage Tracker is a Burp Suite extension... |
2026-10-10 |
| WebExploit |
46 |
7 |
Web Exploit here ! advanced web hacking and hacker... |
2026-10-16 |
| AuthKit |
46 |
1 |
首个多维度，UI/UXå�‹å¥½çš„Burp suite越æ�ƒæ¼ |
2026-10-18 |
| Dutch_Gov_Scope |
45 |
6 |
Dutch Government Bugbounty scope, subdomains and e... |
2026-10-18 |
| bugBounty-cheatSheet |
45 |
5 |
https://github.com/EdOverflow |
2026-09-07 |
| owncraft |
45 |
17 |
offensive notes & resources |
2026-10-06 |
| Open-Source-Nuclei-Templates-Downloader |
45 |
11 |
Script that download 37+ open source nuclei templa... |
2025-11-30 |
| Gh0stR3c0n |
45 |
14 |
All in one web Recon app |
2026-10-01 |
| gimmepatz |
45 |
6 |
Personal Access Token (PAT) recon tool for bug bou... |
2026-10-12 |
| bugbounty-mcp-server |
44 |
12 |
Comprehensive MCP server for bug bounty hunting an... |
2026-10-17 |
| ActionsTOCTOU |
44 |
6 |
Example repository for GitHub Actions Time of Chec... |
2026-07-04 |
| Wordlists |
44 |
13 |
A Collection of Wordlists for Penetration Testing |
2026-09-21 |
| cybersecurity-bug-bounty |
44 |
10 |
An ongoing & curated collection of awesome softwar... |
2026-07-29 |
| hacking_books_collection |
44 |
10 |
A collection of PDF/books about the modern web app... |
2026-10-11 |
| TeleStrike |
44 |
12 |
TeleStrike is a red team utility designed for adve... |
2026-07-24 |
| Bounty_Hunter |
43 |
4 |
Herramienta de BugBounty atutomatizada |
2026-07-13 |
| zzl |
43 |
10 |
Zzl is a reconnaissance tool that collects subdoma... |
2026-05-04 |
| bountyReconV2 |
43 |
9 |
Framework to automate Bug Bounty Reconnaissance |
2025-12-09 |
| ras-fuzzer |
43 |
15 |
RAS(RAndom Subdomain) Fuzzer |
2026-06-22 |
| Lisbook |
43 |
103 |
Listen. Learn. Interact. Powered by open-source ma... |
2026-08-06 |
| Sandman |
43 |
8 |
A Target Tracking , NoteTaking , CheckLists and Da... |
2026-10-11 |
| ssl_pinning_remover |
43 |
10 |
An Android SSL Pinning Remover tool for Security r... |
2026-06-09 |
| grep-backURLs |
43 |
4 |
Automated way to extract juicy info with subfinder... |
2026-10-12 |
| BurpCRLFScan |
43 |
2 |
使用java编写的CRLF-Injection-burp被动扫� |
2026-10-02 |
| haktrailsfree |
43 |
17 |
Get 10k subdomains in securitytrails using cookie ... |
2026-09-25 |
| ReconNinja |
43 |
8 |
⚡ ReconNinja v10.6.0— 38-phase recon framework... |
2026-09-20 |
| BugBountyTricks |
42 |
10 |
「��Bug Bounty Tricks |
2026-10-02 |
| SubWalker |
42 |
15 |
Simultaneously execute various subdomain enumerati... |
2025-12-09 |
| curate |
42 |
12 |
A tool for fetching archived URLs (to be rewritten... |
2026-09-28 |
| open-sesame |
42 |
7 |
A python tool which runs to display random publicl... |
2026-07-02 |
| SQL-INJECTION-PWN |
42 |
10 |
A 1 Liner SQL Injection Attack using SQLMAP and va... |
2026-07-07 |
| SQL-Injection-Google-Dork-List |
42 |
10 |
Updated 6000 Sql Injection Google Dork 2021 |
2026-10-01 |
| SSLEnum |
42 |
6 |
Extract SSL certificate data (Subject Name, Subje... |
2026-07-09 |
| ICU |
42 |
9 |
An Extended, Modulair, Host Discovery Framework |
2026-07-29 |
| Bug-Hunting-methodologies |
42 |
10 |
this repo contains some public methodologies which... |
2026-09-25 |
| reap |
42 |
7 |
reconnaissance for agent attack surfaces |
2026-10-13 |
| BugBountyTargets |
41 |
8 |
No description |
2026-08-29 |
| Some-BugBounty-Tips-from-my-Twitter-feed |
41 |
13 |
No description |
2026-06-03 |
| ChangeTower |
41 |
8 |
ChangeTower is intended to help you watch changes ... |
2026-08-27 |
| endpointdiff |
41 |
5 |
Wrapper around LinkFinder to quickly determine whe... |
2025-02-07 |
| wordlist_generator |
41 |
9 |
Unique wordlist generator of unique wordlists. |
2025-12-09 |
| dProgBb |
41 |
14 |
Detect Program Bug Bounty |
2026-10-11 |
| Bug-Bounty-Resources |
41 |
13 |
Dive into a handpicked selection of tools, guides,... |
2026-09-24 |
| SniffCon-Ultimate-Recon-Dashboard-For-Bug-Bounty-And-Pentesting |
41 |
7 |
Sniffcon has a wide list of powerful online bug bo... |
2026-05-27 |
| Bug-Bounty-Tampermonkey-Scripts |
41 |
25 |
No description |
2026-10-18 |
| BypassFuzzer-Burp |
41 |
4 |
The Java Burp Extension version of my BypassFuzzer... |
2026-10-13 |
| SecuSploitX |
41 |
7 |
Sploit -- All-in-one, AI-powered cybersecurity too... |
2026-10-04 |
| Domainker |
40 |
17 |
BugBounty Tool |
2025-12-09 |
| BugBountyTemplate |
40 |
11 |
A simple Cherry Tree template that can be used to ... |
2026-02-07 |
| BugBountyTips |
40 |
10 |
Welcome to the 403 and 401 Bypass Techniques and B... |
2026-10-18 |
| lolcrawler |
40 |
10 |
Headless web crawler for bugbounty and penetration... |
2026-06-07 |
| kube-scan |
40 |
12 |
Kubernetes Scanner |
2025-01-14 |
| Emissary |
40 |
10 |
Send notifications on different channels such as S... |
2026-09-04 |
| gal |
40 |
14 |
Get all possible href |
src |
| Raven |
40 |
7 |
Raven is a powerful and customizable web crawler w... |
2026-06-01 |
| favicon-hashtrick |
40 |
6 |
Python script implementing the favicon hash trick ... |
2026-04-16 |
| SimpleReconSubdomain |
40 |
8 |
Passive and active subdomain enumeration tool for ... |
2026-09-05 |
| archives |
40 |
2 |
Unified TypeScript interface for multiple web arch... |
2026-10-16 |
| game.akashblackhat |
40 |
0 |
this app coded by developer = akashblackhat python... |
2025-02-24 |
| ppfang |
40 |
0 |
A tool which helps identifying client-side prototy... |
2026-07-25 |
| daily-commonspeak2 |
39 |
9 |
commonspeak2 subdomains wordlist generated daily *... |
2026-07-31 |
| gwdomains |
39 |
10 |
sub domain wild card filtering tool |
2026-10-02 |
| Vulnerability-Disclosures |
39 |
8 |
Vulnerability analysis and proof of concepts |
2026-07-27 |
| recce |
39 |
9 |
Domain availbility checker |
2025-01-03 |
| SSRF-Scanner |
39 |
12 |
A Complete SSRF (Server Side Request Forgery) Scan... |
2026-08-09 |
| app |
39 |
7 |
🚀 CSRFShark - a utility for manipulating cross-... |
2026-09-24 |
| scancss |
39 |
10 |
automatically crawl every URL and find cross site... |
2026-10-02 |
| sslsearch |
39 |
5 |
Hunt SSL Certificates for interesting keywords on ... |
2026-05-30 |
| AIAuditor |
39 |
11 |
Lightweight BApp that seamlessly integrates powerf... |
2026-09-30 |
| nucleihub-templates |
39 |
19 |
This repo collects nuclei template from 600+ githu... |
2026-09-26 |
| PostMessage_Fuzz_Tool |
38 |
8 |
#BugBounty #BugBounty Tools #WebDeveloper Tool |
2025-07-01 |
| BugBounty_Profile |
38 |
7 |
Recon_profile |
2025-09-04 |
| BugBountyTips |
38 |
7 |
记录一些国外æ¼�æ´žèµ�é‡‘çŒŽäººçš„æŒ–æ´žæŠ€å· |
2026-04-17 |
| hacker-checklist |
38 |
16 |
Hacking with the power of checklists. |
2026-10-02 |
| ScanApi |
38 |
19 |
Subdomains-enumeration, subdomain-takeover monitor... |
2026-09-22 |
| subfree |
38 |
8 |
Your subdomains are free for the taking - no API k... |
2026-07-21 |
| bughunting-ar |
38 |
11 |
هذا المستودع هي Ù…Øاولة منا Ù... |
2026-07-29 |
| DI.WE.H |
38 |
4 |
Repositório com conteúdo sobre web hacking em po... |
2026-02-07 |
| AssetViz |
38 |
4 |
AssetViz simplifies the visualization of subdomai... |
2026-06-05 |
| xsschecker |
38 |
6 |
xsschecker tests endpoints for reflected XSS by in... |
2026-08-09 |
| bugbounty |
37 |
4 |
è„†å¼±æ€§å ±å¥¨é‡‘åˆ¶åº¦ã�«é–¢ã�™ã‚‹è©³ç´°æ–‡æ›¸ã‚ |
2026-09-22 |
| bounty.sh |
37 |
11 |
simple bash script to earn bounties |
2026-06-05 |
| SuperTruder |
37 |
7 |
A python3 intruder that gave me bounties, easy to ... |
2026-07-31 |
| Do1ng |
37 |
10 |
Do1ng 个人维护的安全知识框架, 包括但 |
2025-03-18 |
| Pentesting |
37 |
12 |
Misc. Public Reports of Penetration Testing and Se... |
2026-09-21 |
| SearchToolkit |
37 |
9 |
SearchToolkit is advanced collection of tools, har... |
2026-10-13 |
| ip_widget |
37 |
3 |
Taskbar IP widget for kali linux (or any distro ru... |
2026-10-10 |
| HackerProxyPro |
37 |
7 |
Burp Suite Proxy Toggler Lite Add-on for Mozilla F... |
2026-09-18 |
| Awesome-Bugbounty-Writeups_devanshbatham |
36 |
5 |
No description |
2026-04-27 |
| ScreenShooter |
36 |
13 |
Convert your masscan/subdomain-scan results (80,44... |
2025-12-09 |
| MemBi |
36 |
7 |
All the members of bugbounty and infosec. If you d... |
2026-06-22 |
| AdminDirectoryFinder |
36 |
8 |
Admin Directory Finder is a tool designed to scan ... |
2026-09-25 |
| postMessageFinder |
36 |
5 |
No description |
2026-10-02 |
| BurpText4ShellScan |
36 |
1 |
Text4Shell的burp被动扫��件 |
2026-07-20 |
| bug-bounty-tips |
36 |
12 |
Our main goal is to share tips from some well-know... |
2026-09-14 |
| obsidian-ivre-plugin |
36 |
4 |
Grabs data from IVRE and brings it into Obsidian n... |
2026-09-30 |
| XSS-FINDER |
35 |
12 |
#xss #xssfinder #xss-scanner #bugbounty #hacktool |
2026-05-29 |
| BugBountyStuff |
35 |
9 |
Stuff for bug bounty |
2025-11-06 |
| bugbountyrules |
35 |
6 |
Behavioral-discipline skill turning an AI agent in... |
2026-10-11 |
| backbomb |
35 |
8 |
💣 Dockerized penetration-testing/bugbounty/app-... |
2026-07-09 |
| substats |
35 |
5 |
Subdomain enumeration statistics and wordlists fro... |
2026-08-03 |
| pwny.cc |
35 |
10 |
Repository of useful payloads and tips for pentest... |
2026-09-25 |
| ScopesExtractor |
35 |
5 |
A tool for monitoring bug bounty programs across m... |
2026-09-24 |
| ParamFirstCheck |
35 |
12 |
ParamFirstCheck identifies in a list of urls those... |
2026-10-13 |
| BugBounty |
35 |
1 |
No description |
2025-06-06 |
| nexss |
35 |
8 |
NeXSS is a modern, self-hosted Blind XSS (Cross-Si... |
2026-10-06 |
| about |
35 |
9 |
A central place to keep track of relevant BountyMa... |
2026-05-07 |
| bounty-notes |
35 |
13 |
My bug bounty notes |
2026-01-20 |
| sub-scout |
35 |
5 |
Simple bash Script to automate initial recon using... |
2026-10-11 |
| crystalball |
35 |
2 |
An enchanting 🔮 web screenshot tool for capturi... |
2026-10-03 |
| Subdomain-Takeover-Checker |
35 |
4 |
A tool for detecting subdomain takeover vulnerabil... |
2026-10-16 |
| collectvars |
35 |
9 |
collectvars collects JavaScript variables, highlig... |
2026-05-18 |
| paramx |
35 |
10 |
ParamX is a tool designed to extract and categoriz... |
2026-10-08 |
| emailextractor |
35 |
8 |
High-speed Go email scraper that crawls sites and ... |
2026-10-14 |
| Barcha |
35 |
6 |
Barcha is your Swiss‑Army knife for SQL Injectio... |
2026-09-30 |
| tldscan |
35 |
2 |
A high-performance domain scanner that discovers a... |
2026-09-30 |
| BugBounty-2024 |
34 |
3 |
Start Bug Bounty Hunting & earn some $$$$ |
2026-08-07 |
| jsmon-cli |
34 |
9 |
Command line interface for Jsmon Security Platform |
2026-09-06 |
| clickjack |
34 |
10 |
An efficient tool To Find click jacking vulnerabil... |
2026-10-05 |
| csp-analyzer |
34 |
10 |
Analyze Content-Security-Policy header of a given ... |
2026-06-30 |
| InfoSec-Alfred |
34 |
6 |
Scrap Latest Information Security Resources |
2026-07-29 |
| kicks3 |
34 |
13 |
S3 bucket finder from html,js and bucket misconfig... |
2024-11-28 |
| Bounty-VPS |
34 |
7 |
Bug Bounty Setup Tools On Fresh VPS. This scripts... |
2026-10-17 |
| OscpCheckList2026 |
34 |
13 |
No description |
2026-10-16 |
| GoogleDorker |
34 |
5 |
Google Dork Finder is a Python tool designed to fa... |
2026-08-25 |
| bugbounty-cheatsheet |
33 |
11 |
No description |
2025-12-04 |
| BugBountyData |
33 |
9 |
List of Public Bug Bounty and Responsible Disclosu... |
2026-10-11 |
| BBstats |
33 |
9 |
Bug Bounty statistics tool. |
2026-10-01 |
| Subdomain-Enumeration-Guide |
33 |
13 |
This is a comprehensive Subdomain Enumeration Guid... |
2026-04-26 |
| rejig |
33 |
8 |
Turn your VPS into an attack box |
2026-10-02 |
| SecOps-CLI-Guides |
33 |
9 |
A Collection of penetration testing and Linux admi... |
2026-10-14 |
| chiasmodon-mobile |
33 |
2 |
Chiasmodon Mobile - OSINT Tool for Domain Informat... |
2026-09-13 |
| pentesting |
33 |
3 |
CyberSec Resources: FRAMEWORKS & STANDARDS; Pentes... |
2026-10-03 |
| BugBountyNotes |
32 |
4 |
简�记录下自己在挖掘SRC |
2026-09-24 |
| bugbounty |
32 |
2 |
Basic tool for Information Gathering 🚀 |
2026-10-12 |
| reconness-agents |
32 |
13 |
Reconness Agents Script |
2026-01-22 |
| Bug_Bounty_List |
32 |
4 |
Day by day Lots of Newbie Come into bug Bounty The... |
2025-07-25 |
| netlas-python |
32 |
6 |
Netlas.io Python SDK & CLI Tool |
2026-07-01 |
| salsa |
32 |
6 |
SALSA 💃⚡ - SALesforce Scanner for Aura (and b... |
2026-09-19 |
| snetra |
32 |
6 |
A Python based scanner uses shodan-internetdb to s... |
2026-04-03 |
| bf_active_sub |
32 |
10 |
Subdomain Bruteforce - Bounty Quick Code |
2026-07-23 |
| Awesome-Security-Resources |
32 |
16 |
Vulnerability Assessment and Penetration Testing T... |
2026-06-12 |
| Orkestra |
32 |
10 |
Web-based Android debugger with inspection capabil... |
2026-07-20 |
| BladeRecon |
32 |
7 |
Intelligence-driven reconnaissance framework for b... |
2026-09-21 |
| dorker |
32 |
11 |
Better Google Dorking with Dorker. |
2026-09-13 |
| deepsec |
32 |
8 |
No description |
2026-09-03 |
| Raptor |
32 |
4 |
Passive subdomain enumeration tool with http-probe... |
2025-12-09 |
| BugBountyHunting |
31 |
12 |
Some Tutorials and Things to Help Bug Hunter |
2025-12-28 |
| bugbounty |
31 |
5 |
Grafana Labs bug bounty |
2026-06-05 |
| Facebook-BugBounty-Writeups |
31 |
4 |
Collection of Facebook Bug Bounty Writeups |
2026-05-01 |
| Bugbounty-Reading-Resoureces-blogs-researches-and-writeups |
31 |
5 |
No description |
2026-09-16 |
| AutoSubRecon |
31 |
8 |
bash script for automating subdomain enumeration p... |
2026-09-15 |
| formatify |
31 |
4 |
Formatify is a Burp Suite extension that instantly... |
2026-03-28 |
| BCheck-Burp-scripts |
31 |
6 |
Bcheck scripts for Burp |
2026-05-27 |
| OffSec-MISC |
31 |
4 |
Offensive Security MISC Annotations and Payloads f... |
2026-06-24 |
| RaKKeN |
31 |
15 |
A comprehensive cybersecurity learning repository ... |
2026-08-27 |
| AlphaScan |
31 |
4 |
A BurpSuite extension for vulnerability Scanning |
2026-07-31 |
| jsowl |
31 |
4 |
JsOwl —— Go 编写的 Web 安全信æ�¯æ”¶é›†åˆ... |
2026-10-19 |
| Some-things |
31 |
10 |
Scripts, POCs & bullshit |
2026-09-15 |
| Intro-To-Bug-Hunting |
31 |
5 |
I provide educational resources in this repository... |
2026-09-14 |
| bincache |
31 |
4 |
📦 The Largest Collection of Pre-Compiled Linux ... |
2026-05-04 |
| Red-Team |
31 |
4 |
Red teaming is an attack technique used in cyber s... |
2026-09-19 |
| BugBountyWeb3 |
30 |
2 |
BugBounty-Tips |
2026-09-23 |
| BugBounty-2.0 |
30 |
5 |
Modern real world bug bounty payloads and exploita... |
2026-07-04 |
| dom-red |
30 |
7 |
Small script to check a list of domains against op... |
2026-03-31 |
| qsinject |
30 |
8 |
qsinject (Query String Inject) is a tool that allo... |
2024-08-21 |
| simple-oob-scanner |
30 |
7 |
Simple tool to test for SSRF/OOB HTTP Read within ... |
2024-07-23 |
| CORS-Scanner |
30 |
13 |
No description |
2025-12-09 |
| Godzilla |
30 |
14 |
Godzilla is an automated scanner tool for bug hunt... |
2026-04-08 |
| BypassNinja |
30 |
8 |
Modern Bypass 403 |
2026-06-09 |
| apiffuf |
30 |
5 |
API URL fuzzer that cross-joins hosts and paths in... |
2026-10-15 |
| openredscan |
30 |
6 |
Multifunctional open redirection vulnerability sca... |
2026-01-14 |
| LeakIXClient-Python |
30 |
10 |
Python Client to LeakIX API |
2026-09-28 |
| nodep |
30 |
4 |
A tool for check available dependency packages acr... |
2026-05-04 |
| xnew |
30 |
1 |
xnew is a fast, low-memory CLI that appends only u... |
2026-08-21 |
| trilane |
30 |
1 |
TriLane: autonomous AI pentester and multi-agent s... |
2026-10-15 |
| nuclei-template |
29 |
10 |
My custom created nuclei for SQLi, bugbounty, pent... |
2026-10-18 |
| bugbounty-cicd |
29 |
6 |
A set of Gitlab pipelines and Github workflows to ... |
2026-05-01 |
| phpunit-brute |
29 |
19 |
Tool to try multiple paths for PHPunit RCE CVE-201... |
2026-10-15 |
| android-scripts |
29 |
6 |
Some simple scripts that I use during bug bounty h... |
2026-06-19 |
| db |
29 |
6 |
Bugbounty utility to store list of enumerated subd... |
2025-05-11 |
| sqlscan |
29 |
10 |
A small and an efficient tool to find SQL injectio... |
2026-08-20 |
| diffJs |
29 |
13 |
Script for monitoring changes in javascript files ... |
2026-07-02 |
| CorsOne |
29 |
4 |
CorsOne - Fast and comprehensive CORS misconfigura... |
2026-10-10 |
| hackguard |
29 |
5 |
FAST WEB APPLICATION VULNERABILITY SCANNER written... |
2026-09-25 |
| nextassets |
29 |
0 |
Bug Hunter/Red Team/Yellow Team/Blue Team/Green Te... |
2026-06-16 |
| SecretHound |
29 |
6 |
A fast and powerful CLI tool for finding secrets a... |
2026-10-16 |
| jsrip |
29 |
3 |
Crawl and analyze JavaScript for secrets, tokens, ... |
2026-10-12 |
| Fuzzout |
29 |
4 |
Every Hacker's Go to Fuzzing List. Introducing the... |
2026-08-20 |
| 400OK |
29 |
2 |
When "403 Forbidden" stands between you and your t... |
2026-10-08 |
| Awesome-Hacking |
122993 |
10856 |
A collection of various awesome lists for hackers,... |
2026-10-19 |
| strix |
69608 |
7743 |
Open-source AI penetration testing tool to find an... |
2026-10-19 |
| h4cker |
29817 |
5423 |
This repository is maintained by Omar Santos (@san... |
2026-10-19 |
| hexstrike-ai |
12919 |
2752 |
HexStrike AI MCP Agents is an advanced MCP server ... |
2026-10-19 |
| HackTools |
7086 |
784 |
The all-in-one browser extension for offensive sec... |
2026-10-18 |
| keyhacks |
6356 |
1232 |
Keyhacks is a repository which shows quick ways in... |
2026-10-18 |
| naabu |
6312 |
728 |
A fast port scanner written in go with a focus on ... |
2026-10-19 |
| awesome-bug-bounty |
5949 |
1087 |
A comprehensive curated list of available Bug Boun... |
2026-10-19 |
| KingOfBugBountyTips |
5552 |
984 |
Our main goal is to share tips from some well-know... |
2026-10-18 |
| Agentic-Bug-Hunter |
5372 |
951 |
AI-powered bug bounty hunting toolkit that works w... |
2026-10-18 |
| Awesome-OSINT-List |
4551 |
656 |
📡 Comprehensive collection of OSINT tools for c... |
2026-10-18 |
| black-hat-rust |
4445 |
443 |
Applied offensive security with Rust - https://ke... |
2026-10-18 |
| axiom |
4435 |
713 |
The dynamic infrastructure framework for everybody... |
2026-10-18 |
| afrog |
4432 |
486 |
A Security Tool for Bug Bounty, Pentest and Red Te... |
2026-10-17 |
| bug-bounty-reference |
4276 |
1024 |
Inspired by https://github.com/djadmin/awesome-bug... |
2026-10-19 |
| bounty-targets-data |
3973 |
671 |
This repo contains hourly-updated data dumps of bu... |
2026-10-19 |
| pentestagent |
3194 |
646 |
PentestAgent is an AI agent framework for black-bo... |
2026-10-19 |
| CyberStrike |
3189 |
527 |
Open-source AI-powered offensive security harness ... |
2026-10-19 |
| redamon |
3148 |
664 |
Open-source, self-hosted AI penetration testing fr... |
2026-10-19 |
| Pentest-Swarm-AI |
3016 |
551 |
Autonomous penetration testing using a swarm of AI... |
2026-10-19 |
| Claude-OSINT |
2826 |
519 |
8 Claude skills · 100+ recon capabilities · 80 s... |
2026-10-19 |
| FBI-tools |
2708 |
379 |
🕵� OSINT Tools for gathering information and ... |
2026-10-17 |
| BurpSuite-For-Pentester |
2617 |
511 |
This cheatsheet is built for the Bug Bounty Hunter... |
2026-10-17 |
| sn0int |
2553 |
228 |
Semi-automatic OSINT framework and package manager |
2026-10-18 |
| Bug-Bounty-Beginner-Roadmap |
2468 |
315 |
This is a resource factory for anyone looking forw... |
2026-10-18 |
| pentest-ai-agents |
2345 |
459 |
Turn Claude Code into your offensive security rese... |
2026-10-18 |
| open-kritt |
2312 |
413 |
Open-source, self-hosted AI vulnerability research... |
2026-10-18 |
| Gpt-Agreement-Payment |
2297 |
46 |
ChatGPT Plus/Team/Pro 订阅å��议端到端é‡�放å... |
2026-10-18 |
| dnsReaper |
2225 |
196 |
dnsReaper - subdomain takeover tool for attackers,... |
2026-10-14 |
| bug-bounty-dorks |
2137 |
501 |
List of Google Dorks for sites that have responsib... |
2026-10-17 |
| collection-document |
2119 |
504 |
Collection of quality safety articles. Awesome art... |
2026-10-17 |
| Bug-bounty |
1986 |
590 |
Ressources for bug bounty hunting |
2026-10-16 |
| google-dorks-bug-bounty |
1915 |
274 |
A list of Google Dorks for Bug Bounty, Web Applica... |
2026-10-16 |
| BBTz |
1913 |
466 |
BBT - Bug Bounty Tools (examples💡) |
2026-10-12 |
| pentest-ai |
1747 |
323 |
Open-source AI pentester that proves every finding... |
2026-10-18 |
| Bug-Bounty-Roadmaps |
1721 |
290 |
Bug Bounty Roadmaps |
2026-10-18 |
| awesome-google-vrp-writeups |
1676 |
275 |
� A list of writeups from the Google VRP Bug Bo... |
2026-10-17 |
| dumpall |
1579 |
150 |
一款信�泄�利用工具，适用于.git/.sv |
2026-10-18 |
| clairvoyance |
1543 |
138 |
Obtain GraphQL API schema even if the introspectio... |
2026-10-19 |
| First-Bounty |
1533 |
166 |
A complete, beginner-friendly bug bounty roadmap t... |
2026-10-18 |
| cook |
1380 |
143 |
A wordlist framework to fullfill your kinks with y... |
2026-10-18 |
| v3-periphery |
1335 |
1249 |
🦄 🦄 🦄 Peripheral smart contracts for inte... |
2026-10-18 |
| recon-skills |
1307 |
218 |
Recon & pentest skill pack. CORS, XSS, SQLi, SSRF,... |
2026-10-17 |
| Immunefi-bug-bounty-writeups-list |
1220 |
148 |
curation of all(most) immunefi bug bounty writeups... |
2026-10-15 |
| xalgorix |
1213 |
229 |
Autonomous AI pentesting agents — real-time reco... |
2026-10-18 |
| bug-bounty-platforms |
1134 |
220 |
A community-powered collection of all known bug bo... |
2026-10-17 |
| vigolium |
1119 |
164 |
Vigolium - High-fidelity vulnerability scanner fus... |
2026-10-18 |
| diodb |
1084 |
332 |
Open-source vulnerability disclosure and bug bount... |
2026-10-16 |
| resolvers |
1058 |
112 |
The most exhaustive list of reliable DNS resolvers... |
2026-10-16 |
| sublert |
1035 |
168 |
Sublert is a security and reconnaissance tool whic... |
2026-10-17 |
| pentest-agents |
1022 |
191 |
Bug bounty agent framework for Claude Code, Codex,... |
2026-10-19 |
| reconmap |
1001 |
145 |
Reconmap is a collaboration-first security operati... |
2026-10-18 |
| wpprobe |
961 |
126 |
A fast WordPress plugin enumeration tool |
2026-10-15 |
| cain-agent |
953 |
216 |
Real-world AI penetration testing engineer for aut... |
2026-10-16 |
| Cybermes |
949 |
159 |
Autonomous Offensive Security, Bug Bounty & Red Te... |
2026-10-18 |
| offensive-bookmarks |
920 |
68 |
A collection of bookmarks for penetration testers,... |
2026-10-18 |
| SwiftnessX |
919 |
131 |
A cross-platform note-taking & target-tracking app... |
2026-10-14 |
| study-bug-bounty |
917 |
107 |
Beginner Guide to Bug Hunting |
2026-10-17 |
| DataSurgeon |
907 |
76 |
Quickly Extracts IP's, Email Addresses, Hashes, F... |
2026-10-12 |
| ars0n-framework-v2 |
849 |
168 |
AI Native Bug Bounty Hunting Framework Designed to... |
2026-10-18 |
| penetration-testing-cheat-sheet |
847 |
165 |
Work in progress... |
2026-10-17 |
| My-CyberSecurity-Store |
839 |
236 |
This repository contains a comprehensive collectio... |
2026-10-18 |
| numasec |
814 |
104 |
The AI Agent for Cyber Security. |
2026-10-18 |
| h5i |
788 |
75 |
Unified Rust framework for building, verifying, an... |
2026-10-19 |
| InjuredAndroid |
762 |
163 |
A vulnerable Android application that shows simple... |
2026-10-12 |
| AllForOne |
748 |
109 |
AllForOne allows bug bounty hunters and security ... |
2026-10-16 |
| pentest |
747 |
105 |
Pentesting and Bug Bounty Notes, Cheetsheets and G... |
2026-10-19 |
| bounty-targets |
735 |
135 |
This project crawls bug bounty platform scopes (li... |
2026-10-17 |
| xurlfind3r |
726 |
79 |
A command-line tool for discovering URLs for a giv... |
2026-10-17 |
| chatgpt-prompts-bug-bounty |
712 |
101 |
ChatGPT Prompts for Bug Bounty & Pentesting |
2026-10-18 |
| vajra |
701 |
159 |
Vajra is a highly customizable target and scope ba... |
2026-10-10 |
| ars0n-framework |
679 |
147 |
A Modern Framework for Bug Bounty Hunting |
2026-10-09 |
| goop |
653 |
54 |
Yet another tool to dump a git repository from a w... |
2026-10-07 |
| bbrf-client |
648 |
88 |
The Bug Bounty Reconnaissance Framework (BBRF) can... |
2026-10-02 |
| src-hunter-skill |
637 |
152 |
实战 SRC / 众测 / Bug bounty �洞挖掘 Clau... |
2026-10-17 |
| Bug-Bounty-Wordlists |
636 |
123 |
No description |
2026-10-16 |
| aztec-v1 |
630 |
103 |
Public repository for the AZTEC V1 protocol. For t... |
2026-09-26 |
| bug-bounty-hunting-prompts |
624 |
128 |
Reusable prompts for a structured, evidence-first ... |
2026-10-19 |
| KEV |
620 |
41 |
Ostorlab KEV: One-command to detect most remotely ... |
2026-10-07 |
| communitytools |
577 |
84 |
Open-source Claude Code skills, agents, and slash ... |
2026-10-17 |
| rustbuster |
559 |
64 |
A Comprehensive Web Fuzzer and Content Discovery T... |
2026-10-15 |
| revsuit |
559 |
69 |
RevSuit is a flexible and powerful reverse connect... |
2026-10-14 |
| wifi-penetration-testing-cheat-sheet |
559 |
86 |
Work in progress... |
2026-10-17 |
| awesome-rtc-hacking |
556 |
52 |
a list of awesome resources related to security an... |
2026-10-18 |
| JShunter |
543 |
59 |
jshunter is a command-line tool designed for analy... |
2026-10-18 |
| WebHackingTools |
542 |
105 |
Automatically install some web hacking/bug bounty ... |
2026-10-18 |
| cheat-sheets |
531 |
61 |
A list of cheat sheets for application security |
2026-10-14 |
| flounder |
522 |
74 |
Autonomous white-hat security auditor for AI-drive... |
2026-10-17 |
| blitzstrike |
510 |
7 |
Blitz Strike — a universal MCP security-audit to... |
2026-10-18 |
| mantishack |
503 |
76 |
Mantis Hack |
2026-10-09 |
| TraceSurface |
498 |
21 |
å�‘现è—�在å‰�端代ç �里的 API，验è¯�未授æ... |
2026-10-15 |
| android-penetration-testing-cheat-sheet |
493 |
78 |
Work in progress... |
2026-10-14 |
| Bug-Bounty-Hunting-Methodology-2025 |
489 |
107 |
Bug Bounty Methodology 2025: Tools, techniques, an... |
2026-10-18 |
| subcat |
487 |
62 |
Lightning-fast subdomain discovery tool for securi... |
2026-10-17 |
| nahamsec.training |
487 |
106 |
The labs for my Udemy course (https://www.udemy.co... |
2026-10-10 |
| xss_vibes |
482 |
84 |
A modern tool written in Python that automates you... |
2026-10-11 |
| sessionprobe |
466 |
39 |
SessionProbe is a multi-threaded tool designed for... |
2026-09-25 |
| SILENTCHAIN |
464 |
100 |
AI-powered vulnerability scanner extension for Bur... |
2026-10-18 |
| DirDar |
453 |
91 |
DirDar is a tool that searches for (403-Forbidden)... |
2026-10-02 |
| ios-penetration-testing-cheat-sheet |
425 |
78 |
Work in progress... |
2026-10-13 |
| pentest-harness |
423 |
68 |
Pentest Harness — Heaven for Hackers. A self-hos... |
2026-10-18 |
| hysp |
412 |
7 |
📦 An independent package manager that every hac... |
2026-06-27 |
| crt.sh |
410 |
52 |
A fast, parallel subdomain enumeration tool that q... |
2026-10-18 |
| chomp-scan |
394 |
68 |
A scripted pipeline of tools to streamline the bug... |
2026-10-06 |
| awesome-skills-security |
392 |
69 |
Security testing toolkit for AI Agent: curated Sec... |
2026-10-18 |
| BugTraceAI |
362 |
35 |
Open-source, self-hosted web pentesting suite with... |
2026-10-18 |
| h1-brain |
358 |
48 |
MCP server that connects AI assistants to HackerOn... |
2026-10-18 |
| image-upload-exploits |
354 |
85 |
This repository contains various media files for k... |
2026-10-17 |
| bbrf-server |
341 |
50 |
The Bug Bounty Reconnaissance Framework (BBRF) can... |
2026-10-12 |
| nox-framework |
336 |
43 |
High-performance OSINT/CTI framework for automated... |
2026-10-17 |
| cyber-harness |
334 |
40 |
AI-driven pi-like agent for cyber security — sin... |
2026-10-19 |
| bug-bounty |
329 |
948 |
No description |
2026-10-18 |
| SecArchive |
328 |
59 |
🥷 SecArchive - Cybersecurity Resource Collectio... |
2026-10-12 |
| handbook |
318 |
49 |
A living document for penetration testing and offe... |
2026-10-07 |
| Subdominator |
309 |
28 |
The Internets #1 Subdomain Takeover Tool |
2026-09-19 |
| powershell-reverse-tcp |
300 |
64 |
PowerShell scripts for communicating with a remote... |
2026-08-10 |
| SRCMS |
298 |
159 |
SRCMS�业应急�应与缺陷管�系统 |
2026-07-29 |
| bug-bounty |
294 |
79 |
TON security bug bounty description |
2026-10-18 |
| Bug_Bounty_Notes |
290 |
98 |
A collection of notes for bug bounty hunting |
2026-09-24 |
| BurpMCP-Ultra |
278 |
40 |
AI-powered MCP server for Burp Suite Professional ... |
2026-10-18 |
| claude-kit |
275 |
34 |
Claude Code plugin for writing triager-grade bug b... |
2026-10-18 |
| Facebook-Bug-Bounty-Write-ups |
273 |
47 |
Hunting Bugs for Fun and Profit |
2026-09-03 |
| huntr |
272 |
86 |
Public Roadmap |
huntr.dev |
| Drana-Infinity |
268 |
51 |
Drana-Infinity is a locally hosted advanced AI ass... |
2026-10-19 |
| mySapAdventures |
258 |
74 |
A quick methodology on testing / hacking SAP Appli... |
2026-09-15 |
| forbidden |
257 |
52 |
Bypass 4xx HTTP response status codes and more. Th... |
2026-10-16 |
| AutoAR |
253 |
52 |
AutoAR is an automated security reconnaissance too... |
2026-10-14 |
| Automated-Scanner |
252 |
51 |
Trying to make automated recon for bug bounties |
2026-10-02 |
| BugTrace-AI |
252 |
52 |
[ARCHIVED] Evolved into BugTraceAI v2 — github.c... |
2026-10-12 |
| Bug-Bounty-Methodology |
250 |
46 |
No description |
2026-10-18 |
| dorky |
250 |
18 |
A tool to quickly do keyword searches over Gitlab ... |
2026-10-01 |
| public-skills-builder |
248 |
52 |
Generate Claude Code bug bounty skills from public... |
2026-10-15 |
| Zurp |
245 |
24 |
Tools that lower the barrier to security research ... |
2026-10-19 |
| Wa3r-OffSec-Kit |
244 |
40 |
� Offensive security knowledge base — 50+ doc... |
2026-10-04 |
| WebHeckScanner |
243 |
48 |
A hacking tool for bug bounties. Sharing and modif... |
2026-10-02 |
| hawkeye |
243 |
42 |
Hawkeye filesystem analysis tool |
2026-08-19 |
| dorkscout |
243 |
30 |
DorkScout - Golang tool to automate google dork sc... |
2026-09-02 |
| bug-bounty-standards |
239 |
14 |
A list of edge cases that occur in bug bounty prog... |
2026-10-12 |
| One-Liner-OSINT |
236 |
42 |
One Liner OSINT is a collection of powerful one-li... |
2026-10-18 |
| bug-bounty |
232 |
60 |
Documenting my security research journey: This rep... |
2026-10-18 |
| bug-bounty-village-defcon32-workshop |
230 |
52 |
The repo contains all the the notes, slides, and s... |
2026-10-17 |
| bounty-monitor |
223 |
47 |
Leverage certificate transparency live feed to mon... |
2026-07-29 |
| viewstamped-replication-made-famous |
222 |
13 |
A $20k consensus challenge based on TigerBeetle's ... |
2026-10-14 |
| pidrila |
222 |
27 |
Python Interactive Deepweb-oriented Rapid Intellig... |
2026-09-04 |
| secops-mcp |
219 |
36 |
All-in-one security testing toolbox that brings to... |
2026-10-18 |
| Comp_Sci_Sem_2 |
215 |
43 |
According to all known laws of aviation, there is ... |
2026-10-18 |
| goaltdns |
213 |
30 |
A permutation generation tool written in golang |
2026-10-05 |
| bug-bounty-labs |
203 |
62 |
All the labs in this repository simulate real worl... |
2026-10-18 |
| xssorRecon |
196 |
56 |
Automate Recon XSS Bug Bounty |
2026-10-03 |
| bash_scripting |
195 |
65 |
bash scripting thing! |
2026-09-15 |
| TotalPass |
194 |
15 |
Default password scanner. 默认密ç �扫æ��器 |
2026-08-21 |
| fucking-Awesome-Hacking |
194 |
21 |
A collection of various awesome lists for hackers,... |
2026-10-18 |
| commix-testbed |
187 |
65 |
A collection of web pages, vulnerable to command i... |
2026-10-17 |
| scammy-bbp |
185 |
22 |
Self-hosted bug bounty programs that are "scammy" ... |
2026-10-17 |
| secrets-ninja |
184 |
24 |
Secrets Ninja is an GUI tool for validating & inve... |
2026-10-13 |
| Arsenal |
184 |
26 |
Offline-first, searchable arsenal for pentesting &... |
2026-10-16 |
| audits |
183 |
41 |
Audits performed by Solidified |
2026-07-08 |
| BugTraceAI-CLI |
183 |
35 |
Agentic web-scanning engine with a terminal worksp... |
2026-10-14 |
| awesome-cyber-ai-arsenal |
179 |
54 |
A curated collection of offensive, defensive and A... |
2026-10-18 |
| KALI-CMDs |
178 |
40 |
"Essential Kali Linux commands for ethical hackers... |
2026-10-13 |
| Magic-CheckList-for-Web-Applications |
177 |
65 |
Web Security Checklist (Bug Bounty & Pentesting) |
2026-09-09 |
| firebaseExploiter |
177 |
18 |
FirebaseExploiter is a vulnerability discovery too... |
2026-10-13 |
| BugHunterMethodology |
172 |
42 |
A comprehensive bug bounty methodology compiled fr... |
2026-10-17 |
| PoC_CVEs |
171 |
21 |
PoC_CVEs |
2026-07-31 |
| Past-Audit-Competitions |
170 |
29 |
Bug reports from Immunefi Bounty Boosts |
2026-09-28 |
| Hexstrike-redteam |
169 |
48 |
AI-powered MCP penetration testing framework com... |
2026-10-15 |
| ai_osint |
168 |
20 |
🤖 Curated AI OSINT resources — Google dorks, ... |
2026-10-18 |
| merklemap-cli |
167 |
9 |
Discover and enumerate all subdomains associated w... |
2026-10-14 |
| web3-bug-bounty-hunting-ai-skills |
166 |
41 |
18 Claude Code skill files for smart contract secu... |
2026-10-17 |
| bounty |
163 |
31 |
[�] bounty-challenge incentivizes bug discovery... |
2026-10-16 |
| Clickjacking-Tester |
161 |
59 |
A python script designed to check if the website i... |
2026-10-16 |
| google-hacking-assistant |
157 |
8 |
ðŸ”� Chromeæ‰©å±•ï¼Œä¸ºå®‰å…¨ç ”ç©¶å’Œæ¸—é€�测试... |
2026-10-17 |
| react2shell-ultimate |
156 |
30 |
React2Shell Ultimate - The most comprehensive CVE-... |
2026-10-14 |
| nyxstrike |
155 |
36 |
AI Powered penetration testing Platform for offens... |
2026-10-12 |
| GAE-RCE |
154 |
19 |
Google App Engine - Remote Code Execution bug ($36... |
2026-10-12 |
| malware-apk |
154 |
42 |
As a bug hunter, are your bug bounty reports getti... |
2026-09-10 |
| pathbuster |
154 |
16 |
A path-normalization pentesting tool. |
2026-10-09 |
| subtake |
151 |
28 |
Automatic finder for subdomains vulnerable to take... |
2026-10-01 |
| RedteamAgent |
151 |
30 |
An AI red-team agent for authorized labs and web a... |
2026-10-19 |
| SQL_Injection-Techniques |
149 |
83 |
Advanced SQL Injection Techniques for Bug Bounty H... |
2026-10-10 |
| not-your-average-web-crawler |
149 |
36 |
A web crawler (for bug hunting) that gathers more ... |
2025-12-09 |
| Bug-Hunting |
146 |
22 |
The aim of this Reposiotry is to Provide the Resou... |
2026-10-12 |
| cloud_osint |
143 |
19 |
�� Curated Cloud OSINT resources — dorks, to... |
2026-10-12 |
| Bug-Bounty |
139 |
28 |
Here Are Some Bug Bounty Resource From Twitter |
2026-10-16 |
| bug-bounty-triage |
139 |
20 |
Agent skill for rigorous bug bounty report triage,... |
2026-10-18 |
| cyberful-public |
139 |
15 |
Cyberful is an open-source AI Red Team for discove... |
2026-10-14 |
| bug-bounty-101 |
136 |
33 |
Happy Hunting |
2026-10-02 |
| Security-Guide |
136 |
36 |
Capture The Flag |
HackTheBox |
| noxen |
133 |
15 |
Android interception tool for component communicat... |
2026-10-18 |
| Ecommerce-Website-Security-CheckList |
132 |
28 |
List of considerations for commerce site auditing ... |
2026-07-29 |
| Immunefi-Bug-Bounty-Programs-Unofficial |
131 |
19 |
Every time a Bug Bounty Program in Immunefi modifi... |
2026-10-18 |
| legion |
131 |
25 |
Scrappy assistant that automates web3 bug hunting ... |
2026-09-14 |
| Reconner |
131 |
20 |
Self-hosted bug-bounty platform — verification-f... |
2026-10-17 |
| bugz-tools |
130 |
44 |
A collection of tools I wrote for bug bounty or ha... |
2026-10-16 |
| Beetlebug |
129 |
25 |
Beetlebug is an open source insecure Android appli... |
2026-10-16 |
| public-reports |
128 |
42 |
bug bounty disclosed reports |
2026-09-15 |
| evil-twin |
126 |
15 |
Learn how to set up a fake authentication web page... |
2026-10-09 |
| Offensive-Pentesting-Web |
125 |
57 |
A proper approach to pentest a Web application wit... |
2026-10-06 |
| Security-Books |
123 |
37 |
🛡� The Ultimate Cybersecurity Library |
160+ ... |
| TIKTOK-SSL-Pinning-Bypass |
122 |
13 |
Bypass TikTok SSL/TLS certificate pinning on Andro... |
2026-10-16 |
| mach |
120 |
5 |
Mach is a fast, reliable, and extensible web fuzzi... |
2026-10-15 |
| pentestkit |
120 |
18 |
Autonomous multi-agent pentest framework — plans... |
2026-10-10 |
| xsubfind3r |
119 |
9 |
A command-line tool for discovering subdomains for... |
2026-10-14 |
| Bug-Bounty-Automation |
118 |
34 |
No description |
2026-10-18 |
| collection-web3-bug-bounty |
118 |
14 |
No description |
2026-10-16 |
| RECON-GHOST |
118 |
2 |
A powerful Bash-based automated reconnaissance too... |
2026-10-09 |
| bug-bounty-guide |
113 |
29 |
No description |
2026-10-04 |
| IKONA-Security |
111 |
59 |
🛡� Comprehensive Cybersecurity Arsenal, Bug B... |
2026-10-07 |
| xcrawl3r |
110 |
8 |
A command-line utility designed to recursively spi... |
2026-10-13 |
| Bug-Bounty-Wordlists |
109 |
30 |
This repository contains some of the most exhausti... |
2026-09-25 |
| Hacker |
109 |
2 |
This repository is maintained by Hex Core and incl... |
2026-10-18 |
| awesome-bug-bounty-tips |
108 |
16 |
A curated list of amazingly bug bounty tips from s... |
2026-10-05 |
| CopyMyWrite |
108 |
20 |
Abusing DDMA alongside Copy On Write for Cross Pro... |
2026-10-16 |
| reconic |
107 |
5 |
A Powerful Network Reconnaissance Tool for Securit... |
2026-10-02 |
| facebook-bug-bounty-writeups |
106 |
26 |
Facebook Bug Bounties |
2026-09-04 |
| amass-tools |
106 |
26 |
OWASP Amass data source scripts (assetfinder, find... |
2026-10-04 |
| AspGoat |
106 |
93 |
AspGoat is an intentionally vulnerable ASP.NET Cor... |
2026-07-08 |
| awesome-infosec |
105 |
23 |
A curated list of awesome infosec blog posts, cour... |
2026-10-07 |
| GG-Dorking |
104 |
18 |
GG Dorking is a tool to generate GitHub and Google... |
2026-08-27 |
| Payloads |
103 |
20 |
Payload for bug bounty |
2026-08-02 |
| Apkx-Hunter |
103 |
13 |
Apkx-Hunter is an Android Static Analysis Framewor... |
2026-10-18 |
| BrokenLinkHijacker |
102 |
14 |
A Fast Broken Link Hijacker Tool written in Python |
2026-10-12 |
| BugScanner |
102 |
15 |
� Advanced web vulnerability scanner with 5-rul... |
2026-10-13 |
| favicon_hash_shodan |
101 |
17 |
Calculate a site's favicon hash (MMH3) and pivot t... |
2026-09-13 |
| Keye |
99 |
31 |
Keye is a reconnaissance tool that was written in ... |
2026-10-01 |
| Codex-Prompt |
99 |
6 |
Rational engineering system prompt for Codex and L... |
2026-10-17 |
| practical-bug-bounty |
98 |
8 |
A Django web application for curating Bug Bounty e... |
2026-09-24 |
| hackerone-bug-bounty-reports |
97 |
27 |
Complete collection of bug bounty reports from Hac... |
2026-10-18 |
| sectracker |
97 |
19 |
A Modern Bug Bounty and Security Research Manageme... |
2026-10-15 |
| mildew |
97 |
20 |
Dotmil subdomain discovery tool that scrapes domai... |
2026-09-09 |
| Awesome-SRC-experience |
96 |
10 |
🚀 现代化 SRC æ¼�洞挖掘与安全攻防实æ |
2026-10-18 |
| in-class-project-2 |
96 |
38 |
According to all known laws of aviation, there... |
2026-10-02 |
| secbutler |
95 |
11 |
The perfect butler for pentesters, bug-bounty hunt... |
2026-08-12 |
| cloud |
94 |
16 |
Monitoring the Cloud Landscape |
2026-10-15 |
| Bug-Bounty-Hunting-Methodology-2026 |
93 |
12 |
Welcome to the Bug Bounty Methodology 2026 Edition... |
2026-10-16 |
| BountyHound |
92 |
15 |
Monitors and curates bug-bounty related repositori... |
2026-10-16 |
| awesome-ai-pentesting |
90 |
17 |
A curated list of AI-powered pentesting tools, fra... |
2026-10-18 |
| onaws |
89 |
11 |
Fetch the details of assets hosted on AWS. |
2026-07-02 |
| stalker |
89 |
7 |
Red Kite, the Extensible Attack Surface Management... |
2026-10-15 |
| exp0s3d |
88 |
17 |
Maximize your bug bounty hunting efficiency with e... |
2026-10-17 |
| Threatswarm |
88 |
25 |
27 scope-enforced AI agents that run the full pent... |
2026-10-14 |
| orgs-data |
87 |
22 |
Mapping from bug bounty and vulnerability disclosu... |
2026-10-17 |
| bughunter-ai |
87 |
27 |
Autonomous Bug Bounty Hunting Framework powered by... |
2026-10-15 |
| Exploit-Index |
87 |
10 |
Exploit-Index : The Ultimate CVE Proof of Concept ... |
2026-10-19 |
| Hunting-Tips |
86 |
18 |
Tips For Bug Bounty Hunters |
2026-10-18 |
| Bug-Bounty-Beginner-Roadmap |
84 |
5 |
This repository is a curated resource for aspiring... |
2026-10-07 |
| keylogger |
84 |
33 |
Windows OS keylogger with a hook mechanism (i.e. w... |
2026-04-19 |
| gho-bug-bounty |
83 |
20 |
No description |
2025-09-04 |
| Bug-Bounty-Dorks-And-Platforms |
82 |
39 |
This are some Dorks and Platform to find the Bug B... |
2026-07-20 |
| Bug-Bounty-Resources |
82 |
19 |
Bug-Bounty Resources and Articles |
2026-09-04 |
| SourceCodeReview |
82 |
19 |
Source Code Review resources for Bug Bounty Hunter... |
2026-06-26 |
| vuln-report-skill |
82 |
1 |
Claude Code skill: turn confirmed vulnerabilities ... |
2026-10-13 |
| awesome-blockchain-bug-bounty |
80 |
11 |
A comprehensive curated list of available Blockcha... |
2026-10-08 |
| WaspSting |
79 |
18 |
Tool to assist bug bounty hunters |
2026-10-07 |
| penetration-testing-roadmap |
77 |
11 |
🎯 A structured 60-week penetration testing curr... |
2026-10-17 |
| actarus |
76 |
24 |
Actarus is a custom tool for bug bounty |
2026-08-05 |
| cybersec-toolkit |
76 |
13 |
One command installs 670+ security tools on Debian... |
2026-10-15 |
| Layla |
75 |
18 |
[EN] BETA: Layla - recon tool for bug bounty |
2026-07-07 |
| bounty-domains |
75 |
27 |
List of domains in scope for bug bounties (HackerO... |
2026-10-02 |
| 50-Days-Of-SQLi |
75 |
16 |
Learning and hunting SQL injection bugs for 50 con... |
2026-02-13 |
| bug-reaper |
74 |
10 |
Web2 bug bounty Agent Skill — evidence-based, no... |
2026-10-09 |
| java-reverse-tcp |
74 |
14 |
JAR, Java, and JSP shells that work on Linux OS, m... |
2026-09-27 |
| Facebook-Bug-Bounty-Writeups |
73 |
9 |
No description |
2026-09-28 |
| dioterms |
73 |
8 |
Open-source vulnerability disclosure policy templa... |
2026-10-11 |
| Bug-Bounty-Roadmap |
72 |
6 |
Best Bug Bounty Roadmap for 2026 |
2026-10-05 |
| Workflow-Bug-Bounty |
69 |
23 |
My Tools For Bug Bounty |
2026-09-26 |
| OctoScan |
69 |
12 |
A versatile CLI tool orchestrating pentest tools f... |
2026-10-14 |
| bug-bounty-scope |
66 |
3 |
No description |
2026-09-10 |
| daf |
66 |
8 |
Daily activity feed of bug fixes and code changes ... |
2026-09-02 |
| leaklens |
66 |
6 |
Bug bounty focused JavaScript security analysis fo... |
2026-10-16 |
| BB-Tips |
65 |
21 |
Collection of Bug Bounty Tips |
2026-06-15 |
| HackerOne-Disclosed-Reports |
65 |
24 |
A structured, auto-updating archive of disclosed H... |
2026-10-19 |
| 365 |
65 |
9 |
BlueTeam, RedTeam, Bug bounty, CTI, OSINT, Threat ... |
2026-09-27 |
| CyberDeck |
65 |
8 |
Hackers Cookbook - Tons of hacker cli recipes read... |
2026-10-14 |
| awesome-molt-ecosystem |
65 |
35 |
The brutally honest map of where AI-agent money ac... |
2026-10-10 |
| Comment2Shell |
65 |
15 |
Comment2Shell is a zero click pre auth RCE exploit... |
2026-10-12 |
| Burp_Suite-Antigravity_AI-Bug_Bounty_Hunter |
64 |
9 |
Burp_Suite-Antigravity_AI-Bug_Bounty_Hunter |
2026-07-13 |
| URILoot |
64 |
11 |
URILoot is a browser extension designed for Bug Bo... |
2026-08-19 |
| bug-bounty |
63 |
23 |
Repo for tracking bugs in bounty and WorkChain.io ... |
2025-09-04 |
| Pinakastra |
63 |
7 |
AI-powered pentesting framework with automated rec... |
2026-10-14 |
| intel-codex |
63 |
15 |
Open-source field manual for OSINT, DFIR and cyber... |
2026-10-06 |
| bug-bounty-resources |
62 |
18 |
Resources I consider useful for security research ... |
2026-09-06 |
| security_whitepapers |
62 |
159 |
Collection of misc IT Security related whitepapers... |
2025-10-31 |
| Awesome-Hacking |
62 |
8 |
� Welcome to Hack-Academia, your ultimate resou... |
2026-10-17 |
| Meta-Owned-IT-Assets |
61 |
9 |
Curated list of Meta (formerly Facebook) owned IT ... |
2026-10-15 |
| ex-param |
61 |
14 |
ex-param is an automated tool designed for finding... |
2026-09-20 |
| hackerone_wordlist |
60 |
62 |
The wordlists that have been compiled using disclo... |
2026-03-04 |
| LibreOffice_Tips_Bug_Bounty |
60 |
7 |
Some tips for Bug Bounty using LibreOffice |
2026-09-17 |
| Parshu |
60 |
9 |
Filter URLs to save your time. |
2025-04-17 |
| keysec-hunter---Chrome-extension |
60 |
10 |
KeySec Hunter is a Chrome extension that scans... |
2026-10-12 |
| opencode-pentester |
60 |
7 |
Full-spectrum security assessment tool for opencod... |
2026-10-18 |
| notes |
59 |
16 |
Bug Bounty & Other Stuff |
2026-05-11 |
| HuntTheBug |
59 |
17 |
Advanced reconnaissance framework for bug bounty h... |
2026-10-02 |
| ShoLister |
59 |
19 |
ShoLister is a tool that collects all available su... |
2026-07-03 |
| PenHunter |
59 |
14 |
Pen Hunter is a comprehensive vulnerability scanni... |
2026-10-03 |
| Wordlist-for-Bug-Bounty |
58 |
10 |
I collected it to help the bug hunter get a reward |
2026-06-10 |
| mastermind-bug-bounty |
58 |
5 |
Autonomous offensive security orchestration skill ... |
2026-10-13 |
| bug-bounty-testing-essential-guideline-startup-bug-hunters |
57 |
17 |
Bug Bounty Testing Essential Guideline : Startup B... |
2026-09-09 |
| awsome-websecurity-checklist |
57 |
9 |
No description |
2026-10-17 |
| find-cve-agent |
57 |
11 |
CVE hunting harness for Claude Code - 20 skills, 5... |
2026-10-14 |
| SSRFmap |
56 |
18 |
Simple Server Side Request Forgery services enumer... |
2026-10-04 |
| phantom-ethical-redteam |
56 |
14 |
An autonomous agent that acts as a DEF CON-level C... |
2026-09-13 |
| JWTLens |
55 |
10 |
JWTLens - Burp Suite extension for automated JWT s... |
2026-10-07 |
| Hardware-Hacking-Tools |
55 |
4 |
Lists various tools used in hardware hacking. |
2026-10-08 |
| OhMyBounty |
54 |
14 |
Bug bounty monitoring tool |
2026-10-14 |
| Forbidra |
54 |
9 |
A bug bounty tool for bypassing 401/403 access res... |
2026-09-28 |
| bug-bounty |
53 |
12 |
STON.FI Bug Bounty program |
2026-08-27 |
| Recon-tools |
52 |
16 |
Some of my bug bounty tools |
2026-10-02 |
| WonderSuite-Ai-Bug-Bounty |
52 |
8 |
AI-Powered Offensive Security Research Engine - de... |
2026-10-18 |
| DIR-WORDLISTS |
52 |
17 |
Some wordlists collected form github to all bug bo... |
2026-10-16 |
| Burp-Suite-Obsidian-Integration |
52 |
4 |
Organize, track, and share vulnerability findings ... |
2026-10-11 |
| Beemovie |
52 |
10 |
Bee Movie script for educational purposes only, an... |
2026-09-08 |
| Bugzee |
50 |
11 |
Simple Script to install recommended Bug Bounty Hu... |
2026-10-05 |
| cybermind |
50 |
6 |
âš¡ AI-powered cybersecurity CLI tool for Kali Lin... |
2026-10-18 |
| awesome-repos |
50 |
5 |
Repositories, Links, Payloads, Blogs, Tools, etc..... |
2026-09-27 |
| xforwardy |
50 |
14 |
Host Header Injection Scanner |
2026-10-01 |
| xss-catcher |
50 |
7 |
Simple API for storing all incoming XSS requests a... |
2026-09-25 |
| Bug_Bounty_Reports |
49 |
10 |
Summary of almost all paid bounty reports on H1 |
2026-07-12 |
| trusty-bbp |
49 |
2 |
Legitimate bug bounty programs value ethical pract... |
2026-10-02 |
| recon-automation |
49 |
15 |
This script will install all the essential bug bou... |
2026-08-22 |
| n8n-for-bug-bounty |
48 |
9 |
n8n workflows related to bug bounty |
2026-09-01 |
| bounty_tools |
48 |
13 |
Various tools for managing bug bounty recon and ex... |
2026-07-21 |
| MonMon |
48 |
8 |
Monitoring Monster (MonMon) is a monitoring tool f... |
2026-10-12 |
| Hackbot-Arena |
48 |
11 |
⚔� Benchmark your AI agent with 30 Docker-base... |
2026-10-14 |
| ClickjackPoc |
48 |
10 |
Seamlessly Detect and Construct Exploit POCs for C... |
2026-01-31 |
| alter-zero |
48 |
4 |
RAM efficient terminal agent harness for coding, c... |
2026-10-18 |
| Bug-Bounty-Resources |
47 |
16 |
No description |
2026-06-06 |
| Discovery-Header-Bug-Bounty |
47 |
18 |
Discovery Header Bug Bounty to DoD |
2026-07-08 |
| bug-bounty |
47 |
11 |
bounty collection |
2026-08-29 |
| Bug-Bounty-Search-Engine.io |
47 |
10 |
� Bug Bounty Search Engine - Advanced reconnais... |
2026-10-12 |
| bash-hacks |
47 |
17 |
Handy bash and python scripts for bug bounty hunti... |
2025-10-27 |
| VulneraMCP |
47 |
9 |
An AI-Powered Bug Bounty Hunting Platform - Compre... |
2026-10-17 |
| ios-26-activation-research |
47 |
3 |
iOS 26.3 activation lock research -- 31 firmware v... |
2026-10-18 |
| 100DaysofBugBounty |
46 |
5 |
No description |
2026-07-09 |
| JWTXposer |
46 |
15 |
An advanced JWT extraction & decoding tool for bug... |
2026-10-14 |
| yandex-recon |
46 |
2 |
Advance Level yandex dorking for bug bounty huntin... |
2026-10-15 |
| CyberInject |
46 |
6 |
A comprehensive browser extension designed for aut... |
2026-09-28 |
| sublist3rV2 |
45 |
8 |
Fast subdomains enumeration tool for penetration t... |
2026-10-13 |
| awesome-bug-bounty |
44 |
20 |
No description |
2026-08-26 |
| claude-ai-cyber-security-skills |
44 |
5 |
30 Claude Code Skills + 60+ integrated tools for H... |
2026-10-15 |
| xpfarm |
44 |
43 |
Free XP on bug bounty, vulnerability scanning by w... |
2026-07-29 |
| webripper-pro |
44 |
9 |
Webripper Pro is a comprehensive, professional-gra... |
2026-09-07 |
| Bug-Bounty-Script |
43 |
18 |
Bug-hunting Automation |
2026-08-23 |
| crypto-audits |
43 |
23 |
A mapping for open source cryptocurrency, blockcha... |
2026-10-17 |
| researchlab |
43 |
10 |
Spec-driven bug bounty writeups and real world se... |
2026-09-18 |
| h1-asset-fetcher |
43 |
10 |
Fetch, download, and decompile Android/iOS/Exe ass... |
2026-10-12 |
| saas_enum |
43 |
5 |
Command-line tool for discovering SaaS platforms a... |
2026-10-16 |
| waybackshot |
43 |
5 |
(CLI wrapper) Takes a list of URLs and retrieve sc... |
2026-10-12 |
| fastbugbounty |
42 |
11 |
Fast Bug Bounty Script |
2026-09-25 |
| PwnTraverse |
42 |
23 |
PwnTraverse, An advanced path traversal & endpoint... |
2026-09-19 |
| Kali-Linux-Configuration |
42 |
19 |
Comprehensive guide to configuring Kali Linux, a D... |
2026-09-09 |
| ronin-recon |
42 |
10 |
A micro-framework and tool for performing reconnai... |
2026-06-06 |
| vilicus |
41 |
10 |
Bug bounty API dashboard aggregating data from Hac... |
2026-09-14 |
| should-i-submit |
41 |
6 |
A local, safety-first pre-submission reviewer for ... |
2026-10-14 |
| ShubhamWebScript-Website-vulnerability-Checker |
41 |
13 |
Find any website vulnerability and bugs in few sec... |
2026-10-12 |
| Bug_Bounty_Web_and_API_Tools |
40 |
16 |
Bug Bounty Web and API Payloads |
2026-05-02 |
| AI-Bug-Bounty |
40 |
8 |
A Development of AI to automate bug bounty |
2026-06-11 |
| ChatGTP3-Prompts_Bug-Bounty |
40 |
2 |
A list of ChatGPT Prompts for Web Application Secu... |
2026-07-24 |
| pentest-toolkit |
40 |
8 |
GitHub - therealilyas/pentest-toolkit: PentestKit ... |
2026-10-14 |
| paragon |
40 |
4 |
A web based checklist driven note taking app follo... |
2026-02-18 |
| Tools |
40 |
7 |
🛠� This repository is continuously updated wi... |
2026-10-16 |
| Oneliner-Bug-Bounty-Collection |
39 |
8 |
Oneliner Bug Bounty Collection collected from GitH... |
2026-07-10 |
| bounty-brain |
39 |
9 |
Bug bounty methodology, checklists, and hunting no... |
2026-10-15 |
| cook-ingredients |
39 |
10 |
The largest collection of wordlists in yaml for bu... |
2026-09-22 |
| ApiBrute |
39 |
4 |
An async API bruteforcer. it is a fast, lightweigh... |
2026-10-09 |
| Anvil |
39 |
4 |
Anvil is a runtime-first attack surface assessment... |
2026-10-06 |
| Roadmap |
38 |
7 |
Bug Bounty Roadmap |
2026-08-19 |
| Hands-On-Bug-Hunting-for-Penetration-Testers |
38 |
21 |
Hands-On Bug Bounty for Penetration Testers, publi... |
2026-09-15 |
| Watch-Tower |
38 |
8 |
Simple Python Script for Tracking Bug Bounty Progr... |
2026-09-09 |
| ugly-scripts |
38 |
9 |
A collection of scripts for bug-bounty related stu... |
2026-07-31 |
| recon-scripts |
38 |
6 |
A simple reconnaissance framework for bug bounty h... |
2026-07-01 |
| BBSSRF |
38 |
9 |
BBSSRF - Bug Bounty SSRF is a powerful tool to che... |
2024-07-21 |
| audits |
38 |
2 |
Contest submissions and bug bounties |
2026-10-05 |
| AI-Pentest-Playbook |
38 |
16 |
🛡 The reference playbook for pentesting AI chat... |
2026-10-18 |
| solana-security-standard |
38 |
4 |
Solana's SOL-0XX security standard — bug-class r... |
2026-09-19 |
| Awesome-Hacking-Learning-Path |
38 |
11 |
A comprehensive hacking learning path covering Pen... |
2026-10-17 |
| PenScope |
38 |
2 |
Passive recon & attack surface mapper — zero req... |
2026-10-14 |
| Function |
38 |
12 |
According to all known laws of aviation, there is ... |
2026-10-07 |
| Bug-Bounty |
37 |
12 |
Bug Bounty Resources from Scratch to start Hunting... |
2026-04-11 |
| coli |
37 |
12 |
COLI (Command Orchestration & Logic Interface) –... |
2026-10-17 |
| bug-bounty |
36 |
0 |
No description |
2026-10-17 |
| Web-Scraper |
36 |
13 |
Web Scraper is a melange of Web tools for web hack... |
2026-09-25 |
| gh_scanner |
36 |
4 |
GH Scanner Tool is written in Python3 and designed... |
2026-08-27 |
| ReconForge |
36 |
3 |
No description |
2026-10-09 |
| HTTPCustomHouse |
36 |
4 |
HTTP request smuggling attack helper/CLI tools to ... |
2026-05-27 |
| Kali-Linux-Complete-Setup |
36 |
5 |
Step-by-step guide to install, configure, and hard... |
2026-10-18 |
| 100DaysofBugBounty |
35 |
6 |
It's collection of my learning during 100 days . |
2025-02-21 |
| Bug_Bounty-Google_Dorks |
35 |
5 |
List of Google dorks to find VDPs and Bug Bounty P... |
2026-10-05 |
| immunefi-terminal |
35 |
4 |
A datasette dashboard and source code downloader f... |
2026-06-01 |
| mongobleed-scanner |
35 |
5 |
MongoDB CVE-2025-14847 Heap Memory Leak Scanner |
... |
| github-scanner-local |
35 |
17 |
Locally scan all the repositories of a github orga... |
2026-09-26 |
| Bug-Bounty-Recon |
34 |
10 |
All The Notes And Tips I FOund In Github And Twitt... |
2026-10-02 |
| 1ndi-hacks |
34 |
8 |
Bug Bounty Tools |
2025-04-01 |
| getting-started |
34 |
5 |
Getting started in bug bounty! |
2026-08-30 |
| OWASPBugBounty |
34 |
26 |
This is a container of web applications that work ... |
2026-01-07 |
| claude-code-bb |
34 |
11 |
CLAUDE.md configs and skills I use for bug bounty ... |
2026-10-10 |
| ai-cyber-agent |
34 |
8 |
AI-powered cyber security scanner for red team ope... |
2026-09-16 |
| bundlebleed |
34 |
9 |
AI/LLM-assisted JS Recon and vulnerability triage ... |
2026-10-01 |
| hackerone-tracker |
34 |
6 |
Track HackerOne reports and leaderboard changes on... |
2026-03-01 |
| brs-xss |
34 |
6 |
MIT license BRS-XSS is a modular Python CLI scanne... |
2026-10-06 |
| bug-bounty-dorks |
33 |
9 |
List of Google Dorks for sites that have responsib... |
2026-10-08 |
| Bug-Bounty-Tips-Collection |
33 |
6 |
A collection of Bug Bounty Tips collected from Git... |
2026-09-02 |
| Bug-Bounty-Methodology |
33 |
2 |
No description |
2026-10-11 |
| ecdsaPredictableNonce |
33 |
6 |
Ethereum Bug Bounty Submission: Breaking ecdsa tha... |
2026-02-11 |
| ibb |
33 |
6 |
Is like jq for Immunefi REST API. Search, filter a... |
2026-10-05 |
| PathFinder |
33 |
8 |
Cross-platform Go CLI Security - PathFinde... |
2026-10-16 |
| haxtools |
33 |
1 |
A highly customised CTF, bounty hunting & penetrat... |
2026-09-01 |
| HTLogin |
33 |
6 |
HowToLogin - HTLogin is authentication security sc... |
2026-10-08 |
| pentesting-cyber-mcp |
33 |
10 |
� 50+ MCP Security Servers for AI-Powered Pente... |
2026-10-18 |
| chad |
33 |
5 |
Search Google Dorks like Chad. / Broken link hijac... |
2026-07-01 |
| Bug-Bounty-Search-Engine |
32 |
32 |
No description |
2026-10-03 |
| Bug_bounty_Notes |
32 |
14 |
No description |
2026-08-16 |
| Bug-Bounty-Tips |
32 |
9 |
I will share my bug bounty tips here |
2025-02-01 |
| telegram_bbbot |
32 |
5 |
Telegram Bug Bounty Bot |
2025-01-21 |
| Wildfire-Toolkit |
32 |
9 |
A collection of automation scripts for bug bounty ... |
2026-09-03 |
| bountymeter |
32 |
3 |
[BASH] Bounty Meter is a command-line utility tool... |
2026-02-12 |
| filter-var-sqli |
32 |
1 |
Bypassing FILTER_SANITIZE_EMAIL & FILTER_VALIDATE_... |
2025-02-20 |
| cybersec |
32 |
11 |
CyberSecurity Resources and Tools |
2026-09-06 |
| Ai-Prompts |
32 |
5 |
🧾 |
Use these AI prompts to refine your searche... |
| The-BlackHAT-roadmap |
32 |
5 |
The complete hacking & penetration testing roadmap... |
2026-10-18 |
| Bug-Bounty-RoadMap |
31 |
10 |
Bug Bounty Methodology-slides by Muhammad M. Awali... |
2026-09-15 |
| aws-s3-bucket-wordlist |
31 |
17 |
Most common AWS S3 bucket names. |
2026-05-14 |
| ghmon |
31 |
7 |
Automated GitHub secret scanning with smart alerti... |
2026-04-13 |
| HackerGPT-Plasmoid |
31 |
4 |
HackerGPT Plasmoid is a KDE Plasma plasmoid that p... |
2026-07-28 |
| phishing-mobile-app |
31 |
19 |
Phishing mobile application made in React Native f... |
2026-09-04 |
| Vulnshop |
31 |
2 |
Web Application Pentesting Lab with over 40 plus v... |
2026-10-14 |
| hackgpt |
31 |
0 |
HackGPT is a collective one place resource project... |
2026-04-04 |
| Math-Quiz |
31 |
13 |
According to all known laws of aviation, there is ... |
2026-10-09 |
| For-Bug-Bounty-Hunter- |
30 |
16 |
README.md |
2026-08-29 |
| BetterBugBounty |
30 |
12 |
BetterBugBounty - Here tools are classic, bugs are... |
2026-08-23 |
| Bug-Bounty-Dorks |
30 |
10 |
No description |
2024-12-06 |
| bountycatchremix |
30 |
9 |
Bug bounty domain manager with validation, exports... |
2026-09-24 |
| fire |
30 |
2 |
Take domains on stdin and output them on stdout if... |
2026-10-02 |
| FastRecvSMS |
30 |
10 |
SMS verification CLI. Buy temp numbers and receive... |
2026-10-18 |
| Kryon |
30 |
6 |
Autonomous offensive-security agent: recon, author... |
2026-10-08 |
| Bug-Bounty-Scripts |
29 |
8 |
Script for Bug Bounty |
2025-06-13 |
| Bug-Bounty-Page |
29 |
8 |
A repo to make our changes more transparent to bug... |
2023-01-28 |
| OpenBugBounty-Scrapper |
29 |
6 |
This script scrapes the list of open Bug Bounty Pr... |
2026-09-27 |
| AEGIS_RED_HORIZON |
29 |
9 |
Plataforma Automatizada de RedTeam y Bug Bounty |
2026-08-27 |
| h1-asset-fetcher |
29 |
5 |
Tools for bug bounty |
2025-10-27 |
| beta |
29 |
21 |
Pre-release of Liquity Protocol smart contracts, i... |
2025-09-12 |
| findbbprograms |
29 |
10 |
Check if domain has bug bounty program or not |
2026-09-24 |
| greaper |
29 |
4 |
Bug Bounty ultimate tool |
2026-09-21 |
| deepbug |
29 |
15 |
Self-hosted bug bounty & recon platform: per-proje... |
2026-09-06 |
| raymond |
29 |
2 |
Rayomd is a gathering information Framework for pe... |
2026-10-12 |
| writeups |
29 |
2 |
A hand-picked collection of the best bug bounty & ... |
2026-10-18 |
| Vigil |
29 |
1 |
AI harness for long-running code audits, web pente... |
2026-10-17 |
| penetration-testing-notes |
29 |
8 |
this my repo with notes i take in penetration test... |
2026-04-15 |
| BugBountyKit |
28 |
15 |
Ferramenta Profissional de Bug Bounty em Bash |
2026-09-30 |
| Recon |
28 |
11 |
Bug Bounty Recon Tools |
2026-06-15 |
| bugbounty101 |
28 |
23 |
An entry level resource to learning bug bounty. |
2026-07-08 |
| Bug-Bounty-Checklist |
28 |
7 |
No description |
2026-05-11 |
| Bug-Bounty-Free-Resources |
28 |
5 |
Elevate your bug bounty game with our treasure tro... |
2026-08-25 |
| coolsubh |
28 |
11 |
This Is The Ultimate Bug Bounty Automation & Web H... |
2025-10-12 |
| oty |
28 |
11 |
Oty is a fast, customizable, CLI tool designed to ... |
2026-01-13 |
| er |
28 |
4 |
� Easy Regex |
2025-11-17 |
| subdomainx |
28 |
1 |
Subdomain enumeration & reconnaissance framework f... |
2026-09-23 |
| drakben |
28 |
6 |
Autonomous AI pentesting agent that understands na... |
2026-10-18 |
| 4oFour |
28 |
3 |
A tech enumeration toolkit focused on 404 Not foun... |
2026-09-03 |
| webdojo |
28 |
6 |
A learning and testing environment for web applica... |
2026-03-24 |
| attack-surface-toolkit |
28 |
2 |
Passive Attack Surface Toolkit: Module-based passi... |
2026-10-09 |
| Cascavel |
28 |
4 |
� Cascavel — The zero-friction offensive secu... |
2026-10-15 |
| bug-bounty-tools |
27 |
6 |
A BASH Script to automate the installation of the ... |
2026-08-24 |
| WordPress-BugBounty |
27 |
3 |
It serves as a practical guide for security resear... |
2026-07-19 |
| Clear-Sky |
27 |
9 |
Bug Bounty Recon Automation Script -- Scan AWS IP ... |
2026-10-06 |
| Needle |
27 |
10 |
Instant access to you bug bounty submission dashbo... |
2026-10-17 |
| ReconX |
27 |
3 |
Automated reconnaissance framework for bug bounty ... |
2026-10-12 |
| claude-code-deepseek |
27 |
5 |
Run Claude Code CLI with DeepSeek API — cheap hi... |
2026-10-14 |
| Genbounty-LLM-Hunter-Community-Free |
27 |
7 |
Toolkit for AI whitehats, internal red teams, llm ... |
2026-10-12 |
| Bug-bounty-methodology |
27 |
1 |
No description |
2025-10-08 |
| security-writeups |
27 |
3 |
A curated collection of my security research and b... |
2026-10-16 |
| claude-code-pentest |
27 |
6 |
6 Claude Code skills that automate the entire pent... |
2026-10-19 |
| awesome-cybersecurity-paths |
27 |
3 |
The complete cybersecurity career roadmap and hand... |
2026-10-09 |
| BurpJSReconRadar |
27 |
6 |
Burp Suite extension for passive JS reconnaissance... |
2026-10-12 |
| flydns |
27 |
4 |
Related subdomains finder |
2026-05-25 |
| wordpress-plugins |
27 |
8 |
Scrape all wordpress plugins (updates every 6 hour... |
2026-10-19 |
| Bug-Bounty-Platforms |
26 |
7 |
Bug Bounty Platforms |
2025-10-01 |
| recon-raven |
26 |
8 |
Reconnaissance tool of Penetration test & Bug Boun... |
2026-06-22 |
| pentest-scripts |
26 |
10 |
Compilation of scripts/tools (made by me or not) t... |
2026-09-06 |
| writeups |
26 |
1 |
My CTF & Bug Bounty writups |
2023-03-23 |
| HTB-certifiedCBBH |
26 |
4 |
# HTB-certified-bug-bounty-hunter-exam-cheetsheet ... |
2026-10-04 |
| subdomainator |
26 |
4 |
Stay on top of new domains! Bug bounty hunters can... |
2025-02-12 |
| Live-Hunting-Videos |
26 |
2 |
A community-curated collection of real bug bounty ... |
2026-10-12 |
| gotld |
26 |
1 |
Command-line tool to enumerate top-level domains, ... |
2024-09-25 |
| src-research |
26 |
2 |
AI Agent从零å¦ä¹ SRCæ¼�洞挖掘的全过程记 |
2026-10-16 |
| XSS_payloads_list |
26 |
0 |
A curated list of common and advanced Cross-Site S... |
2026-09-29 |
| this-ones-for-you-my-retalyation.-also-haha-arrow-game-lolol |
26 |
0 |
According to all known laws of aviation, there is ... |
2026-08-30 |
| Bug-Bounty-Roadmaps-Collection |
25 |
6 |
No description |
2026-08-15 |
| Google-Dorking-for-Bug-Bounty- |
25 |
6 |
Here's an updated Google Dorking list for 2025 Bug... |
2026-10-08 |
| norske-bug-bounty-program |
25 |
6 |
List over kjente norske bug bounty-program 🇳🇠|
2026-08-29 |
| Practical-Bug-Bounty-Hunting-for-Hackers-and-Pentesters |
25 |
7 |
Practical Bug Bounty Hunting for Hackers and Pente... |
2026-06-26 |
| Bugbounty-VPS-config |
25 |
7 |
My Ubuntu 22.04 VPS general configs and scripts I ... |
2026-10-07 |
| BugBountyToolz |
25 |
0 |
A collection of open-source tools designed to stre... |
2026-10-19 |
| Sling-Shot-R3con |
25 |
5 |
🚀 Sling Shot R3con: Automate Your Bug Bounty an... |
2025-05-19 |
| KeysKit |
25 |
5 |
An opensource tool built to help bug bounty hunter... |
2026-04-10 |
| urlx |
25 |
1 |
Multi-source URL discovery & live host probing for... |
2026-09-06 |
| Hexstrike-AI |
25 |
6 |
HexStrike AI MCP Agents is an advanced MCP server ... |
2026-10-13 |
| Security-Engineer-Toolkit |
25 |
3 |
An all-in-one repository for setting up a new VM w... |
2026-09-17 |
| BugTraceAI-WEB |
25 |
5 |
Analyst workspace for web and API testing: scan co... |
2026-10-13 |
| vulnerable-code-snippet |
25 |
11 |
Sample Vulnerable and Secure Code Snippets for Var... |
2026-09-25 |
| BadGPT |
25 |
0 |
BadGPT is a robust framework designed to simplify ... |
2026-05-10 |
| InstaRecon |
25 |
11 |
� Professional Instagram OSINT tool for penetra... |
2026-09-03 |
| hacker101-CTF-Solutions |
25 |
7 |
Comprehensive walkthroughs and solutions for Hacke... |
2026-10-04 |
| VERDICT |
25 |
5 |
The autonomous pentester that proves its findings ... |
2026-10-14 |
| secrets |
24 |
14 |
Offsec Pentest and Bug Bounty Notes |
2026-02-12 |
| verylazytech.github.io |
24 |
8 |
Google Dorks for Bug Bounty |
2026-10-06 |
| bug_bounty_tools |
24 |
6 |
This project is to install some tools to help me a... |
2026-07-16 |
| Bug-Bounty-Resources |
24 |
6 |
Write-ups of All types Bugs |
2026-07-28 |
| bug-bounty |
24 |
4 |
No description |
2025-08-07 |
| BugBountyTips |
24 |
2 |
BugBountyTips en Español |
2026-09-25 |
| log4shell-looker |
24 |
3 |
log4jshell vulnerability scanner for bug bounty |
2026-02-26 |
| Bug-bounty-writeups |
24 |
2 |
Structured practice: Mainly PortSwigger lab writeu... |
2026-10-18 |
| golang_bug_hunting |
24 |
2 |
Live for Go hackers (bug bounty) |
2026-09-23 |
| ars0n-framework-v2-scan-data |
24 |
4 |
A repo to store public scan data for my bug bounty... |
2026-09-02 |
| dark_wxlf |
24 |
8 |
bug bounty automation with 4-phase workflow: passi... |
2026-10-08 |
| semgrep-rules |
24 |
4 |
My custom semgrep rules |
2026-06-17 |
| kali-dockerized |
24 |
6 |
Kali Linux in Docker + Ubuntu 26.04 in Docker for ... |
2026-08-17 |
| subtron |
24 |
3 |
Subtron is a professional grade subdomain enumerat... |
2026-10-06 |
| webstrike-framework |
24 |
3 |
WebStrike — automated web-pentesting framework t... |
2026-10-16 |
| android-ssl-pinning-bypass |
24 |
1 |
Android SSL Pinning Bypass |
2026-06-10 |
| dns-exfiltrator |
24 |
8 |
Exfiltrate data with DNS queries. Based on CertUti... |
2026-05-25 |
| Pavan-BugBounty-PlayBook |
23 |
10 |
A BugBounty playbook covering vulnerability bypass... |
2026-04-18 |
| yahoo-subdomains |
23 |
11 |
Yahoo subdomains for bug bounty |
2026-08-25 |
| Wordlist |
23 |
8 |
Wordlists for Bug Bounty |
2025-10-14 |
| awesome-bug-bounty |
23 |
7 |
A curated list of resources, tools, and wordlists ... |
2026-10-16 |
| bb-huge |
23 |
6 |
bb-huge 🤗 , Personal bug bounty findings hub an... |
2026-10-15 |
| Offensive-Recon |
23 |
19 |
Passive Reconnaissance Techniques Approach helps f... |
2026-10-14 |
| web3-sec-ai-prompts |
23 |
5 |
AI prompts for web3 security researchers — bug b... |
2026-10-08 |
| bugbounty-monitor-bot |
23 |
4 |
A basic Bug Bounty target monitoring tool based on... |
2026-10-11 |
| d0rk1ng |
23 |
3 |
The Complete Guide to Dorking for Bug Bounty Hunte... |
2026-09-18 |
| BountyGrimoire |
23 |
5 |
Autonomous AI agents for bug bounty hunting, 18 pa... |
2026-10-15 |
| awesome-cyber-security |
23 |
7 |
A bunch of resources containing learning resources... |
2026-10-18 |
| hackfruit |
23 |
10 |
Hackfruit is an easy search tool that finds hackin... |
2025-08-03 |
| LeetSec-Tools |
23 |
5 |
Automated, aggressive reconnaissance engine for Bu... |
2026-09-25 |
| Reconator |
23 |
1 |
AI-powered reconnaissance framework for bug bounty... |
2026-10-12 |
| Explorer |
23 |
6 |
Explorer is a very useful tool which will help you... |
2025-03-03 |
| KHackBar |
23 |
6 |
KHackBar is a Manifest V3 Chrome extension for pen... |
2026-10-01 |
| security-skills |
23 |
7 |
An open library of 206 security skills for AI agen... |
2026-10-15 |
| VulnCast |
23 |
1 |
Feels like 9.8. The internet's security forecast o... |
2026-08-25 |
| resolvers |
23 |
9 |
List of Fresh DNS resolvers updates every 1 hour |
2026-10-19 |
| akira |
23 |
4 |
Autonomous offensive security agent. Plans engagem... |
2026-09-22 |
| crivo |
23 |
2 |
A tool for extracting and filtering URLs, IPs, dom... |
2026-10-06 |
| Bug-Bounty-Oneliners |
22 |
15 |
Oneliners curated from my experience and from the ... |
2026-10-02 |
| Bug-Bounty-GitBook |
22 |
10 |
Biscuit's Bug Bounty Playbook is a curated hub for... |
2026-09-25 |
| BugSquasher |
22 |
7 |
BugSquasher Bug Bounty Tools List |
2026-07-14 |
| Bug_Bounty-POC |
22 |
5 |
keep reading and hunting |
2026-10-13 |
| bugbounty_n8n_workflow |
22 |
5 |
Automating Bug Bounty with n8n |
2026-08-23 |
| google-dork-generator |
22 |
5 |
Handy Collection of Google Dorks for Bug Bounty Hu... |
2026-09-07 |
| HackerOneAlchemy |
22 |
5 |
A tool to generate statistics and help manage bug ... |
2025-01-06 |
| bbradar.io |
22 |
2 |
A web tool to aggregate the latest publicly listed... |
2026-10-15 |
| bugbounty |
21 |
5 |
Hey there! Welcome to my collection of bug bounty ... |
2026-09-15 |
| Go-Tools-for-BBH |
22 |
7 |
This Repo help you to download most helpful GO too... |
2025-10-23 |
| claude-security-research-skill |
22 |
2 |
AI-powered security research assistant for Claude ... |
2026-07-04 |
| cybersec-projects |
22 |
6 |
Hands-on cybersecurity projects built for learning... |
2026-09-18 |
| Ech0Vulnx |
22 |
1 |
Ech0Vulnx is a powerful multi-purpose network scan... |
2026-10-09 |
| DomXssFinder |
22 |
2 |
Find sources and sinks in js code that could lead... |
2026-07-20 |
| vasuki |
22 |
8 |
An automation tool that scans sub-domains, sub-dom... |
2026-09-18 |
| pvreplace |
22 |
4 |
A powerful URL parameter and request fuzzing tool ... |
2026-10-11 |
| Cheat-for-common-bugs-for-Bug-Bounty-Hunting |
21 |
12 |
No description |
2026-09-25 |
| faraday_bugbounty |
21 |
9 |
Faraday Workspaces for Bug Bounties |
2025-03-31 |
| Bug-Bounty---Important-Books |
21 |
5 |
Bug Bounty - Important Books |
2026-03-10 |
| Proviesec-Bug-Bounty-Dorking-Site-PBBDS |
21 |
6 |
This page should help you with the recon for secur... |
2026-09-10 |
| web-recon |
21 |
6 |
Web application recon for bug bounty |
2025-12-31 |
| bug_bounty_tweets |
21 |
5 |
No description |
2025-01-26 |
| 1ndiwordlist |
21 |
5 |
Bug Bounty Recon wordlist Generator |
2025-04-01 |
| rs0n-bug-bounty-mcp-server |
21 |
6 |
An MCP (Model Context Protocol) server that gives ... |
2026-10-01 |
| monitor.sh |
21 |
6 |
Continuous Reconnaissance and Vulnerability Scanni... |
2026-09-22 |
| security-arsenal |
21 |
5 |
Security pentesting/devsecops/bug bounty/Cloud etc... |
2026-09-23 |
| blog |
21 |
4 |
CTF and Bug Bounty Hunting WriteUps. |
2026-10-07 |
| bug-bounty-wall-of-shame.github.io |
21 |
4 |
No description |
2026-09-18 |
| cryptokitties-bounty-2 |
21 |
4 |
Bug bounty program for CryptoKitties Offers featur... |
2026-05-18 |
| bugbounty-toolkit |
21 |
7 |
A curated collection of essential tools and script... |
2026-10-14 |
| inscope |
21 |
1 |
Quickly filter in-scope domains & urls for bug bou... |
2026-07-09 |
| jsmon-go |
21 |
0 |
JavaScript Change Monitor for Bug Bounty Hunting -... |
2026-09-06 |
| Cybersecurity-Notes |
21 |
8 |
Explore the cyber realm with our concise collectio... |
2026-09-26 |
| nuclei-templates-initial-access |
21 |
5 |
A standalone collection of widely used technologie... |
2026-09-25 |
| pler |
21 |
5 |
Pler - Domain Probe and Cloudflare Filter Tool. Pl... |
2026-08-19 |
| HuntersEye |
21 |
2 |
HuntersEye is designed for Bug Bounty Hunters, and... |
2025-12-13 |
| cloud_data |
21 |
9 |
Get some useful data from Clouds for your targets |
2026-10-18 |
| arsenal |
21 |
6 |
Tools for bug hunting in a container |
2025-12-09 |
| wp-taint-scan |
21 |
3 |
Go static taint-analysis engine that finds vulnera... |
2026-08-24 |
| crossjoin |
21 |
3 |
Generate a cross join, also known as a Cartesian p... |
2026-06-06 |
| VISTA |
21 |
2 |
🎯 VISTA — AI-Powered Security Testing Assista... |
2026-10-11 |
| cert-x-gen |
21 |
0 |
Polyglot execution engine and CLI for vulnerabilit... |
2026-10-18 |
| BugBounty-Dorks |
20 |
8 |
Highly recommended dorks for bug bounty |
2026-10-02 |
| vulysisBugBounty |
20 |
7 |
No description |
2025-08-03 |
| Bug-Bounty-Dorks-Vulns |
20 |
8 |
No description |
2026-09-25 |
| eth-neg-value-tx |
20 |
5 |
Ethereum Bug Bounty Submission: Sending Negative V... |
2026-03-31 |
| ShadowEnum |
20 |
8 |
ReconRoyale challenges, bug bounty experiments, an... |
2026-09-18 |
| pentestgod |
20 |
5 |
A collection of everything I learn while working a... |
2026-03-06 |
| Ai-Hunting |
20 |
4 |
A curated list of AI models I use for bug bounty h... |
2026-10-18 |
| bugbounty |
20 |
2 |
this files only for bug bounty tools AtoZ |
2026-09-17 |
| CHAPTGPT-PROMPT-FOR-ETHICAL-HACKING |
20 |
5 |
A collection of ChatGPT prompts designed to assist... |
2026-09-22 |
| penstaller |
20 |
5 |
Penstaller: A Python tool to automate the installa... |
2026-09-22 |
| endpoints-extractor |
20 |
6 |
A powerful Bash script for extracting URLs and API... |
2026-10-05 |
| ewe |
20 |
6 |
EWE (Execution Workflow Engine) - Execute tasks in... |
2026-06-07 |
| qping |
20 |
14 |
qping: qping is simple python tool for finding bun... |
2026-07-28 |
| isXSS-Burp |
20 |
2 |
Passively check for XSS character encodings |
2026-05-28 |
| ShoRAK_recon |
20 |
2 |
ShoRAK Recon is a comprehensive tool designed for ... |
2026-09-24 |
| PortPilot |
20 |
2 |
High performance, distributed port scanner for mos... |
2026-04-10 |
| vulntechfinder |
20 |
8 |
vulntechfinder is a powerful security tool that au... |
2026-09-25 |
| bucky |
20 |
0 |
An S3 account ID enumeration and bucket discovery ... |
2026-08-16 |
| tts-buy-bug-bounty |
19 |
11 |
Solicitation and acquisition documents created for... |
2023-01-28 |
| learn-100 |
19 |
9 |
Cool resources and content for bug bounty hunting. |
2024-10-24 |
| attack-tools |
19 |
12 |
A set of tools, procedures, and playbooks for perf... |
2026-06-17 |
| craxify |
19 |
6 |
Craxify Automated Reconnaissance Framework for Bug... |
2025-10-05 |
| BugBounty |
19 |
2 |
Cheat Sheets, Metodologies etc. |
2024-12-15 |
| recon |
19 |
3 |
Bug Bounty Recon Script |
2026-09-12 |
| The-ULTIMATE-Bug-Bounty-Dork |
19 |
2 |
Ultimate Google Dork Collection for Bug Bounty Hu... |
2026-08-27 |
| serverspy |
19 |
8 |
Full-stack server fingerprinting tool for bug boun... |
2026-09-07 |
| js-recon-automation-kit |
19 |
6 |
A simple HAR-based JavaScript recon automation kit... |
2026-09-28 |
| Suijin |
19 |
4 |
Suijin is an open-source fully autonomous red team... |
2026-10-18 |
| Active-Defense-Tracing-Tool |
19 |
3 |
帮助苦逼溯æº�人员快速分æž�和追踪å�¯ç– |
2026-10-12 |
| Hikvision-City-Hunter |
19 |
2 |
This tool is a modern evolution of older PoCs like... |
2026-07-13 |
| GoldMine |
19 |
1 |
AI-powered tool designed to help security professi... |
2026-05-17 |
| awsome-security-mindmaps |
19 |
2 |
No description |
2026-08-26 |
| Facebook-SSL-Pinning-Bypass |
19 |
7 |
Bypass Facebook SSL/TLS certificate pinning on And... |
2026-09-12 |
| gosqli |
19 |
5 |
gosqli is a fast and simple tool for detecting bli... |
2026-08-09 |
| CyberElite |
19 |
4 |
� Welcome to Hack-Academia — your go-to desti... |
2026-10-15 |
| file-scraper |
19 |
3 |
Scrape files for sensitive information, and genera... |
2026-07-24 |
| Instagram-SSL-Pinning-Bypass |
19 |
2 |
Bypass Instagram SSL/TLS certificate pinning on An... |
2026-09-12 |
| hey-game-pepople-i-know-you-r-ment-to-like-make-these-long-but-come-on-its-fun-but-arrow-game-lol |
19 |
0 |
According to all known laws of aviation, there is ... |
2026-08-30 |
| aztec-2-bug-bounty |
18 |
8 |
No description |
2026-05-22 |
| bug-bounty-tips |
18 |
4 |
No description |
2026-07-03 |
| recon-boot.sh |
18 |
5 |
Script for Reconnaissance(Bug Bounty) |
2025-03-19 |
| github-dorks-for-bug-bounty-hunters |
18 |
6 |
A collection of GitHub dorks for bug bounty hunter... |
2026-09-02 |
| One-Liner |
18 |
11 |
Do bug hunting with One-Line script and get bounty |
2025-11-10 |
| A-Comprehensive-Bug-Bounty-Roadmap- |
18 |
4 |
No description |
2026-09-08 |
| hacking-skills |
18 |
4 |
Claude Code skills for finding bugs and vulnerabil... |
2026-10-18 |
| My-Mind-Maps |
18 |
5 |
Mind map for certifcation, vulnerability finding a... |
2026-05-18 |
| Dork-Like-a-Demon-FOFA-Edition-for-Hackers-Bug-Bounty-Hunters |
18 |
2 |
A hacker’s guide to FOFA dorking, packed with po... |
2026-10-01 |
| wolf |
18 |
5 |
Curated wordlist and payload collection for penetr... |
2026-10-07 |
| bounty-search-engine |
18 |
8 |
This search engine automates the discovery of sens... |
2026-10-04 |
| KageRecon |
18 |
1 |
A modular, Docker-ready recon pipeline for Red Tea... |
2026-10-14 |
| whitesecross |
18 |
7 |
Whitesecross is an advanced Python-based XSS scann... |
2026-10-18 |
| how-to-hack-github-actions |
18 |
1 |
Write-up and PoC for $500 HackerOne bug bounty rep... |
2026-10-13 |
| CTF-challenge |
18 |
0 |
An attempt to unite CTF players and bug bounty hun... |
2022-05-25 |
| domainExtractor |
18 |
10 |
Extract domains/subdomains/FQDNs from files and UR... |
2026-10-05 |
| clpzcode |
18 |
1 |
The best CLI for pentest — AI coding agent with ... |
2026-09-26 |
| Admin-Panel-Finder-Of-Any-Website |
18 |
19 |
PERL-based website Admin Panel Finder - website se... |
2026-08-06 |
| recon-modular |
18 |
2 |
🛡� AI-powered reconnaissance framework unifyi... |
2026-10-05 |
| sourceCodeProgramsH1 |
18 |
1 |
A full-stack web application that aggregates all H... |
2026-09-30 |
| socialfinder |
18 |
5 |
Hunt down social media accounts by username across... |
2026-09-14 |
| cryptocat-gitbook |
18 |
4 |
OLD repo for my GitBook (CTF writeups / vuln resea... |
2026-04-05 |
| NameScraper |
18 |
3 |
A Selenium scraper for public domain search tools. |
2025-10-06 |
| hashtag-fuzz |
18 |
1 |
The nightmare of WAFs & CDNs, Use multi tricks for... |
2026-09-25 |
| GoatOS |
18 |
1 |
� GoatOS - A lightweight Linux distribution foc... |
2026-09-18 |
| Krypton |
18 |
6 |
Ethereum has brought us tools like Smart Contract,... |
2026-01-18 |
| BugBounty |
17 |
7 |
PenTest and BugBounty 🕵� |
2026-09-16 |
| BBClip |
17 |
7 |
Bug Bounty Clipboard |
2024-09-30 |
| ETHERBOTS-Bug-Bounty |
17 |
6 |
Code implemented on Rinkeby testnet, along with a ... |
2022-06-03 |
| andrankEnum |
17 |
5 |
Tool to get the top android apps for bug bounty pu... |
2023-08-23 |
| reFresh |
17 |
5 |
A bash tool used to install famous bug bounty tool... |
2026-10-06 |
| Bug-Bounty-Dorks |
17 |
1 |
Google Dorks and keywords for bug hunters. |
2026-09-25 |
| world-editor |
17 |
20 |
This is the codebase for the HYTOPIA world editor,... |
2026-07-17 |
| SecretHunter |
17 |
6 |
A powerful and lightweight tool for bug bounty hun... |
2026-10-12 |
| secretsifter-extension |
17 |
11 |
Live secrets and credentials scanner for Chrome. D... |
2026-10-17 |
| ErrorEyes-Domain-Scanner |
17 |
4 |
� erroreyes – Lightweight Subdomain Enumerati... |
2026-06-03 |
| ZERO |
17 |
2 |
Zero is a pipeline for custom vulnerability analys... |
2026-09-02 |
| SubHound |
17 |
4 |
Stay on the beat with SubHound - receive notificat... |
2024-04-28 |
| RYN27 |
17 |
1 |
Open source CLI tool for information gathering —... |
2026-09-17 |
| RedTiger |
17 |
6 |
RedTiger - Automated XSS vulnerability testing too... |
2026-09-14 |
| Xposure |
17 |
5 |
fully autonomous credential intelligence platform ... |
2026-10-01 |
| SubdomainFinder |
17 |
5 |
Find subdomains by searching public certificate re... |
2026-10-05 |
| tr01d |
17 |
1 |
Tr10d is a command-line tool designed for security... |
2026-01-29 |
| scrapy-scraper |
17 |
7 |
Web crawler and scraper based on Scrapy and Playwr... |
2026-09-18 |
| ipfinder |
17 |
5 |
IP Finder tool, ipfinder collects IP addresses fro... |
2026-09-25 |
| ssti-flask-hacking-playground |
17 |
5 |
App with Server Side Template Injection (SSTI) vul... |
2026-05-05 |
| unew |
17 |
3 |
A high-performance command-line utility for proces... |
2026-08-18 |
| subscan |
17 |
0 |
CLI tool for subdomain recon, DNS brute-force, sco... |
2026-08-18 |
| gitghost |
17 |
1 |
gitghost — find secrets in a GitHub account's pu... |
2026-10-16 |
| cyxbot |
16 |
5 |
Bug bounty bot for channel |
2022-12-31 |
| shell-scripts |
16 |
9 |
This repo contains scripts i used while bug bounty... |
2024-08-07 |
| penum |
16 |
9 |
Parallelized enumeration tool for red team engagem... |
2025-12-09 |
| BugBounty-Hub |
16 |
2 |
🌌 BugBounty Hub: Your one-stop destinati... |
2026-01-17 |
| Bug-Bounty-Program |
16 |
2 |
No description |
2026-08-25 |
| Frecon |
16 |
2 |
Continues Recon on Public Bug Bounty Program |
2026-08-16 |
| kibanarec |
16 |
7 |
A Tool to Extract Open Kibana Instances on Interne... |
2025-12-09 |
| assetWatcher |
16 |
3 |
A tool to notify you of the latest changes in bug ... |
2025-11-06 |
| XOE |
16 |
11 |
Exploit XXE Out-Of-Band Vulnerability Easily |
2025-12-13 |
| getcontact-api-client |
16 |
4 |
A streamlined guide for mobile app penetration tes... |
2026-09-30 |
| DGWiki |
16 |
10 |
DigitalGangsterWiki – A community-driven platfor... |
2026-08-24 |
| Hackers-LunchBox |
16 |
2 |
High level attack and finding maps for all your pe... |
2026-05-26 |
| Bug-Bounty-Practical-Lab-Finding-and-Exploiting-an-Unused-API-Endpoint |
16 |
1 |
Manipulate a hidden API endpoint to change product... |
2026-08-13 |
| Dork-Like-a-Demon-Shodan-Edition-for-Hackers-and-Bug-Bounty-Hunters |
16 |
1 |
Mastering Shodan Dorks from beginner to beast mode... |
2026-08-11 |
| policymaker |
16 |
9 |
A free, open-source, multi-lingual, template-based... |
2026-08-11 |
| K7R3 |
16 |
1 |
A practical bug bounty field guide covering recon,... |
2026-10-10 |
| Vex |
16 |
0 |
Vex ( Cross the line) : The ultimate XSS payload a... |
2026-09-30 |
| Blackthorn |
16 |
0 |
Blackthorn is a threat-hunting and bug bounty web ... |
2026-09-14 |
| Parameter-Reflect-Finder |
16 |
7 |
Parameter-Reflect-Finder is a python based tool th... |
2025-10-25 |
| AdwanceSNI |
16 |
3 |
This is Adwance and simple SNI finding tool. |
2026-08-19 |
| Threads-SSL-Pinning-Bypass |
16 |
3 |
Bypass Threads (Instagram) SSL/TLS certificate pin... |
2026-09-12 |
| poc-cve-2025-55182 |
16 |
3 |
This repository contains a POC of CVE-2025-55182, ... |
2026-10-13 |
| CyberBox |
16 |
1 |
CyberSandbox — all-in-one Docker security worksp... |
2026-09-15 |
| RVD |
244 |
41 |
Robot Vulnerability Database. An archive of robot ... |
2026-09-25 |
| bountydash |
163 |
21 |
BountyDash is a tool to combine your rewards from ... |
2026-07-29 |
| Dons |
90 |
23 |
Dons Js Scanner is a sleek command-line tool that ... |
2026-10-12 |
| RVSS |
32 |
5 |
Robot Vulnerability Scoring System (RVSS) Python 3... |
2026-09-11 |
| pentesting-report-generator |
29 |
3 |
This repository is made to create your own pentest... |
2026-07-12 |
| LLM-PROMPT-INJECTION-PAYLOAD-S |
25 |
0 |
Unlock safe, high-signal prompt workflows for ethi... |
2026-09-02 |
| Apache-GOExploiter |
20 |
3 |
Apache (CVE-2025-24813) GOExploiter Checker & Expl... |
2026-09-25 |
| proxylist |
20 |
0 |
List of continuously updated proxy servers |
2026-07-10 |
| bug-reports |
18 |
5 |
No description |
2025-12-04 |
| Payloads_Tool_box |
16 |
5 |
At this repo you can find any tools, tricks or tem... |
2026-09-10 |
| IABE-BugBounty-Framework |
15 |
6 |
BugBounty framework with main function to ORGANIZE... |
2026-09-25 |
| Awake |
15 |
6 |
Bug Bounty Monitor |
2025-11-19 |
| bugbounty_profile |
15 |
8 |
Automate bug bounty recon using bash alias |
2025-10-07 |
| Bugbounty |
15 |
6 |
Start your journey with Bug Bounty. |
2025-12-09 |
| KrazePlanetPrograms |
15 |
9 |
SelfHosted - Bug Bounty Programs |
Discover new an... |
| My-Current-Bug-Bounty-Recon |
15 |
4 |
No description |
2026-09-25 |
| bug-bounty-recon |
15 |
2 |
Recon tool utilises 58 different techniques using ... |
2026-08-27 |
| FindBBP |
15 |
4 |
Bug Bounty Program Discovery tool, that discovers ... |
2026-06-10 |
| Bug-Hunting-With-Bash |
15 |
3 |
Cool One Liners at one place to make your recon an... |
2026-01-05 |
| abspider-recon |
15 |
4 |
A modern, browser-based reconnaissance dashboard ... |
2026-07-18 |
| quester |
15 |
5 |
QUESTER is a Web Pentesting & Bug Bounty Recon too... |
2025-09-15 |
| gitdork |
15 |
2 |
Google, Shodan, and GitHub dork generator for pent... |
2026-08-27 |
| HunterStick |
15 |
2 |
A persistent context and fieldcraft system for AI-... |
2026-10-18 |
| WordListeXplorer |
15 |
2 |
A local wordlist intelligence and workflow managem... |
2026-07-13 |
| All-About-Hacking |
15 |
2 |
A list of Mind-Map for those interested in getting... |
2026-10-02 |
| bug-hunting |
15 |
1 |
Bug bounty hunting & penetration testing skills fo... |
2026-10-04 |
| HackingGPT |
15 |
3 |
Advanced terminal tool for pentest and bug bounty,... |
2026-05-22 |
| jacky-cli |
15 |
4 |
Jacky CLI — an AI agent CLI with dual local/clou... |
2026-10-14 |
| MAXMAP |
15 |
2 |
Automated recon pipeline for bug bounty hunters & ... |
2026-08-16 |
| ex-redirect |
15 |
3 |
ex-redirect — An automated open redirect scanner... |
2026-04-07 |
| report-templates |
15 |
2 |
This repository is dedicated to documenting and sh... |
2026-06-22 |
| Ultimate-openai-gemini-claude-api-key-scraper |
15 |
4 |
🔑 Enterprise-grade async API key scanner for Gi... |
2026-10-01 |
| instagram-persisted-query-diff |
15 |
0 |
Version-to-version diffs of Instagram Android inte... |
2026-10-12 |
| DorkRunner |
15 |
0 |
Dorkrunner is an interactive CLI-based Google & Du... |
2026-08-17 |
| Web-See |
15 |
0 |
Web-See is Tool For Checkout Status Of Urls in Mas... |
2024-05-18 |
| outrider-recon |
15 |
0 |
Claude-native, governed offensive-OSINT & external... |
2026-09-22 |
| bounties |
14 |
14 |
Bug bounty policies |
2026-10-13 |
| bug-buster |
14 |
12 |
🪲 Bug Buster, a bug bounty platform powered by ... |
2026-10-05 |
| Bug-Bounty-Roadmap1 |
14 |
4 |
Bug Bounty |
2026-06-09 |
| bba |
14 |
4 |
bug bounty automation |
2026-04-10 |
| Bug-bounty-reports |
14 |
3 |
Real bug bounty track record — live VDP/H1 findi... |
2026-10-07 |
| bug-bounty |
14 |
2 |
bug-bounty |
2026-09-07 |
| BugbountiesMCP |
14 |
3 |
A curated collection of MCP servers useful for bug... |
2026-09-19 |
| tk0-bugbounty |
14 |
3 |
Something and everything related to Bug Bounties |
2026-09-08 |
| HTB_CBBH_Writeup |
14 |
6 |
HackTheBox: Certified Bug Bounty Hunter's Writeup ... |
2026-03-15 |
| Domain2IP-Converter |
14 |
11 |
Convert domain lists to resolved IP without duplic... |
2026-04-22 |
| Hacking-Toolkits |
14 |
4 |
Hack Tricks and survival kit (For Bug Bounty Progr... |
2026-04-15 |
| The-Bug-Hunters-Methodology |
14 |
6 |
Welcome! This repo is a conglomeration of tips, tr... |
2025-06-12 |
| AliveHunter |
14 |
10 |
Lightning-fast domain validator for security resea... |
2026-10-04 |
| Wounty |
14 |
4 |
Wounty is a simple web enumeration script that mak... |
2022-12-12 |
| mastermind-bug-bounty |
14 |
1 |
结å�ˆè‡ªå·±æŒ–掘æ€�路的优化版，会æŒ�ç»è¿ |
2026-09-16 |
| api-key-impact |
14 |
3 |
A list of different types of API keys and how to p... |
2026-10-06 |
| CommonWebVulns |
14 |
3 |
Here you will find information and examples about ... |
2024-06-01 |
| ddork |
14 |
3 |
automate discovery of self-hosted bug bounty progr... |
2026-10-12 |
| JWT-Authentication-Bypass-via-JWK-Header-Injection-for-Bug-Bounty |
14 |
0 |
JWT authentication bypass via insecure jwk header ... |
2026-02-28 |
| secretsifter-desktop |
14 |
12 |
Standalone desktop app for macOS & Windows — sca... |
2026-10-12 |
| Argos-Recon |
14 |
1 |
bugbounty recon osint python security pentesting a... |
2026-08-26 |
| writeups |
14 |
2 |
Technical writeups on Offensive Security, Red Team... |
2026-09-17 |
| blackbox-pentest |
14 |
0 |
Codex skill for authorized black-box penetration t... |
2026-10-04 |
| Recon_Forge |
14 |
0 |
A Modern, High-Performance, Context-Driven Reconna... |
2026-10-11 |
| Octocrawl |
14 |
1 |
Fast, parallel and easy to use web crawler for pen... |
2026-09-25 |
| kai |
14 |
1 |
A curated atelier for security research. Decipheri... |
2026-10-11 |
| offensive-Agent-s |
14 |
1 |
An AI-powered penetration testing framework featur... |
2026-10-16 |
| osint-recon-tool |
14 |
0 |
A CMS-aware OSINT and recon tool for red teamers a... |
2026-07-26 |
| bounty-plaza |
13 |
130 |
Bounty Plaza - Real bug bounty aggregation and dis... |
2026-10-18 |
| Beginner-Bug-Bounty-Guide |
13 |
13 |
Beginner-Bug-Bounty-Guide |
2025-05-14 |
| Bug-Bounty-tips-from-Twitter |
13 |
6 |
This is a collection of Bug Bounty Tips collected ... |
2026-03-01 |
| Ultimate-Bug-Bounty |
13 |
4 |
No description |
2024-07-05 |
| dorkforge |
13 |
7 |
Google dork builder for bug bounty recon |
2026-08-27 |
| yahoo-bug-bounty |
13 |
4 |
List of hosts from yahoo.com |
2025-12-09 |
| HunterX |
13 |
6 |
King of Bug Bounty Tips Simple Tool |
2026-09-15 |
| Bug-Bounty-Tools |
13 |
3 |
Awesome Bug bounty tools |
2026-08-26 |
| bugbounty-dorks |
13 |
3 |
Google dorks for bug bounty hunting |
2026-08-05 |
| OWASP-Hunting |
13 |
7 |
OWASP Hunting: Curated Payloads for Ethical Securi... |
2026-10-18 |
| bugskill-ai |
13 |
5 |
Convert public bug bounty hackerone reports (9,950... |
2026-10-14 |
| Roadmap-pentest-bug-bounty |
13 |
2 |
No description |
2026-07-20 |
| dorkengine.github.io |
13 |
5 |
Introducing "Dork Engine" – the ultimate bug bou... |
2026-08-27 |
| recon-framework |
13 |
3 |
Automated reconnaissance toolkit for web security ... |
2026-10-17 |
| recon |
13 |
2 |
Scripts for bug bounty-ing and attack surface mapp... |
2025-02-04 |
| lazy |
13 |
4 |
This is a lazy enumeration script made to make bug... |
2025-11-24 |
| bugbounty |
13 |
1 |
All Items Related to bug bounty |
2025-09-17 |
| Bug-Ao-Bounty-Lib |
13 |
0 |
Objetivo desse repositório é construir uma lib p... |
2025-08-06 |
| Bug-Bounty-Arsenal-v.3 |
13 |
0 |
60+ detectors for web, plus mobile apps and smart ... |
2026-09-15 |
| SnailHunter |
13 |
3 |
SnailHunter is a fully automated bug bounty huntin... |
2026-10-12 |
| Hacking_Extensions |
13 |
2 |
the collection of all useful extensions that are u... |
2026-02-26 |
| JWT-Authentication-Bypass-Exploiting-Unverified-Signature-for-Bug-Bounty |
13 |
0 |
Exploit a critical JWT flaw to bypass authenticati... |
2026-02-28 |
| JWT-Authentication-Bypass-via-Weak-Signing-Key-for-Bug-Bounty |
13 |
0 |
Exploiting weak JWT secrets to forge admin access ... |
2026-02-28 |
| locksmith |
13 |
2 |
Locksmith is a tool which allow simple way to test... |
2025-09-25 |
| private_bechek |
13 |
0 |
PrivateBChecks Collection BY CyberTechAjju |
2026-08-09 |
| noshit |
13 |
1 |
A simple bug bounty utility tool to remove uninter... |
2026-04-10 |
| spechunt |
13 |
1 |
An AI-powered bug bounty framework that provides s... |
2026-09-25 |
| OWASP-Automated-Threats-to-Web-Applications-OATv2 |
13 |
0 |
OWASP Automated Threats (OATv2) concise guide, hig... |
2026-02-28 |
| Invitation-Flow-Security-Testing-Checklist |
13 |
5 |
checklist for testing invitation / team-member inv... |
2026-09-28 |
| Web-App-Methodology |
13 |
1 |
Collection of web app methodology from initial rec... |
2022-07-30 |
| GmapsXploit |
13 |
0 |
GmapsXploit audits Google Maps, Places, Roads, and... |
2026-10-01 |
| endpointhunter |
13 |
1 |
EndpointHunter is a powerful bug bounty tool desig... |
2026-10-18 |
| bug-bounty-report-generator |
12 |
6 |
No description |
2026-09-10 |
| bug-bounty-dorks-archive |
12 |
5 |
This is collection of dorks to find bug bounty pro... |
2026-08-09 |
| BugBounty-Automated-Recons |
12 |
3 |
A tool for automating reconnaissance in bug bounty... |
2026-08-20 |
| recon-007 |
12 |
7 |
Bug Bounty tool to automate the recon process. |
2024-09-16 |
| contracts-bounty |
12 |
3 |
GoCryptobot Contract Bug Bounty |
2024-08-29 |
| master_discovery |
12 |
10 |
Files and Folders list used in file enumeration du... |
2024-08-12 |
| Markdown-Bug-Bounty-Recon |
12 |
3 |
A recon Framework for Bug Bounty Hunters that woul... |
2026-07-23 |
| weaponize.it |
12 |
3 |
Weaponize.it is your go-to resource for gaining in... |
2025-10-29 |
| subzero |
12 |
4 |
Passive subdomain enumeration tool for bug-bounty ... |
2025-12-09 |
| huntr-com-bug-bounties-collector |
12 |
2 |
keep watching new bug bounty (vulnerability) posti... |
2026-05-05 |
| bugbounty-writeups-agent |
12 |
3 |
Local Flask app that converts bug bounty writeup U... |
2026-10-13 |
| BugBountyChecklist |
12 |
0 |
No description |
2026-04-08 |
| BugBounty_Roadmap |
12 |
1 |
How to Get Started into Bug Bounty Complete Begin... |
2026-04-01 |
| XSS-LAB |
12 |
5 |
A hands-on lab environment based on real bug bount... |
2026-08-27 |
| bug-bounty-toolkit |
12 |
1 |
Advanced Bash automation script for bug bounty rec... |
2026-02-21 |
| Techincal_CheatSheet |
12 |
3 |
A cheat sheet regarding Penetration testing, Bug B... |
2026-06-11 |
| Reconal |
12 |
2 |
Lightweight OSINT reconnaissance tool with web UI ... |
2026-07-27 |
| ars0n-framework-srt |
12 |
3 |
A lightweight version of my bug bounty hunting fra... |
2026-01-09 |
| Gu3ssWeak |
12 |
2 |
Deliberately vulnerable Android app for mobile sec... |
2026-10-07 |
| Bug-Bounty-Race-Exploiting-Race-Conditions-for-Infinite-Discounts |
12 |
0 |
Race Condition Vulnerability hands on experience t... |
2026-02-28 |
| hackbotone-mern-website |
12 |
2 |
HackbotOne website produce contents from various d... |
2025-05-10 |
| JWT-Authentication-Bypass-via-Flawed-Signature-Verification-for-Bug-Bounty-Hunting |
12 |
0 |
Exploit insecure JWT signature verification by for... |
2026-02-28 |
| From-Recon-to-Root-A-MongoDB-NoSQL-Injection-Bug-Bounty-Journey |
12 |
0 |
Exploiting NoSQL injection to extract admin creden... |
2026-02-28 |
| burpflow |
12 |
4 |
BurpFlow is one of the best Burp Suite automation ... |
2026-10-05 |
| MrNothing_Recon |
12 |
0 |
A fast, modular bug bounty subdomain reconnaissanc... |
2026-09-07 |
| writeup-app |
12 |
0 |
Writeup-app is a simple program for sending notifi... |
2026-08-14 |
| MSP-Vendors-VDP-BBP |
12 |
0 |
An index of vendors in the MSP space who have publ... |
2025-08-12 |
| ReconOPS |
12 |
1 |
A structured recon-only framework for bug bounty h... |
2026-09-06 |
| auth-bypass |
12 |
6 |
auth-bypass is a collection of common techniques a... |
2026-04-04 |
| xsscan |
12 |
0 |
Modern Playwright-based XSS scanner for bug bounty... |
2026-10-13 |
| crawlex |
12 |
1 |
Crawlex is a powerful Chrome extension designed to... |
2025-02-22 |
| SubProbe |
12 |
1 |
âš¡ JavaScript-aware crawler for security research... |
2026-09-25 |
| Codehunter |
12 |
1 |
Ultra-fast pattern scanner for Bug Bounty and pent... |
2026-09-28 |
| xss_finder |
12 |
0 |
Cross-Site Scripting (XSS) is one of the most well... |
2026-01-05 |
| loopfi-bug-bounty |
11 |
6 |
No description |
2025-08-07 |
| Bug-Bounty-Skills |
11 |
5 |
Every great bug bounty skill on GitHub, one repo, ... |
2026-10-17 |
| Bug-Bounty |
11 |
4 |
Bug bounty cheat sheets and resources |
2026-09-18 |
| bug-bounty-tools |
11 |
3 |
Collection of HTTP scanners and fuzzers. |
2025-11-17 |
| AI-for-Cybersecurity-and-Bug-Bounty-Hunting |
11 |
3 |
AI for Cybersecurity and Bug Bounty Hunting, by EC... |
2026-08-01 |
| kaiju-p2e-bug-bounty |
11 |
2 |
KaijuKingz P2E Bug Bounty |
2024-02-27 |
| Bug-Bounty-Ultimate-Tools |
11 |
2 |
Ultimate List Of Bug Bounty Tools |
2026-10-02 |
| bugs.xdavidhu.me |
11 |
2 |
� My Bug Bounty Writeups |
2026-05-06 |
| silicondzor |
11 |
4 |
The Armenian tech community, tech commentary, bug ... |
2025-09-11 |
| ultimate-recon |
11 |
4 |
Automated 13-phase bug bounty recon script for Kal... |
2026-10-14 |
| Bug-Bounty-Hunting-Methodology-2026 |
11 |
2 |
Bug Bounty Hunting Methodology 2026: Recon, exploi... |
2026-10-16 |
| Burp-Suite-AI-extensions-for-bug-bounty |
11 |
2 |
No description |
2026-05-24 |
| bounty-hunter |
11 |
2 |
Hellhound is an autonomous bug bounty reconnaissan... |
2026-10-18 |
| bug-bounty |
11 |
1 |
bug bounty |
2026-09-14 |
| BugBountyCTF-Reports |
11 |
0 |
This repository contains fully disclosed accepted ... |
2026-09-25 |
| Vulnerability-Report-Template |
11 |
4 |
You can use this Vulnerability Report Template to ... |
2026-07-12 |
| subdomains_wordlist |
11 |
2 |
Subdomains wordlist generted from subdomains of pu... |
2025-09-19 |
| All-in-one-recon |
11 |
2 |
Advanced Bug Bounty Recon Tool by Pradyumn Tiware ... |
2026-10-12 |
| awesome-offensive-security-skills |
11 |
6 |
🔥 191+ battle-tested cybersecurity skills for A... |
2026-10-12 |
| Automated-Bug-Bounty-Scanner |
11 |
1 |
Automated Bug Bounty Scanner Tool |
2026-10-10 |
| cybersecurity-roadmap-bug-bounty |
11 |
0 |
No description |
2026-09-07 |
| Hacking-PDF-Books |
11 |
2 |
My personal repo containing a variety of PDF books... |
2026-09-13 |
| gRPC-Web-Burp-Repeater |
11 |
3 |
A powerful Burp Suite extension for **penetration ... |
2026-09-10 |
| Secret-Search-Engine |
11 |
1 |
� Secret-Search-Engine Advanced recon toolkit w... |
2026-10-08 |
| audits |
11 |
1 |
Repository to store all audits from public contest... |
2025-05-18 |
| POT |
11 |
2 |
An automated highly concurrent Bug Bounty Reconna... |
2026-09-08 |
| ctfpwn |
11 |
1 |
Framework for making CTFs, bug bounty and pentesti... |
2025-06-15 |
| S3-Checker |
11 |
2 |
S3-Checker is a fast, concurrent AWS S3 bucket dis... |
2026-05-24 |
| c-no-3v1l |
11 |
2 |
Blind Cross-Site Scripting (XSS) Testing Tool For ... |
2026-08-23 |
| VenomRecon |
11 |
1 |
Autonomous attack surface mapping and vuln discove... |
2026-09-04 |
| keyana |
11 |
0 |
High-performance JavaScript reconnaissance tool wi... |
2026-05-24 |
| Lotus |
11 |
2 |
An automated bash script for maximum coverage web ... |
2026-10-16 |
| Mr-shiravani |
11 |
0 |
18-year-old developer |
Specializing in front-end ... |
| corscan |
11 |
3 |
Corscan is a Go-based tool that automates the dete... |
2026-03-01 |
| Algopwn |
11 |
2 |
Algopwn is an interactive Python tool for security... |
2026-05-06 |
| sweetuu |
11 |
1 |
Sweetuu is a Advance Shell which can be used to ac... |
2026-10-17 |
| CiscoResearcherToolkit |
11 |
0 |
The Cisco Researcher Toolkit is a comprehensive, A... |
2026-04-19 |
| SQLi_Payload |
11 |
1 |
A curated, tested, and Burp-ready collection of SQ... |
2026-09-16 |
| SecPayloads |
11 |
1 |
Sec-Payloads, It's a collection of multiple types ... |
2026-09-19 |
| ReconBEEs |
11 |
1 |
A tool which can perform advance recon automatical... |
2023-08-05 |
| renegade-bug-bounty |
10 |
13 |
No description |
2026-06-03 |
| google-bounty |
10 |
6 |
A google bug bounty clone using gemini |
2026-08-25 |
| BugBounty-Dorks |
10 |
4 |
Help to find batter TARGET for bug bounty |
2026-10-13 |
| public-bugbounty-data |
10 |
6 |
Recon Data for public bug bounty sites useful for ... |
2026-06-06 |
| Bug-Bounty |
10 |
4 |
Bug Bounty Notes |
2026-04-22 |
| bug-bounty-hunting-ai |
10 |
4 |
Demo code and presentation materials for the talk ... |
2026-09-17 |
| 365Days-Bug-Bounty |
10 |
5 |
It is a 365 day cybersecurity learning challenge. ... |
2024-11-23 |
| Reconkil3r |
10 |
4 |
Script Recon Bug Bounty |
2025-03-19 |
| bug-bounty-in-a-box |
10 |
4 |
💥 Bug bounty in a box! |
2023-08-31 |
| BugHunt3r |
10 |
3 |
Virtual machine for Bug Bounty Hunters. |
2026-07-23 |
| BugBounty-mcp-server |
10 |
2 |
🔥 AI-Powered Bug Bounty Hunting Platform - MCP ... |
2026-10-14 |
| Bug-Bounty-Reporting-Templates |
10 |
2 |
Report Templates One of the most important element... |
2026-05-22 |
| Dump_Programs |
10 |
2 |
Dump bug bounty scopes from bug crowd, hackerone e... |
2024-01-04 |
| reconX |
10 |
2 |
An Automated Recon Tool For Bug bounty Hunters |
2026-10-06 |
| bashbounty |
10 |
2 |
Bash bounty is a tool to automation the process of... |
2023-08-05 |
| lmi4u |
10 |
4 |
lmi4u is designed to Install basic kind of tools (... |
2024-01-18 |
| Bugbounty-Dorks |
10 |
0 |
Bug Bounty Program Finder |
2026-05-31 |
| rexC0n |
10 |
4 |
Powerful Bash-based subdomain enumeration tool for... |
2026-09-25 |
| Legal-bug-bounty |
10 |
1 |
This is the #legalbugbounty standardization projec... |
2025-09-27 |
| reconmind |
10 |
3 |
AI-Powered Bug Bounty Agent |
Recon → Scan → F... |
| mcd-security |
10 |
12 |
The Maker Foundation's highest priority is the sec... |
2026-03-20 |
| china-src |
10 |
0 |
The Missing Security Response Center Data For Chin... |
2026-09-07 |
| Alkaser-Recon-Pipeline |
10 |
2 |
"An autonomous, multi-tool bug bounty reconnaissan... |
2026-10-08 |
| Bug-Hunting-Cheatsheet |
10 |
1 |
This cheatsheet serves as a comprehensive guide fo... |
2026-10-09 |
| ywh_program_selector |
10 |
1 |
YWH Programs Selector is a CLI tool to filter bug ... |
2026-09-24 |
| Trinetra |
10 |
3 |
Trinetra is Web Crawling Tool For Bug Bounty And ... |
2026-02-28 |
| KeyReaper |
10 |
0 |
Extract and assess exposed Google Cloud (AIza) API... |
2026-07-13 |
| urlscan.io-Cheat-Sheet-by-SinaYeganeh |
10 |
0 |
A comprehensive cheat sheet for using urlscan.io i... |
2026-07-02 |
| Android-Mobile-Pentesting-Roadmap |
10 |
2 |
This guide is built for anyone who wants to take m... |
2026-09-16 |
| CredStalker- |
10 |
1 |
CredStalker is a powerful automated security tool ... |
2026-09-07 |
| HHunter |
10 |
1 |
HHunter is a specialized security testing tool des... |
2026-09-29 |
| Dork |
10 |
0 |
A curated collection of advanced Google Dork searc... |
2026-10-18 |
| automate-with-actions |
10 |
4 |
This project is automate the reconnaissance proces... |
2026-05-04 |
| bug-bounty |
9 |
9 |
OUT OF DATE: Internal documentation for TTS's bug ... |
2023-12-27 |
| BugBounty-notes |
9 |
7 |
BugBounty Notes (with writeup ) for me |
2026-10-05 |
| BBHTv2 |
9 |
34 |
A single script for all the tools you need for bu... |
2026-10-09 |
| bounty-targets |
9 |
7 |
🎯 Information About Bug Bounty Program Target... |
2025-01-05 |
| bug-bounty-fuzz-wordlist |
9 |
7 |
This is a wordlist of directory fuzzing directorie... |
2026-07-08 |
| BugBounty-Payloads |
9 |
4 |
Curated custom payloads and wordlists for fuzzing:... |
2026-10-12 |
| Methodology |
9 |
4 |
Bug Bounty Methodology. |
2025-09-18 |
| bb-reports-generator |
9 |
4 |
Bug bounty reports generator |
2024-10-12 |
| Bug_Scraper |
9 |
8 |
A tool for bug bounty researchers to identify vali... |
2025-12-16 |
| huntr-extension |
9 |
7 |
huntr.dev browser extension, allowing you to view ... |
2024-08-12 |
| bug-bounty-intelligence-mcp |
9 |
3 |
MCP server that scans Solidity repos through a 7-g... |
2026-10-09 |
| Web-Application-Penetration-Testing-Bug-Bounty-Notes |
9 |
3 |
Web application penetration testing |
2026-10-09 |
| bug-bounty-dorks |
9 |
2 |
Bug Bounty Dorks 2025 |
2026-09-30 |
| 3PleB |
9 |
4 |
Set up minimal bug bounty environment, No more blo... |
2025-12-01 |
| tools |
9 |
3 |
scripts for ctf , bug bounty and stuffs |
2026-02-14 |
| awesomebugbounty |
9 |
3 |
СпиÑ�ок иÑ�точников, площадоÐ... |
2026-06-13 |
| Self-Hosted-Bug-Bounty-Programs |
9 |
2 |
Public bug bounty programs — a searchable, auto... |
2026-10-18 |
| ReconX |
9 |
5 |
Web & API recon framework — 7-phase async pipeli... |
2026-10-02 |
| disas_apk |
9 |
7 |
All-in-one tool to help bug bounty hunters easily ... |
2026-10-05 |
| r3dpower_toolkit |
9 |
5 |
A script to install a collection of tools for web ... |
2025-11-26 |
| BugBountyKit |
9 |
0 |
No description |
2025-11-09 |
| EyeOfRa |
9 |
2 |
Eye Of Ra A Program Watcher For Bug Bounty Platfor... |
2026-06-08 |
| BountyForge |
9 |
0 |
A lightweight offensive security recon framework f... |
2026-08-29 |
| Bug-bounty-dorks |
9 |
0 |
No description |
2026-10-14 |
| Apple-Bug-Bounty-Skill |
9 |
0 |
iOS Security and Exploiting skills for the Apple B... |
2026-10-08 |
| claude-bug-bounty-stack |
9 |
2 |
Complete Claude Code setup for bug bounty hunting ... |
2026-08-30 |
| repoleak |
9 |
2 |
A scanner for bug bounty hunters to find leaked se... |
2026-07-05 |
| Important_Websites |
9 |
3 |
These are websites which can help a Script Kiddie ... |
2026-10-13 |
| oneinfinity |
9 |
0 |
One&Infinity — Autonomous Penetration Testing & ... |
2026-09-29 |
| lazyRecon |
9 |
0 |
Tool to automate the recon phase for bug bounties |
2026-08-23 |
| hxr |
9 |
0 |
Advanced security reconnaissance framework for bug... |
2026-06-08 |
| -ILUSION-Advanced-Reconnaissance-Framework |
9 |
1 |
Framework avanzado de reconocimiento para Bug Boun... |
2026-07-19 |
| VEYL |
9 |
0 |
Modular reconnaissance framework for automating bu... |
2026-10-08 |
| NeuroRift |
9 |
0 |
An AI-powered vulnerability research framework for... |
2026-04-01 |
| Ultimate-ssrf-Framework |
9 |
1 |
Advanced SSRF discovery, validation and analysis f... |
2026-09-29 |
| ReconForge |
9 |
1 |
🛠� Automated installer for a comprehensive bu... |
2026-09-10 |
| recon_automation_resources |
9 |
0 |
Este es un repo con recursos que menciono en el mÃ... |
2026-09-30 |
| BurpShot |
9 |
0 |
🚀 BurpShot – A high-performance Burp Suite ex... |
2026-09-04 |
| shadowrecon |
9 |
0 |
ShadowRecon is a professional, all-in-one cybersec... |
2026-07-24 |
| Bug-Bounty-Tips |
8 |
6 |
The Repository aims to provide maximum Tips posted... |
2026-01-05 |
| Bug-Bounty-Automation |
8 |
6 |
Bash Script to perform bug bounty automation |
2025-09-16 |
| bug-bounty-tools |
8 |
5 |
Various wordlists, tools and scripts written/compi... |
2026-09-17 |
| bug-bounty |
8 |
4 |
IOTA Bug Bounty program. |
2025-05-20 |
| bugbounty |
8 |
4 |
bug bounty cheat files |
2026-10-16 |
| BbSpider |
8 |
5 |
Simple spider for bug bounty recon |
2025-06-18 |
| bug-bounty |
8 |
3 |
Example on setting up Bug Bounty Programs for Smar... |
2024-12-11 |
| BugBountyLearningResources |
8 |
2 |
Bug Bounty Learning Resources i mentioned on My Bl... |
2024-09-07 |
| myreconmethods |
8 |
5 |
This includes the methods of recon and exploit for... |
2024-08-12 |
| Bug-Bounty-Platforms |
8 |
2 |
Sites which you permission to check their security |
2025-07-16 |
| Bug-Bounty-Tools |
8 |
2 |
A list of resources for those interested in gettin... |
2026-09-09 |
| easy_hunt |
8 |
3 |
this repo content common bug bounty hunting techni... |
2025-09-28 |
| fbdl-mcp |
8 |
4 |
MCP Server for Meta Hackers, use agents to create ... |
2026-10-18 |
| DorksNight |
8 |
5 |
DorksNight search deeply and gain result for bug ... |
2022-11-24 |
| leperchaun |
8 |
0 |
bug bounty automation |
2026-03-13 |
| oneliners |
8 |
2 |
Collection of One Liners from Different Sources fo... |
2026-01-23 |
| Bug-bounty-methodology |
8 |
0 |
this is my approach to bug bounty. i have inspired... |
2026-06-16 |
| Web-Pentesting |
8 |
1 |
Only for bug bounty |
2025-11-25 |
| bug-bounty-scope-exporter |
8 |
0 |
No description |
2026-09-30 |
| Bug-Bounty-Vulnerability-Research |
8 |
0 |
Vulnerability research and exploits in Public Bug ... |
2022-07-26 |
| 0din.ai |
8 |
2 |
The zero day investigative network (0din) is a Gen... |
2026-08-15 |
| BugBrowser |
8 |
1 |
Bug Browser provides information security, program... |
2025-01-05 |
| Web-Pentest-Checklists-and-Bug-Bounty-Checklists |
8 |
0 |
Best Checklists for web Pentest Testing or for a B... |
2025-08-14 |
| awesome-hacker-search-engines |
8 |
3 |
A curated list of awesome search engines useful du... |
2026-10-10 |
| kali |
8 |
1 |
Kali Linux containers for bug bounty and CTFs |
2026-05-16 |
| thexwriteup |
8 |
3 |
Store all the latest Medium Articles by specific t... |
2026-06-20 |
| Bug-Hunterx |
8 |
0 |
Automated tool under scripting in Bash, which allo... |
2024-07-02 |
| PutYourMoneyWhereYourContractIs |
8 |
0 |
Ethereum-based autonomous Bug Bounty framework for... |
2022-02-14 |
| newassets |
8 |
6 |
I have collected different open source tools for m... |
2025-03-07 |
| hacklens |
8 |
2 |
HackLens is a full-featured, automated recon and v... |
2026-06-04 |
| h4fan.github.io |
8 |
0 |
web sec |
bug bounty |
| SecTrainingData |
8 |
0 |
Data for training machine learning models related ... |
2025-08-07 |
| kidrecon |
8 |
1 |
automated tool for reconnaissance and enumeration... |
2025-08-09 |
| roxxs-slave |
8 |
0 |
🔴 ROXX'S SLAVE — Autonomous Bug Bounty Huntin... |
2026-10-18 |
| price-manipulation-guide |
8 |
2 |
A complete bug bounty guide on Price Manipulation ... |
2026-10-16 |
| bb-tools |
8 |
0 |
This repo contains wordlist gathered from bug boun... |
2026-05-03 |
| FiddlerKit |
8 |
1 |
for pentesting, security research, bug bounty hunt... |
2024-08-12 |
| hacks |
8 |
1 |
A collection of scripts that I use in bug bounty a... |
2026-06-07 |
| DorkingWordlists |
8 |
0 |
🧾 |
Google Dorks for automation and manual sear... |
| ShoMe |
8 |
1 |
ShoMe is a web recon tool used to list out hidden ... |
2023-08-05 |
| bypassXSS |
8 |
1 |
A curated collection of advanced XSS bypass techni... |
2026-08-22 |
| HuntMCP |
8 |
0 |
Multi-level AI agent orchestration for autonomous ... |
2026-10-10 |
| submon |
8 |
2 |
Python script to monitor subs from crt.sh |
The sc... |
| xss-image-payloads |
8 |
1 |
Image-based XSS proof-of-concept payloads (SVG onl... |
2026-09-05 |
| admin-panel-finder |
8 |
1 |
Authorized admin panel finder and login scanner fo... |
2026-09-10 |
| cscaner |
8 |
3 |
CSCAN is a professional-grade, interactive cyberse... |
2026-10-07 |
| JavaScript-Analysis-Masterclass-Lab |
8 |
0 |
JavaScript Analysis Masterclass Lab is a hands-on ... |
2026-04-06 |
| WayPeek |
8 |
2 |
This extension helps bug bounty hunters and recon ... |
2026-08-23 |
| 2cmd |
8 |
2 |
Got a command that doesn't support input files lik... |
2025-06-04 |
| WebPentesting_Journey |
8 |
1 |
A personal documentation repo focused on mastering... |
2026-10-18 |
| XSS-Hunting-Automation |
8 |
1 |
Automação completa para caça de vulnerabilidade... |
2026-05-11 |
| BugBountyTips |
7 |
5 |
No description |
2026-06-06 |
| bug-bounty-server-profiles |
7 |
6 |
No description |
2026-07-08 |
| BugGPT-Tools |
7 |
7 |
AI generated tools/one-off-scripts pimarily for bu... |
2025-10-13 |
| Bug-Bounty |
7 |
4 |
No description |
2024-12-13 |
| Bug_Bounty_Hand_Book |
7 |
4 |
This is a 1st Part Of Bug Bounty Guideline . Hope ... |
2022-10-27 |
| program-db |
7 |
4 |
Open data for vulnerability-disclosure and bug-bou... |
2026-08-15 |
| bug_bounty_scripts |
7 |
1 |
scripts made for bug bounty hunting and other task... |
2026-08-25 |
| Bug-Bounty-Resources |
7 |
2 |
No description |
2025-10-15 |
| bugmenace |
7 |
2 |
A Bug Bounty Packer Build |
2022-10-19 |
| chaos_recondata |
7 |
7 |
CHAOS - Recon data for Public Bug Bounty Programs ... |
2025-09-17 |
| dorks |
7 |
2 |
Advanced Dorks for Bug Bounty! |
2026-08-24 |
| InfoScraper |
7 |
3 |
Python implementation of two famous JavaScript pay... |
2026-10-17 |
| bug-hunting-toolkit |
7 |
3 |
Sleek command generator and resource hub for bug b... |
2026-08-23 |
| all-domains |
7 |
7 |
a tool for finding all existing domain that is in ... |
2026-05-20 |
| HOLE |
7 |
1 |
The Ultimate Open-Source Bug Bounty Arsenal — Al... |
2026-07-24 |
| BugBounty-Notes |
7 |
1 |
No description |
2024-05-14 |
| BugBountyToolkit-ZSH |
7 |
0 |
BBT Custom ZSH Configuration |
2023-09-29 |
| BugBountyInfosFetcher |
7 |
0 |
No description |
2026-05-09 |
| bug-bounty-platforms |
7 |
0 |
Bug Bounty Platforms |
2026-06-01 |
| Mind-Maps |
7 |
4 |
Mindmaps for bug bounty Hunters🧑�🦰, pentes... |
2026-02-16 |
| Wide-Bounty |
7 |
1 |
AI-Driven Recon & Bug Bounty Toolkit |
2026-08-02 |
| termux-bug-bounty-guide |
7 |
1 |
No description |
2026-07-01 |
| Facebook-Bug-Bounty-Writeups |
7 |
0 |
Collection of Facebook Bug Bounty and Security Vul... |
2026-09-09 |
| bugbounty |
7 |
0 |
Google dorks for finding bug bounty programs |
2025-04-05 |
| bounty_domains |
7 |
1 |
public and private bug bounty programs from differ... |
2025-12-07 |
| Immunefi-Bug-Bounty-Programs-Snapshots |
7 |
0 |
Every time a Bug Bounty Program in Immunefi modifi... |
2026-10-10 |
| Ettercap-Bug-Bounty-Automation-Pipeline |
7 |
0 |
Personal recon and vuln scanning pipeline — chai... |
2026-06-16 |
| bountybleed |
7 |
1 |
Quick & Dirty script that scan for the heartbleed ... |
2023-01-28 |
| BugBullets |
7 |
1 |
An Ammo store containing < 100 words summary of se... |
2025-07-05 |
| LulzSec_Dorks |
7 |
0 |
Google Dorks for Bug Bounty |
Find Sensitive Infor... |
| host-header-injection-tool |
7 |
0 |
Host Header Injection Automation Tool for Bug Boun... |
2026-09-29 |
| Portscan |
7 |
0 |
Hardcoded nmap command automation for CTFs / Bug B... |
2024-07-17 |
| hermes-agent-offsec |
7 |
2 |
Offensive-security focused fork of HERMES-AGENT fo... |
2026-10-19 |
| scopeNotifier |
7 |
1 |
Getting the latest scopes (domains that are eligib... |
2025-01-05 |
| oauth-sniper |
7 |
1 |
Tool to scan across multiple bug bounty programs f... |
2026-05-18 |
| v3nomEyE |
7 |
2 |
Automated P1 bug bounty framework — 17-phase re... |
2026-05-19 |
| bb-reformater |
7 |
0 |
A browser extension that helps bug bounty hunters ... |
2026-02-21 |
| Pentest-Pro |
7 |
0 |
An advanced, centralized toolkit and methodology d... |
2026-04-06 |
| Endpoints-Monitor |
7 |
0 |
A tool designed to help bug bounty hunters monitor... |
2026-05-20 |
| cybertools-api |
7 |
0 |
A versatile FastAPI-powered toolkit made for secur... |
2026-05-13 |
