A-to-Z Bug Bounty Hunting Tools
☆144Mar 26, 2025Updated last year
Alternatives and similar repositories for BugBountyTools
Users that are interested in BugBountyTools are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Web | Mobile | API | Thick Client | Source Code Review | Wireless | Network Pentesting etc...☆11Dec 17, 2025Updated 10 months ago
- This is my personal Enumeration Handbook that I used for the OSCP 2023☆26Aug 21, 2023Updated 3 years ago
- Burp Suite extension — passively detects secrets, API keys, credentials, JWTs & PII in HTTP traffic. 160+ detection rules, bulk scan, ent…☆64Updated this week
- bug bounty automation with 4-phase workflow: passive OSINT, active recon, intelligent analysis, and systematic vulnerability testing (XSS…☆24Nov 4, 2025Updated last year
- Process hunting Toolkit is toolkit capable of hunting down malicious processes on Windows☆14Jan 31, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A bunch of payloads for my own usage☆15Oct 1, 2026Updated last month
- ☆13Sep 6, 2022Updated 4 years ago
- XSSRecon is a fast reflected-parameter discovery tool that uses unique numbered payloads to detect input reflection in HTTP responses and…☆61Oct 12, 2026Updated last month
- Templtor is a bash script that will gather all the community Nuclei templates.☆40Dec 19, 2025Updated 10 months ago
- Hermes is an automated security tool written in Python designed to discover Cross-Site Scripting (XSS) vulnerabilities in web application…☆10Aug 22, 2025Updated last year
- Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 - Authenticated (Contributor+) Remote Code Execution☆13Dec 2, 2024Updated last year
- ☆15Updated this week
- Bug Bounty Methodology 2025: Tools, techniques, and steps to guide you through reconnaissance, enumeration, and testing.☆498May 21, 2025Updated last year
- ☆11Dec 27, 2024Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- SnailHunter is a fully automated bug bounty hunting platform that combines traditional security tools with AI-powered analysis.☆18May 8, 2026Updated 6 months ago
- ☆49Jul 30, 2026Updated 3 months ago
- A curated list of various bug bounty tools☆6,480Nov 1, 2026Updated last week
- The Complete Guide to Dorking for Bug Bounty Hunters☆23Jan 1, 2026Updated 10 months ago
- Find XSS payloads that actually work by filtering them based on real-world constraints instead of blind payload spraying.☆289Aug 12, 2026Updated 3 months ago
- ☆113Nov 2, 2026Updated last week
- Interactive XSS Labs to get into Client-Side Hacking☆95Feb 25, 2026Updated 8 months ago
- ☆32Mar 14, 2025Updated last year
- Hello, aspiring hackers! 🕵️♂️ Here’s a list of 500+ Free TryHackMe rooms to kickstart your cybersecurity journey. These rooms are absol…☆577Sep 15, 2026Updated 2 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- AI-powered bug bounty hunting toolkit that works with or without subscription.☆5,877Updated this week
- PowerShell Scripts to aid in Enumeration☆12Jan 19, 2026Updated 9 months ago
- ☆26Jan 20, 2026Updated 9 months ago
- ☆11Jun 9, 2023Updated 3 years ago
- API Security University & PortSwigger Academy Study Notes☆28Nov 13, 2025Updated last year
- CyberSandbox — all-in-one Docker security workspace with 160+ tools, dual AI, Caido proxy, and plugin marketplace☆18Updated this week
- ☆16Jun 28, 2025Updated last year
- A complete, beginner-friendly bug bounty roadmap that takes you from zero experience to earning your first bounty.☆1,570Sep 5, 2025Updated last year
- ☆24Jun 20, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆17Sep 29, 2024Updated 2 years ago
- ☆10Nov 9, 2020Updated 6 years ago
- Simple XSS vulnerability checker tool very useful with xsschecker.☆28Nov 21, 2025Updated 11 months ago
- JaelesFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications☆22May 1, 2024Updated 2 years ago
- Attack Active Directory Trusts with a single tool☆14Jan 15, 2025Updated last year
- 🔐 Free TryHackMe SOC labs for SIEM, IR, and Blue Team analyst training.☆56Feb 3, 2026Updated 9 months ago
- ☆28Mar 30, 2026Updated 7 months ago
Are these results useful?