A-to-Z Bug Bounty Hunting Tools
☆130Mar 26, 2025Updated last year
Alternatives and similar repositories for BugBountyTools
Users that are interested in BugBountyTools are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This is my personal Enumeration Handbook that I used for the OSCP 2023☆26Aug 21, 2023Updated 2 years ago
- Burp Suite extension — passively detects secrets, API keys, credentials, JWTs & PII in HTTP traffic. 160+ detection rules, bulk scan, ent…☆34May 15, 2026Updated 2 months ago
- Active Directory share enumeration tool☆13Apr 28, 2025Updated last year
- XSSRecon automates the process of testing URL parameters for reflection of a test payload rix4uni and further checks how special characte…☆54Jun 26, 2026Updated last month
- bug bounty automation with 4-phase workflow: passive OSINT, active recon, intelligent analysis, and systematic vulnerability testing (XSS…☆23Nov 4, 2025Updated 8 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆22Mar 16, 2026Updated 4 months ago
- The Complete Guide to Dorking for Bug Bounty Hunters☆22Jan 1, 2026Updated 7 months ago
- ☆23Jan 20, 2026Updated 6 months ago
- Community curated list of templates for the nuclei engine to find security vulnerabilities.☆110Nov 24, 2025Updated 8 months ago
- Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 - Authenticated (Contributor+) Remote Code Execution☆13Dec 2, 2024Updated last year
- Templtor is a bash script that will gather all the community Nuclei templates.☆41Dec 19, 2025Updated 7 months ago
- ☆31Jun 26, 2026Updated last month
- ☆16Jul 16, 2025Updated last year
- Active Directory forensic framework☆16May 18, 2026Updated 2 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Interactive XSS Labs to get into Client-Side Hacking☆95Feb 25, 2026Updated 5 months ago
- ☆11Dec 27, 2024Updated last year
- Hello, aspiring hackers! 🕵️♂️ Here’s a list of 500+ Free TryHackMe rooms to kickstart your cybersecurity journey. These rooms are absol…☆485Sep 6, 2025Updated 10 months ago
- OpenRedirector is a powerful automation tool for detecting Open Redirect vulnerabilities in web applications☆21Oct 30, 2025Updated 9 months ago
- Open-source unified security operations & threat intelligence platform for OT/ICS environments with ontology-driven dashboards☆45May 27, 2026Updated 2 months ago
- Live runtime audit for installed Android apps. Runs on the rooted phone, serves a browser dashboard.☆28May 23, 2026Updated 2 months ago
- ☆18May 23, 2026Updated 2 months ago
- Find XSS payloads that actually work by filtering them based on real-world constraints instead of blind payload spraying.☆279Jun 6, 2026Updated last month
- Android APK security analysis tool. Decompiles DEX, scans for vulns, parses manifests and certs. Runs in your browser.☆66May 14, 2026Updated 2 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- JSHawk is a powerful, context-aware JavaScript security scanner that hunts for exposed credentials, API keys, and sensitive information i…☆17Apr 13, 2026Updated 3 months ago
- A thin Python wrapper around netexec (nxc) that runs the same target/credential pair across many nxc protocols in a single command, with …☆18May 10, 2026Updated 2 months ago
- TokenTwin Checker — Dual Token BAC/IDOR Tester for Burp Suite☆88Jun 28, 2026Updated last month
- Google Dorks and keywords for bug hunters.☆17Aug 16, 2021Updated 4 years ago
- ☆16Jun 28, 2025Updated last year
- BugBounty-Recon-Methodology☆325May 26, 2026Updated 2 months ago
- All Write-up pushed by RasyidMF. This repository is created for private or public learning purposes☆10Oct 16, 2020Updated 5 years ago
- AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude…☆4,071Jul 25, 2026Updated last week
- A tool for detecting subdomain takeover vulnerabilities by checking DNS records☆33May 28, 2026Updated 2 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A powerful URL parameter and request fuzzing tool that processes URLs or Burp Suite raw requests, replacing values with custom payloads w…☆21Apr 12, 2026Updated 3 months ago
- ☆27Aug 19, 2024Updated last year
- Free BugBounty KrazePlanetTraining☆58Dec 17, 2025Updated 7 months ago
- This project is an Automated Penetration Testing and Vulnerability Scanning Framework. It is designed to all-in-one automated handles eve…☆21Jun 15, 2026Updated last month
- Collected resources for OSWA preparation.☆28Jan 25, 2023Updated 3 years ago
- XSS payloads to bypass various XSS filters☆15May 1, 2019Updated 7 years ago
- A collection of common Linux commands for system navigation, file management, networking, and more.☆42Feb 21, 2025Updated last year