A-to-Z Bug Bounty Hunting Tools
☆140Mar 26, 2025Updated last year
Alternatives and similar repositories for BugBountyTools
Users that are interested in BugBountyTools are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Burp Suite extension — passively detects secrets, API keys, credentials, JWTs & PII in HTTP traffic. 160+ detection rules, bulk scan, ent…☆56Aug 24, 2026Updated last month
- Active Directory share enumeration tool☆12Apr 28, 2025Updated last year
- bug bounty automation with 4-phase workflow: passive OSINT, active recon, intelligent analysis, and systematic vulnerability testing (XSS…☆23Nov 4, 2025Updated 10 months ago
- XSSRecon is a fast reflected-parameter discovery tool that uses unique numbered payloads to detect input reflection in HTTP responses and…☆61Sep 17, 2026Updated 2 weeks ago
- ☆25Jan 20, 2026Updated 8 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 - Authenticated (Contributor+) Remote Code Execution☆13Dec 2, 2024Updated last year
- Templtor is a bash script that will gather all the community Nuclei templates.☆41Dec 19, 2025Updated 9 months ago
- ☆21Jul 16, 2025Updated last year
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆24Mar 16, 2026Updated 6 months ago
- ☆11Dec 27, 2024Updated last year
- The Complete Guide to Dorking for Bug Bounty Hunters☆23Jan 1, 2026Updated 9 months ago
- ☆32Jun 26, 2026Updated 3 months ago
- Interactive XSS Labs to get into Client-Side Hacking☆95Feb 25, 2026Updated 7 months ago
- TokenTwin Checker — Dual Token BAC/IDOR Tester for Burp Suite☆97Aug 24, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Find XSS payloads that actually work by filtering them based on real-world constraints instead of blind payload spraying.☆288Aug 12, 2026Updated last month
- ☆16Jun 28, 2025Updated last year
- All Write-up pushed by RasyidMF. This repository is created for private or public learning purposes☆10Oct 16, 2020Updated 5 years ago
- AI-powered bug bounty hunting toolkit that works with or without subscription.☆5,231Updated this week
- ☆14Jan 4, 2021Updated 5 years ago
- ☆167Jun 1, 2025Updated last year
- Open-source unified security operations & threat intelligence platform for OT/ICS environments with ontology-driven dashboards☆50May 27, 2026Updated 4 months ago
- Bug Bounty Methodology☆337Aug 4, 2026Updated last month
- Simple XSS vulnerability checker tool very useful with xsschecker.☆28Nov 21, 2025Updated 10 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Get the unique machine id of any host (without admin privileges)☆24Jul 15, 2025Updated last year
- Android APK security analysis tool. Decompiles DEX, scans for vulns, parses manifests and certs. Runs in your browser.☆78May 14, 2026Updated 4 months ago
- Active Directory forensic framework☆16May 18, 2026Updated 4 months ago
- A curated list of awesome plugins for Claude☆17Oct 12, 2025Updated 11 months ago
- OpenRedirector is a powerful automation tool for detecting Open Redirect vulnerabilities in web applications☆21Oct 30, 2025Updated 11 months ago
- JaelesFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications☆22May 1, 2024Updated 2 years ago
- ⚔️ Community maintained directory, MCP and API of 3,000+ active bug bounty programs and VDPs☆439Updated this week
- Live runtime audit for installed Android apps. Runs on the rooted phone, serves a browser dashboard.☆33May 23, 2026Updated 4 months ago
- Solutions for all the WebSecurityAcademy with Videos☆130Aug 3, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- An AI-Powered Bug Bounty Hunting Platform - Comprehensive MCP server for security testing, vulnerability research, and bug bounty hunting☆47Jul 24, 2026Updated 2 months ago
- Minimalist notes for CEH-practical Cert.☆42Jul 19, 2022Updated 4 years ago
- A complete, beginner-friendly bug bounty roadmap that takes you from zero experience to earning your first bounty.☆1,511Sep 5, 2025Updated last year
- Autonomous AI agents for bug bounty hunting, 18 parallel hunters, built-in validator, zero setup.☆22Apr 16, 2026Updated 5 months ago
- ☆404Sep 16, 2026Updated 2 weeks ago
- Find subdomains by searching public certificate records☆16Jun 11, 2024Updated 2 years ago
- Collection of OSEP Notes and Payloads☆18Jul 21, 2025Updated last year