An obsessive, expert-tier knowledge base + AI skill system for professional bug bounty hunting, security research, and penetration testing.
☆66Apr 25, 2026Updated 5 months ago
Alternatives and similar repositories for BugBountySkills
Users that are interested in BugBountySkills are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Welcome to the 403 and 401 Bypass Techniques and Bug Bounty Tips repository! This repo is a collection of methods and strategies to bypas…☆40Dec 26, 2024Updated last year
- A curated collection of my security research and bug bounty writeups, documenting real-world vulnerabilities, exploitation methods☆27Oct 16, 2026Updated last week
- Keycloak reset-credentials flow bypass☆18Sep 28, 2026Updated 3 weeks ago
- BadGPT is a robust framework designed to simplify and optimize the bug bounty process. Equipped with a suite of tools for reconnaissance,…☆25Dec 1, 2024Updated last year
- Web2 bug bounty Agent Skill — evidence-based, no AI slop. Covers 18 vulnerability classes across HackerOne, Bugcrowd, Intigriti, and YesW…☆74Feb 21, 2026Updated 8 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- WAPTLab - Web Application Penetration Testing Lab☆122Dec 1, 2025Updated 10 months ago
- ☆16Apr 12, 2026Updated 6 months ago
- A real-time, terminal-based network traffic analyzer built with Python, Scapy, and Rich. Captures live packets using multi-threading to d…☆53Aug 7, 2026Updated 2 months ago
- ☆31Feb 16, 2026Updated 8 months ago
- A simple recon pipeline☆39Sep 24, 2026Updated 3 weeks ago
- PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with…☆39Sep 22, 2026Updated last month
- CLAUDE.md configs and skills I use for bug bounty hunting with Claude Code☆34Apr 14, 2026Updated 6 months ago
- Grepleaks — your AI pentest environment. An AI pentest agent that lives in your terminal.☆34Sep 24, 2026Updated 3 weeks ago
- SelfHosted - Bug Bounty Programs | Discover new and fresh bug bounty programs across platforms. Updated frequently to always display the …☆15Nov 24, 2025Updated 10 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A collection of custom built scan templates for automated vuln scanning (nuclei, Burp, etc.)☆51Mar 23, 2023Updated 3 years ago
- TokenTwin Checker — Dual Token BAC/IDOR Tester for Burp Suite☆98Aug 24, 2026Updated last month
- A resources for who want to learn and get deep into client-side bugs☆561Dec 8, 2024Updated last year
- ☆15Mar 21, 2025Updated last year
- Just "Harmless" Google dorks for bug hunters☆26Nov 25, 2024Updated last year
- HTB recon tool to simplify part of the enumeration process☆14May 14, 2025Updated last year
- Documenting my security research journey: This repository contains detailed vulnerability write-ups, proof-of-concept (PoC) exploits, and…☆237Updated this week
- HTB_Write_Ups☆27Feb 25, 2024Updated 2 years ago
- BUG HUNTING/WEB APPLICATION PENTESTING CHECKLIST☆15May 30, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Here's an updated Google Dorking list for 2025 Bug Bounty Hunting, incorporating new patterns and, the latest trends.☆25Apr 26, 2025Updated last year
- Regex-free, fast Khmer Encoding normalizer ported to 18 languages☆22May 16, 2026Updated 5 months ago
- A simple HAR-based JavaScript recon automation kit for organizing JS files, endpoints, secrets, and gf-filtered attack surface during bug…☆19May 20, 2026Updated 5 months ago
- Tool to create XSS PDF files☆77Jun 6, 2024Updated 2 years ago
- URL Fuzzer☆24Nov 22, 2024Updated last year
- Mini recon script to identify the links and sensitive information from a particular link☆23Mar 9, 2021Updated 5 years ago
- A practical security workbook for reviewing source code, identifying vulnerabilities, validating findings with test cases, and automating…☆32Sep 4, 2026Updated last month
- The "Let's-defend-solution" directory contains the answers to all paths of the Let's Defend platform that were saved by the creator 8 mon…☆14Aug 11, 2026Updated 2 months ago
- Monitoring Monster (MonMon) is a monitoring tool for bug bounty hunters. It tracks changes across subdomains, HTTP endpoints, shell com…☆48Apr 7, 2026Updated 6 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter☆35Feb 10, 2024Updated 2 years ago
- A powerful Go tool for finding origin IPs of domains by querying multiple security APIs and validating results with built-in HTTP client.☆52Dec 4, 2025Updated 10 months ago
- IP Finder tool, ipfinder collects IP addresses from Shodan search queries.☆17Dec 12, 2025Updated 10 months ago
- Next.js RCE☆53Sep 29, 2026Updated 3 weeks ago
- ☆75Jul 15, 2026Updated 3 months ago
- ☆19Sep 29, 2026Updated 3 weeks ago
- DoomScope framework - Automated Web Security/Recon Scanner☆89Dec 22, 2025Updated 10 months ago