An obsessive, expert-tier knowledge base + AI skill system for professional bug bounty hunting, security research, and penetration testing.
☆27Apr 25, 2026Updated 3 months ago
Alternatives and similar repositories for BugBountySkills
Users that are interested in BugBountySkills are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A curated collection of my security research and bug bounty writeups, documenting real-world vulnerabilities, exploitation methods☆26Jul 15, 2026Updated 2 weeks ago
- BadGPT is a robust framework designed to simplify and optimize the bug bounty process. Equipped with a suite of tools for reconnaissance,…☆25Dec 1, 2024Updated last year
- Welcome to the 403 and 401 Bypass Techniques and Bug Bounty Tips repository! This repo is a collection of methods and strategies to bypas…☆38Dec 26, 2024Updated last year
- ☆16Apr 12, 2026Updated 3 months ago
- Documenting my security research journey: This repository contains detailed vulnerability write-ups, proof-of-concept (PoC) exploits, and…☆61Jul 21, 2026Updated last week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Personal Web Application Pentesting Methodology built during my cybersecurity learning journey. Covers reconnaissance, scanning, fuzzing,…☆51Jul 24, 2026Updated last week
- WAPTLab - Web Application Penetration Testing Lab☆117Dec 1, 2025Updated 8 months ago
- ☆28Feb 16, 2026Updated 5 months ago
- TokenTwin Checker — Dual Token BAC/IDOR Tester for Burp Suite☆88Jun 28, 2026Updated last month
- Web2 bug bounty Agent Skill — evidence-based, no AI slop. Covers 18 vulnerability classes across HackerOne, Bugcrowd, Intigriti, and YesW…☆67Feb 21, 2026Updated 5 months ago
- A simple HAR-based JavaScript recon automation kit for organizing JS files, endpoints, secrets, and gf-filtered attack surface during bug…☆18May 20, 2026Updated 2 months ago
- HTB recon tool to simplify part of the enumeration process☆14May 14, 2025Updated last year
- Here's an updated Google Dorking list for 2025 Bug Bounty Hunting, incorporating new patterns and, the latest trends.☆15Apr 26, 2025Updated last year
- A resources for who want to learn and get deep into client-side bugs☆554Dec 8, 2024Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- The "Let's-defend-solution" directory contains the answers to all paths of the Let's Defend platform that were saved by the creator 8 mon…☆13Apr 27, 2023Updated 3 years ago
- CLAUDE.md configs and skills I use for bug bounty hunting with Claude Code☆29Apr 14, 2026Updated 3 months ago
- Mini recon script to identify the links and sensitive information from a particular link☆23Mar 9, 2021Updated 5 years ago
- Monitoring Monster (MonMon) is a monitoring tool for bug bounty hunters. It tracks changes across subdomains, HTTP endpoints, shell com…☆44Apr 7, 2026Updated 3 months ago
- This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter☆35Feb 10, 2024Updated 2 years ago
- CVE-2026-63030, CVE-2026-60137, wp2shell scanner☆46Jul 18, 2026Updated 2 weeks ago
- Use AI to install penetration testing tool suites in one click.☆117Oct 5, 2025Updated 9 months ago
- IP Finder tool, ipfinder collects IP addresses from Shodan search queries.☆17Dec 12, 2025Updated 7 months ago
- DoomScope framework - Automated Web Security/Recon Scanner☆88Dec 22, 2025Updated 7 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- My Main App Hacking CheckList☆33Jun 20, 2026Updated last month
- ☆11Apr 8, 2024Updated 2 years ago
- AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes☆361Apr 30, 2026Updated 3 months ago
- Comprehensive DNS wordlist with 20,728,676 unique entries for advanced subdomain enumeration and brute-forcing, designed for ethical pene…☆23Apr 21, 2025Updated last year
- At this repo you can find any tools, tricks or templates for general penetration testing assesment☆16Apr 27, 2024Updated 2 years ago
- ☆25Sep 22, 2025Updated 10 months ago
- Auto Web Vulnerability Scanning Framework☆11Feb 3, 2016Updated 10 years ago
- A structured and beginner-friendly knowledge base for learning Certified Ethical Hacker (CEH v13) concepts. This repository contains cle…☆29Mar 11, 2026Updated 4 months ago
- ☆31Jun 26, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- PoC for CVE-2026-48907 - Joomla! JCE extension < 2.9.99.5 unauthenticated RCE☆15Jun 11, 2026Updated last month
- Journey to learning frida android.☆11Apr 23, 2019Updated 7 years ago
- ☆38Updated this week
- Self-hosted external attack surface scanner. Subdomain enumeration + takeover detection, ports, CVEs, TLS, SSH, web vulns, EPSS/KEV prior…☆21Updated this week
- Google Dork Finder is a Python tool designed to facilitate the use of Google Dorking for searching specific information on the web.☆33Nov 27, 2024Updated last year
- Just "Harmless" Google dorks for bug hunters☆24Nov 25, 2024Updated last year
- Stealth hybrid URL mapper☆26May 1, 2026Updated 3 months ago