Alternatives and similar repositories for bug-bounty-101:

Users that are interested in bug-bounty-101 are comparing it to the libraries listed below

• paralax / xss-labs
  small set of scripts to practice exploit XSS and CSRF vulnerabilities
  ☆60Updated 7 years ago
• CHYbeta / WAF-Bypass
  WAF Bypass Cheatsheet
  ☆213Updated 7 years ago
• C1h2e1 / Recon
  Easy Fast recon script
  ☆29Updated 5 years ago
• m6a-UdS / ssrf-lab
  Lab for exploring SSRF vulnerabilities
  ☆246Updated 3 years ago
• p3n73st3r / Ghazi
  Ghazi is a BurpSuite Plugins For Testing various PayLoads Like "XSS,SQLi,SSTI,SSRF,RCE and LFI" through Different tabs , Where Each Tab W…
  ☆110Updated 6 years ago
• jas502n / cve-2019-2618
  Weblogic Upload Vuln(Need username password)-CVE-2019-2618
  ☆172Updated 6 years ago
• gh0stkey / JSONandHTTPP
  Burp Suite Plugin: Convert the json text that returns the body into HTTP request parameters.
  ☆102Updated 3 years ago
• lightless233 / Java-Unserialization-Study
  QAQ Just study unserialize vulnerabilities in Java :)
  ☆195Updated 6 years ago
• h4ppy7ree / kernel-exploits
  ☆22Updated 8 years ago
• NytroRST / XSSFuzzer
  XSS Fuzzer is a tool which generates XSS payloads based on user-defined vectors and fuzzing lists.
  ☆141Updated 6 years ago
• veracode-research / actuator-testbed
  A vulnerable application exposing Spring Boot Actuators
  ☆122Updated 6 years ago
• Lopseg / Jsdir
  Jsdir is a Burp Suite extension that extracts hidden paths from js files and beautifies it for further reading.
  ☆117Updated 4 years ago
• ZephrFish / XSSPayloads
  Cross Site Scripting Payloads -- Variations
  ☆71Updated last week
• PortSwigger / j2ee-scan
  J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tes…
  ☆74Updated 3 years ago
• tutorial0 / payloads
  for burp
  ☆51Updated 8 years ago
• PortSwigger / authz
  ☆106Updated 8 years ago
• bigsizeme / burplugin-java-rce
  ******本软件仅限用于学习交流禁止用于任何非法行为****** 本版本支持elasticsearch java语言远程命令执行及文件上传 elasticsearchgroov语言远程命令执行及文件上传 struts2-005、struts2-009、struts2-01…
  ☆111Updated 7 years ago
• zer0yu / Berserker
  A list of useful payloads for Web Application Security and Pentest/CTF
  ☆300Updated 8 months ago
• Tr3jer / dnsAutoRebinding
  ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6
  ☆217Updated 7 years ago
• fnmsd / awvs_script_decode
  解密好的AWVS10.5 data/script/目录下的脚本
  ☆265Updated 7 years ago
• coco413 / DiscoverSubdomain
  前渗透信息探测工具集-子域名
  ☆137Updated 7 years ago
• nixawk / fuzzdb
  Web Fuzzing Discovery and Attack Pattern Database
  ☆113Updated 7 years ago
• CHYbeta / php_bugs
  PHP代码审计分段讲解
  ☆26Updated 7 years ago
• jas502n / CNVD-C-2019-48814
  WebLogic wls9-async反序列化远程命令执行漏洞
  ☆241Updated 5 years ago
• xinali / wooyun
  wooyun public information backup
  ☆121Updated 8 years ago
• appsecco / json-flash-csrf-poc
  This repo contains the files required to perform a CSRF attack using Flash and HTTP 307 redirections.
  ☆77Updated 7 years ago
• pyn3rd / CVE-2018-3245
  CVE-2018-3245-PoC
  ☆167Updated 3 years ago
• TheTwitchy / xxer
  A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.
  ☆515Updated 4 years ago
• hex0wn / learn-java-bug
  ☆71Updated 2 years ago
• h4rdy / Acunetix11-API-Documentation
  Inofficial Acunetix11 API Documentation
  ☆178Updated 5 years ago