A complete, beginner-friendly bug bounty roadmap that takes you from zero experience to earning your first bounty.
☆1,495Sep 5, 2025Updated last year
Alternatives and similar repositories for First-Bounty
Users that are interested in First-Bounty are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A curated list of MCP servers for bug bounty.☆65Oct 6, 2025Updated 11 months ago
- ☆1,177Jan 28, 2026Updated 7 months ago
- Repositories, Links, Payloads, Blogs, Tools, etc.. which I think might be useful for pentesting and bug bounty☆51Jan 6, 2026Updated 8 months ago
- Top disclosed reports from HackerOne☆6,553Sep 12, 2026Updated last week
- Bug Bounty Methodology 2025: Tools, techniques, and steps to guide you through reconnaissance, enumeration, and testing.☆481May 21, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A resources for who want to learn and get deep into client-side bugs☆558Dec 8, 2024Updated last year
- Bug Bounty Methodology☆335Aug 4, 2026Updated last month
- AI-powered bug bounty hunting toolkit that works with or without subscription.☆5,026Updated this week
- ☆1,669Mar 7, 2026Updated 6 months ago
- AI Native Bug Bounty Hunting Framework Designed to Help Beginners Compete w/ the Pros☆820Updated this week
- ☆82Nov 4, 2025Updated 10 months ago
- ☆264Dec 10, 2025Updated 9 months ago
- ☆394Updated this week
- ☆200Jan 22, 2026Updated 7 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆78May 5, 2025Updated last year
- How To approach recon on real targets — from passive enumeration to origin IP discovery. Covers tools, automation, and the logic behind e…☆412Jul 5, 2026Updated 2 months ago
- 0xJS is an AI-powered JavaScript Security Tool☆67Apr 16, 2026Updated 5 months ago
- Convert your HackerOne reports into reusable AI skills.☆109Mar 9, 2026Updated 6 months ago
- Chrome DevTools HTTP workbench with built-in AI.☆19Dec 9, 2025Updated 9 months ago
- Collection of scripts and tools used during bug bounty work. This will be the location of my automation scripts created for my own person…☆153Dec 18, 2025Updated 9 months ago
- Collection of documentation, tools, and tips related to vulnerability research.☆269Updated this week
- The repo contains all the the notes, slides, and study material for my workshop at DEFCON 32 at the Bug Bounty Village☆227Aug 13, 2024Updated 2 years ago
- This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter☆3,643Feb 10, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆53Oct 1, 2025Updated 11 months ago
- GarudRecon automates domain recon with top open-source tools to discover assets, enumerate subdomains, and detect XSS, SQLi, LFI, RCE & m…☆270Mar 28, 2026Updated 5 months ago
- A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting☆1,910Sep 29, 2025Updated 11 months ago
- A cyber security toolkit blending manual testing with AI Agents☆137Aug 16, 2026Updated last month
- ☆548Aug 21, 2025Updated last year
- Bug Bounty ~ Awesomes | Books | Cheatsheets | Checklists | Tools | Wordlists | More☆665Oct 27, 2025Updated 10 months ago
- AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes☆426Apr 30, 2026Updated 4 months ago
- A comprehensive bug bounty methodology compiled from extensive research, covering web application reconnaissance, checklists, and methods…☆165Nov 11, 2024Updated last year
- Documenting all the sources from where I'm learning Mobile(adnroid/IOS) bug bounty so if another researcher want to start with mobile bug…☆69Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- rep+ — Burp-style HTTP Repeater for Chrome DevTools with built‑in AI to explain requests and suggest attacks☆1,609Jan 16, 2026Updated 8 months ago
- ☆197Mar 16, 2026Updated 6 months ago
- A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curat…☆4,565Updated this week
- best tool for finding SQLi,CRLF,XSS,LFi,OpenRedirect☆1,617Dec 7, 2025Updated 9 months ago
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆23Mar 16, 2026Updated 6 months ago
- Simple XSS vulnerability checker tool very useful with xsschecker.☆28Nov 21, 2025Updated 9 months ago
- ☆255Mar 13, 2025Updated last year