A complete, beginner-friendly bug bounty roadmap that takes you from zero experience to earning your first bounty.
☆1,408Sep 5, 2025Updated 10 months ago
Alternatives and similar repositories for First-Bounty
Users that are interested in First-Bounty are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A curated list of MCP servers for bug bounty.☆65Oct 6, 2025Updated 9 months ago
- ☆1,170Jan 28, 2026Updated 5 months ago
- Bug Bounty Methodology 2025: Tools, techniques, and steps to guide you through reconnaissance, enumeration, and testing.☆462May 21, 2025Updated last year
- A resources for who want to learn and get deep into client-side bugs☆551Dec 8, 2024Updated last year
- BugBounty-Recon-Methodology☆321May 26, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude…☆3,996Jul 9, 2026Updated last week
- Bug Bounty Hunting Framework Designed to Help Beginners Compete w/ the Pros☆680Mar 28, 2026Updated 3 months ago
- ☆80Nov 4, 2025Updated 8 months ago
- ☆260Dec 10, 2025Updated 7 months ago
- ☆323Updated this week
- ☆158Jan 22, 2026Updated 5 months ago
- ☆78May 5, 2025Updated last year
- 0xJS is an AI-powered JavaScript Security Tool☆64Apr 16, 2026Updated 3 months ago
- How To approach recon on real targets — from passive enumeration to origin IP discovery. Covers tools, automation, and the logic behind e…☆335Jul 5, 2026Updated 2 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Convert your HackerOne reports into reusable AI skills.☆104Mar 9, 2026Updated 4 months ago
- Chrome DevTools HTTP workbench with built-in AI.☆19Dec 9, 2025Updated 7 months ago
- Collection of scripts and tools used during bug bounty work. This will be the location of my automation scripts created for my own person…☆152Dec 18, 2025Updated 7 months ago
- A cyber security toolkit blending manual testing with AI Agents☆136May 9, 2026Updated 2 months ago
- This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter☆3,606Feb 10, 2024Updated 2 years ago
- GarudRecon automates domain recon with top open-source tools to discover assets, enumerate subdomains, and detect XSS, SQLi, LFI, RCE & m…☆263Mar 28, 2026Updated 3 months ago
- ☆53Oct 1, 2025Updated 9 months ago
- AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes☆350Apr 30, 2026Updated 2 months ago
- Documenting all the sources from where I'm learning Mobile(adnroid/IOS) bug bounty so if another researcher want to start with mobile bug…☆57May 23, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A comprehensive bug bounty methodology compiled from extensive research, covering web application reconnaissance, checklists, and methods…☆153Nov 11, 2024Updated last year
- Top disclosed reports from HackerOne☆6,366Updated this week
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆22Mar 16, 2026Updated 4 months ago
- ☆193Mar 16, 2026Updated 4 months ago
- Collection of documentation, tools, and tips related to vulnerability research.☆94Jul 13, 2026Updated last week
- rep+ — Burp-style HTTP Repeater for Chrome DevTools with built‑in AI to explain requests and suggest attacks☆1,602Jan 16, 2026Updated 6 months ago
- A Claude Code skill bundle for bug hunting and external red-team work — 71 skills, 15 slash commands, 681 disclosed-report patterns curat…☆2,995Jul 1, 2026Updated 2 weeks ago
- ☆250Mar 13, 2025Updated last year
- best tool for finding SQLi,CRLF,XSS,LFi,OpenRedirect☆1,595Dec 7, 2025Updated 7 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆96May 11, 2026Updated 2 months ago
- Simple XSS vulnerability checker tool very useful with xsschecker.☆28Nov 21, 2025Updated 8 months ago
- A curated collection of my security research and bug bounty writeups, documenting real-world vulnerabilities, exploitation methods☆26Updated this week
- eJPTv2 Essentials: Notes & Machines to crush the eJPTv2 Exam.☆67Sep 1, 2025Updated 10 months ago
- ☆52Feb 20, 2026Updated 5 months ago
- Spec-driven bug bounty writeups and real world security failures.☆43Jul 5, 2026Updated 2 weeks ago
- ☆529Aug 21, 2025Updated 11 months ago