A complete, beginner-friendly bug bounty roadmap that takes you from zero experience to earning your first bounty.
☆1,469Sep 5, 2025Updated 11 months ago
Alternatives and similar repositories for First-Bounty
Users that are interested in First-Bounty are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A curated list of MCP servers for bug bounty.☆65Oct 6, 2025Updated 10 months ago
- ☆1,173Jan 28, 2026Updated 7 months ago
- Repositories, Links, Payloads, Blogs, Tools, etc.. which I think might be useful for pentesting and bug bounty☆51Jan 6, 2026Updated 7 months ago
- Top disclosed reports from HackerOne☆6,498Aug 17, 2026Updated 2 weeks ago
- Bug Bounty Methodology 2025: Tools, techniques, and steps to guide you through reconnaissance, enumeration, and testing.☆478May 21, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A resources for who want to learn and get deep into client-side bugs☆557Dec 8, 2024Updated last year
- Bug Bounty Methodology☆335Aug 4, 2026Updated 3 weeks ago
- AI-powered bug bounty hunting toolkit that works with or without subscription.☆4,621Updated this week
- ☆1,623Mar 7, 2026Updated 5 months ago
- Bug Bounty Hunting Framework Designed to Help Beginners Compete w/ the Pros☆709Aug 20, 2026Updated last week
- ☆81Nov 4, 2025Updated 9 months ago
- ☆263Dec 10, 2025Updated 8 months ago
- ☆378Updated this week
- ☆162Jan 22, 2026Updated 7 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆79May 5, 2025Updated last year
- 0xJS is an AI-powered JavaScript Security Tool☆67Apr 16, 2026Updated 4 months ago
- How To approach recon on real targets — from passive enumeration to origin IP discovery. Covers tools, automation, and the logic behind e…☆391Jul 5, 2026Updated last month
- Convert your HackerOne reports into reusable AI skills.☆107Mar 9, 2026Updated 5 months ago
- Chrome DevTools HTTP workbench with built-in AI.☆19Dec 9, 2025Updated 8 months ago
- Collection of scripts and tools used during bug bounty work. This will be the location of my automation scripts created for my own person…☆152Dec 18, 2025Updated 8 months ago
- The repo contains all the the notes, slides, and study material for my workshop at DEFCON 32 at the Bug Bounty Village☆222Aug 13, 2024Updated 2 years ago
- Collection of documentation, tools, and tips related to vulnerability research.☆108Aug 12, 2026Updated 2 weeks ago
- This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter☆3,636Feb 10, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- GarudRecon automates domain recon with top open-source tools to discover assets, enumerate subdomains, and detect XSS, SQLi, LFI, RCE & m…☆266Mar 28, 2026Updated 5 months ago
- A cyber security toolkit blending manual testing with AI Agents☆138Aug 16, 2026Updated 2 weeks ago
- ☆53Oct 1, 2025Updated 10 months ago
- A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting☆1,895Sep 29, 2025Updated 11 months ago
- AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes☆377Apr 30, 2026Updated 4 months ago
- Bug Bounty ~ Awesomes | Books | Cheatsheets | Checklists | Tools | Wordlists | More☆660Oct 27, 2025Updated 10 months ago
- ☆539Aug 21, 2025Updated last year
- A comprehensive bug bounty methodology compiled from extensive research, covering web application reconnaissance, checklists, and methods…☆160Nov 11, 2024Updated last year
- Documenting all the sources from where I'm learning Mobile(adnroid/IOS) bug bounty so if another researcher want to start with mobile bug…☆68May 23, 2026Updated 3 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆196Mar 16, 2026Updated 5 months ago
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆22Mar 16, 2026Updated 5 months ago
- rep+ — Burp-style HTTP Repeater for Chrome DevTools with built‑in AI to explain requests and suggest attacks☆1,601Jan 16, 2026Updated 7 months ago
- A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curat…☆3,853Updated this week
- ☆253Mar 13, 2025Updated last year
- best tool for finding SQLi,CRLF,XSS,LFi,OpenRedirect☆1,613Dec 7, 2025Updated 8 months ago
- Simple XSS vulnerability checker tool very useful with xsschecker.☆28Nov 21, 2025Updated 9 months ago