Highly recommended dorks for bug bounty
☆20Oct 17, 2021Updated 5 years ago
Alternatives and similar repositories for BugBounty-Dorks
Users that are interested in BugBounty-Dorks are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- API research and learning☆12May 22, 2019Updated 7 years ago
- Scripts to automate RECON process☆12Aug 31, 2025Updated last year
- The CTF questions about smart contracts☆11Sep 1, 2018Updated 8 years ago
- My notes of Day1 Day2 will be posted here as journey☆17Jan 6, 2021Updated 5 years ago
- Virtual host wordlist☆54Jan 12, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Some Tutorials and Things to Help Bug Hunter☆31Mar 17, 2021Updated 5 years ago
- Collection of Bug Bounty Tips☆65Dec 10, 2019Updated 6 years ago
- ☆11May 15, 2020Updated 6 years ago
- Tool to get the top android apps for bug bounty purpose☆17Sep 10, 2020Updated 6 years ago
- Script to generate markdown of API endpoints which then can be used to produce visual mindmap. Supports txt as well as Burp xml as input.☆13Mar 18, 2022Updated 4 years ago
- This is project of our sophomore project Data Base Management System made using Python and Sqlite.☆27May 11, 2020Updated 6 years ago
- ☆44Feb 26, 2019Updated 7 years ago
- Collection of useful command line commands☆14Dec 10, 2021Updated 4 years ago
- QUESTER is a Web Pentesting & Bug Bounty Recon tool which queries URLs / Subdomains from the given list of URLs or subdomains.☆15Aug 2, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- S3 Recon tips and tricks collected from different resources,Sorry if i missed to mention all resources owners☆27Nov 13, 2021Updated 4 years ago
- A list of useful payloads and Bypass for Web Application Security and Bug Bounty/CTF☆172Mar 29, 2020Updated 6 years ago
- An entry level resource to learning bug bounty.☆28Apr 11, 2018Updated 8 years ago
- GH-Takeover — GitHub Pages Sub-domain Takeover Automation!☆29Apr 17, 2021Updated 5 years ago
- A wordlist for brute forcing directories / files☆10Jul 7, 2015Updated 11 years ago
- Exploits for different vulnerabilities☆12Nov 29, 2021Updated 4 years ago
- 10 Reset Password Flaws Based on Web Application Security☆11Oct 19, 2020Updated 6 years ago
- golang tool to scan domains or single domains with know security issues against xmlrpc☆64Nov 9, 2023Updated 2 years ago
- ☆12Jul 12, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆44Dec 1, 2021Updated 4 years ago
- Convert HTTP requests into API spec☆14Feb 14, 2026Updated 8 months ago
- Find The Admin Panel & SQL Injection Endpoints, Using Google Dorks !!!☆31Nov 15, 2024Updated last year
- Personal Notes.☆11Jun 2, 2018Updated 8 years ago
- Kali Linux Cheat Sheet for Penetration Testers☆14Jun 19, 2017Updated 9 years ago
- This repository is a collection of write-ups that I read every day.☆13Jan 4, 2026Updated 10 months ago
- Bash Script to Hunt all the targets/Subdomains from Chaos by Project Discovery Team☆35Sep 26, 2020Updated 6 years ago
- This burpsuite extender provides a solution on testing Enterprise applications that involve security Authorization tokens into every HTTP…☆50Feb 27, 2019Updated 7 years ago
- ☆18Oct 4, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Netrik — Nmap-driven internal-network service penetration testing (detection-only). See Beyond the Network.☆15Jul 17, 2026Updated 3 months ago
- Bug Bounty Recon wordlist Generator☆21Jul 17, 2020Updated 6 years ago
- A repository to host the subdomain wordlists from my blog https://medium.com/@nynan/what-i-learnt-from-reading-217-subdomain-takeover-bug…☆41Nov 5, 2022Updated 4 years ago
- An external reconnaissnce MCP server for offensive security engagements☆14Apr 11, 2025Updated last year
- Write-ups of All types Bugs☆24Apr 13, 2022Updated 4 years ago
- Automated tool to find backup files that may disclose a website's source code☆20Oct 13, 2022Updated 4 years ago
- MCP server + Ollama-driven autonomous penetration testing client. Connects LLMs to security tools (nmap, nikto, sqlmap, dalfox…) via Mode…☆14Aug 29, 2026Updated 2 months ago