How To approach recon on real targets — from passive enumeration to origin IP discovery. Covers tools, automation, and the logic behind each phase.
☆385Jul 5, 2026Updated last month
Alternatives and similar repositories for Full-Bug-Bounty-Hunting-Methodology-2026
Users that are interested in Full-Bug-Bounty-Hunting-Methodology-2026 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full writ…☆1,188Jul 31, 2026Updated 3 weeks ago
- Bug Bounty Methodology☆334Aug 4, 2026Updated 2 weeks ago
- ☆79May 5, 2025Updated last year
- AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude…☆4,391Updated this week
- A complete bug bounty workspace for HackerOne researchers. Includes scope enforcement, automated recon/vuln pipeline (400+ tools), report…☆336Jul 20, 2026Updated last month
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- My Main App Hacking CheckList☆34Jun 20, 2026Updated 2 months ago
- AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes☆375Apr 30, 2026Updated 3 months ago
- Here's an updated Google Dorking list for 2025 Bug Bounty Hunting, incorporating new patterns and, the latest trends.☆19Apr 26, 2025Updated last year
- Agentic offensive-security in your terminal☆1,303Jun 14, 2026Updated 2 months ago
- ☆112Mar 30, 2026Updated 4 months ago
- A resources for who want to learn and get deep into client-side bugs☆557Dec 8, 2024Updated last year
- Many script that can be modified according to your needs for Information Gathering and Asset discovery in Bug Bounty Hunting (Pull reques…☆61Feb 26, 2024Updated 2 years ago
- Apkx-Hunter is an Android Static Analysis Framework in Debian Package written entirely in C with OWASP MASVS scanning with 15 categories …☆85Updated this week
- Solutions for all the WebSecurityAcademy with Videos☆131Aug 3, 2026Updated 2 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curat…☆3,745Updated this week
- ☆96May 11, 2026Updated 3 months ago
- Grafana scanner with all public CVEs that I collected in one script to make grafana testing easier☆242Jul 7, 2026Updated last month
- A OWASP Based Checklist With 80+ Test Cases☆204Oct 26, 2022Updated 3 years ago
- A shellcode loader generator with support for multiple injection techniques, built for red team engagements.☆100Jul 1, 2026Updated last month
- List of AI Hacking Agents☆643Aug 10, 2026Updated last week
- An intentionally vulnerable OWASP LLM Top 10 training platform for AI Security, Prompt Injection, RAG Security, Agent Security, and GenAI…☆298Aug 10, 2026Updated last week
- Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engage…☆2,148Aug 16, 2026Updated last week
- Bug bounty focused JavaScript security analysis for crawling web assets, source maps, and secret discovery☆62Aug 1, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Karpathy LLM based claude harness for PenetrationTesting / Bugbounty using obsidian☆278Updated this week
- All-round bug bounty skill for Claude Code parallelized agents for smart contract audits (EVM, Move, Solana, TRON), web/API security, an…☆390Updated this week
- BountyLens MCP server — connect Claude Code to your Hunter Tracker☆64Jun 22, 2026Updated 2 months ago
- Collection of documentation, tools, and tips related to vulnerability research.☆106Aug 12, 2026Updated last week
- ☆260Dec 10, 2025Updated 8 months ago
- A personal RAG system for offensive security knowledge☆176Aug 11, 2026Updated last week
- AutoAR is an automated security reconnaissance tool, ASM and Discord bot for bug bounty hunters and penetration testers. It automates gat…☆243Updated this week
- autonomous red teaming platform; multi-agent offensive-security meta-harness☆5,647Aug 12, 2026Updated last week
- Burp Suite extension for cross-identity & cross-tenant access-control testing — BAC, IDOR, BOLA, and privilege escalation.☆59Jul 12, 2026Updated last month
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- My ATO Via Password Reset Methodology☆54May 13, 2026Updated 3 months ago
- A blazingly fast, multi-threaded TUI malware analysis tool built in Rust. Features deep PE parsing, YARA scanning, and heuristic risk sco…☆204Aug 16, 2026Updated last week
- Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | …☆2,041Aug 16, 2026Updated last week
- My Private Bug Hunting Methodology☆447Nov 27, 2024Updated last year
- claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md f…☆2,950May 8, 2026Updated 3 months ago
- 0xJS is an AI-powered JavaScript Security Tool☆66Apr 16, 2026Updated 4 months ago
- A curated collection of my security research and bug bounty writeups, documenting real-world vulnerabilities, exploitation methods☆26Jul 15, 2026Updated last month