Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..
☆5,509Jul 1, 2026Updated last month
Alternatives and similar repositories for KingOfBugBountyTips
Users that are interested in KingOfBugBountyTips are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A collection of awesome one-liner scripts especially for bug bounty tips.☆3,181Jul 29, 2024Updated 2 years ago
- Collection of methodology and test case for various web vulnerabilities.☆7,181Jun 25, 2025Updated last year
- All about bug bounty (bypasses, payloads, and etc)☆6,827Sep 8, 2023Updated 2 years ago
- Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.☆6,314Aug 7, 2026Updated last week
- BBT - Bug Bounty Tools (examples💡)☆1,905Apr 5, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference☆6,084Aug 6, 2023Updated 3 years ago
- This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for …☆3,895Updated this week
- A list of interesting payloads, tips and tricks for bug bounty hunters.☆6,534Sep 14, 2023Updated 2 years ago
- 🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.☆5,224Updated this week
- reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and findin…☆7,981Updated this week
- The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, f…☆4,413Sep 30, 2024Updated last year
- GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep☆1,445Sep 13, 2024Updated last year
- A list of resources for those interested in getting started in bug bounties☆12,177Jul 23, 2024Updated 2 years ago
- Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.☆5,060Mar 20, 2026Updated 4 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing☆3,149Mar 7, 2026Updated 5 months ago
- A collection of hacks and one-off scripts☆2,513Mar 13, 2025Updated last year
- Rockyou for web fuzzing☆3,226Mar 11, 2026Updated 5 months ago
- HTTP parameter discovery suite.☆6,379Feb 20, 2025Updated last year
- Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application☆5,108Aug 5, 2026Updated last week
- Automation for javascript recon in bug bounty.☆1,105Sep 9, 2023Updated 2 years ago
- reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via E…☆8,778Jul 13, 2026Updated last month
- declutters url lists for crawling/pentesting☆1,584Feb 23, 2025Updated last year
- For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙☆1,846Jun 9, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.☆1,702Jun 20, 2022Updated 4 years ago
- Hidden parameters discovery suite☆2,090Sep 8, 2024Updated last year
- A repository that includes all the important wordlists used while bug hunting.☆1,430Mar 11, 2023Updated 3 years ago
- A collection of tools to perform searches on GitHub.☆1,506Feb 9, 2023Updated 3 years ago
- The Swiss Army knife for automated Web Application Testing☆2,366Jun 20, 2026Updated last month
- "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.☆5,783Feb 8, 2025Updated last year
- A python script that finds endpoints in JavaScript files☆4,436Apr 13, 2024Updated 2 years ago
- List of Google Dorks for sites that have responsible disclosure program / bug bounty program☆2,070Dec 8, 2025Updated 8 months ago
- Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature☆4,242Jul 31, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A Python program to scrape secrets from GitHub through usage of a large repository of dorks.☆2,572Aug 3, 2024Updated 2 years ago
- A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.☆2,020Sep 5, 2021Updated 4 years ago
- A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..e…☆1,193Apr 3, 2026Updated 4 months ago
- Top disclosed reports from HackerOne☆6,437Jul 18, 2026Updated 3 weeks ago
- SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files☆2,499May 26, 2024Updated 2 years ago
- A curated list of various bug bounty tools☆6,179Aug 1, 2026Updated 2 weeks ago
- Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one pl…☆1,046Jun 6, 2026Updated 2 months ago