Structured practice: Mainly PortSwigger lab writeups
☆23Nov 3, 2026Updated last week
Alternatives and similar repositories for Bug-bounty-writeups
Users that are interested in Bug-bounty-writeups are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- NextForge — unified Next.js exploitation framework. RCE · SSRF · middleware · authorized lab only.☆18Sep 23, 2026Updated last month
- A curated collection of my security research and bug bounty writeups, documenting real-world vulnerabilities, exploitation methods☆27Oct 16, 2026Updated 3 weeks ago
- ☆16Apr 12, 2026Updated 6 months ago
- ☆77May 5, 2025Updated last year
- ⚔️ Community maintained directory, MCP and API of 3,000+ active bug bounty programs and VDPs☆474Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆14Sep 22, 2026Updated last month
- PoC for CVE-2026-66066 in Ruby on Rails☆23Jul 30, 2026Updated 3 months ago
- Real bug bounty track record — live VDP/H1 findings, disclosed report analysis, and lessons from rejections. Focus: IDOR, Authentication,…☆15Updated this week
- Google Gemini API key discovery and security scanning tool.☆44Nov 2, 2026Updated last week
- The official Rifteo agent skills library - a collection of reusable instruction sets for AI agents covering security testing, audit, and …☆38Sep 16, 2026Updated last month
- exploit for Log4j2 (issue 4255)☆18Aug 27, 2026Updated 2 months ago
- ☆11Apr 23, 2026Updated 6 months ago
- sourcemap hunter helps you hunt sourcemaps to make your life easier reading client side javascript☆16Jul 17, 2026Updated 3 months ago
- ☆27Jun 21, 2026Updated 4 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Burp Suite Certified Practitioner Exam Study☆19Feb 8, 2023Updated 3 years ago
- Burp Suite extension for API security testing with 15 attack types, 108+ payloads, intelligent fuzzing, BOLA/IDOR detection, AI integrati…☆377Aug 15, 2026Updated 2 months ago
- Agent skill for rigorous bug bounty report triage, validation, severity escalation, and submission-ready reporting.☆150Oct 9, 2026Updated last month
- Smart contract security researcher — profile README☆19Oct 31, 2026Updated last week
- Cockpit: Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection☆15Apr 18, 2026Updated 6 months ago
- An offensive-security methodology that an AI coding agent can actually execute — 88 class docs, 6 agents, 24 scripts, evidence-first vali…☆26Nov 2, 2026Updated last week
- Replay any request as another user to find IDOR/BOLA/BFLA, right in the browser.☆30Jun 16, 2026Updated 4 months ago
- The AI Autonomous SOC & Purple-Team Engine☆31Aug 11, 2026Updated 2 months ago
- A web security workbench built for AI agents.☆390Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- CVE lookup + Wappalyzer☆39Oct 24, 2026Updated 2 weeks ago
- ☆76Jul 15, 2026Updated 3 months ago
- Chrome MV3 parameter/endpoint/secret harvester for authorized web security testing (GAP-style + Next.js RSC path maps)☆12Sep 9, 2026Updated 2 months ago
- FREE 350+ Tryhackme Rooms☆12Apr 14, 2025Updated last year
- Red Team Operations Framework☆34Jul 14, 2024Updated 2 years ago
- Телеграм-бот: мониторинг новых объявлений на olx.ua с фильтрами, стоп-словами и историей цен☆26Jul 26, 2026Updated 3 months ago
- BSQLi de coffinxp réécrie en GO, son repos a été reporté en masse, il a donc été fermé.☆12Jul 26, 2024Updated 2 years ago
- Stealth hybrid URL mapper☆59Oct 21, 2026Updated 2 weeks ago
- Burp Suite extension to find hardcoded secrets & hidden endpoints in JavaScript. 150+ detection patterns, active JS fetch, low-noise fals…☆98Sep 10, 2026Updated last month
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- An advanced Out-of-Band and In-Band SSRF fuzzing scanner with dynamic request tracking.☆40Jun 18, 2026Updated 4 months ago
- Learning python programming and scripting.☆13Jul 30, 2025Updated last year
- A steganography tool that encodes files and text using zero-width Unicode characters, making data invisible to the naked eye. Supports AE…☆19May 25, 2026Updated 5 months ago
- AI-Agent for finding real vulnerabilities in major systems☆13Jan 24, 2026Updated 9 months ago
- SAML hacking pipeline for Claude Code☆13Aug 19, 2026Updated 2 months ago
- A curated list of browser fuzzing researches, papers, tools, ...☆14Jan 30, 2023Updated 3 years ago
- A smart fuzzing and parameter injection tool designed to discover reflections and identify potential XSS attack vectors.☆40Oct 13, 2026Updated 3 weeks ago
Are these results useful?