Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.
☆817Aug 22, 2026Updated 2 months ago
Alternatives and similar repositories for Web_Hacking
Users that are interested in Web_Hacking are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter☆3,656Feb 10, 2024Updated 2 years ago
- Red teaming is an attack technique used in cyber security to test how an organisation would respond to a genuine cyber attack. It is done…☆31Apr 15, 2025Updated last year
- Welcome to the Bug Hunter's Wordlists repository! 🐛🔍 This repository serves as a comprehensive collection of essential wordlists utiliz…☆155May 17, 2024Updated 2 years ago
- My Private Bug Hunting Methodology☆455Sep 22, 2026Updated last month
- Top disclosed reports from HackerOne☆6,647Oct 12, 2026Updated 3 weeks ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for id…☆1,983Sep 11, 2025Updated last year
- SubOwner - A Simple tool check for subdomain takeovers.☆123Oct 18, 2024Updated 2 years ago
- All about bug bounty (bypasses, payloads, and etc)☆6,954Sep 8, 2023Updated 3 years ago
- jsluice++ is a Burp Suite extension designed for passive and active scanning of JavaScript traffic using the CLI tool jsluice☆304Apr 9, 2024Updated 2 years ago
- ex-param is an automated tool designed for finding reflected parameters for XSS vulnerabilities. It crawls a target website, extracts GET…☆61Feb 22, 2025Updated last year
- Tips and Tutorials for Bug Bounty and also Penetration Tests.☆2,205Oct 7, 2025Updated last year
- ☆607Aug 14, 2025Updated last year
- jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying se…☆544Sep 20, 2026Updated last month
- Automate Recon XSS Bug Bounty☆195Mar 9, 2026Updated 7 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference☆6,176Aug 6, 2023Updated 3 years ago
- A repository that includes all the important wordlists used while bug hunting.☆1,437Mar 11, 2023Updated 3 years ago
- Penetration-List: A comprehensive resource for testers, covering all types of vulnerabilities and materials used in Penetration Testing. …☆1,396Dec 28, 2025Updated 10 months ago
- best tool for finding SQLi,CRLF,XSS,LFi,OpenRedirect☆1,618Dec 7, 2025Updated 10 months ago
- 1337 Wordlists for Bug Bounty Hunting☆989Updated this week
- Nuclei Templates Collection☆1,226Dec 25, 2025Updated 10 months ago
- These are my checklists which I use during my hunting.☆940Sep 2, 2026Updated 2 months ago
- 403/401 bypass tool: finds HTTP access-control bypasses via path, method, header and raw-request mutations. Baseline diff, auto-calibrati…☆1,915Updated this week
- ☆959Dec 26, 2025Updated 10 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- A Chrome/Firefox browser extension to show alerts for reflected query params, show Wayback archive links for the current path, show hidde…☆451Apr 24, 2026Updated 6 months ago
- NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Re…☆1,862Apr 17, 2026Updated 6 months ago
- Collection of methodology and test case for various web vulnerabilities.☆7,379Oct 22, 2026Updated last week
- Find All Parameters - Tool to crawl pages, find potential parameters and generate a custom target parameter wordlist☆444Aug 25, 2024Updated 2 years ago
- SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty☆813Oct 7, 2026Updated 3 weeks ago
- An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws☆4,087Oct 4, 2025Updated last year
- Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!☆2,786Jun 11, 2026Updated 4 months ago
- i will upload more templates here to share with the comunity.☆574Apr 17, 2024Updated 2 years ago
- An IIS short filename enumeration tool☆1,234Nov 25, 2024Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆208Feb 5, 2025Updated last year
- Burp Plugin to Bypass WAFs through the insertion of Junk Data☆1,523Jul 14, 2025Updated last year
- how to look for Leaked Credentials !☆1,175May 6, 2024Updated 2 years ago
- Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens…☆5,579Oct 21, 2026Updated last week
- Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers☆312Mar 31, 2024Updated 2 years ago
- ParamScan is a chrome extension for finding reflected parameters in a webpage.☆93Jan 11, 2025Updated last year
- ☆547Aug 21, 2025Updated last year