A structured, auto-updating archive of disclosed HackerOne reports. Filter by severity, CWE weakness, bounty program, or year - ideal for security researchers and bug bounty hunters.
☆70Oct 30, 2026Updated this week
Alternatives and similar repositories for HackerOne-Disclosed-Reports
Users that are interested in HackerOne-Disclosed-Reports are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A high-performance technology detection tool built with Go, leveraging the projectdiscovery wappalyzergo library to identify web technolo…☆15Oct 5, 2026Updated 3 weeks ago
- ☆15Feb 6, 2025Updated last year
- ☆47Jun 7, 2026Updated 4 months ago
- NextForge — unified Next.js exploitation framework. RCE · SSRF · middleware · authorized lab only.☆17Sep 23, 2026Updated last month
- A collection of custom built scan templates for automated vuln scanning (nuclei, Burp, etc.)☆51Mar 23, 2023Updated 3 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- A high-performance domain scanner that discovers active domains by testing multiple Top-Level Domains (TLDs) for given domain names.☆35Sep 30, 2026Updated last month
- A proof-of-concept PDF file designed for authorized security testing of PDF upload functionality and PDF viewer behavior, including XSS a…☆79Aug 28, 2026Updated 2 months ago
- Tool to hack Graphql☆16Oct 17, 2023Updated 3 years ago
- List of custom Nuclei templates☆16Nov 4, 2023Updated 2 years ago
- Java library used to upload files following the security steps described by OWASP☆10Jun 7, 2021Updated 5 years ago
- Lightweight reflection scanner☆20Aug 31, 2025Updated last year
- ☆10Sep 19, 2021Updated 5 years ago
- cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security☆36Jul 24, 2026Updated 3 months ago
- HackerOne Hacktivity -> Discord Webhook with Embeds☆15Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Cockpit: Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection☆15Apr 18, 2026Updated 6 months ago
- gh0str3con is a All in one cloud based web Recon tool.☆29Jul 11, 2026Updated 3 months ago
- Curated list of advanced Shodan queries for discovering exposed assets, dashboards, and services.☆12Jul 14, 2025Updated last year
- Extract SSL certificate data (Subject Name, Subject Alt Names, Organisation)☆42Nov 10, 2025Updated 11 months ago
- Ubuntu with gnuradio and hackrf support☆12Mar 29, 2018Updated 8 years ago
- 🦄 Connecting first-time founders to mentors in the tech industry.☆12Feb 10, 2022Updated 4 years ago
- Public Disclosed Bug Bounty Reports formated in markdown☆121Jul 14, 2026Updated 3 months ago
- Apuntes Pentesting a ActiveDirectory PentesterAcademy☆24Jun 9, 2019Updated 7 years ago
- This project presents a powerful Web Application Firewall (WAF) designed to protects web applications from malicious activities. By lever…☆11Apr 10, 2025Updated last year
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Passively check for XSS character encodings☆20Mar 9, 2026Updated 7 months ago
- find sources and sinks from js files☆17Apr 4, 2026Updated 6 months ago
- Real-time YouTube comment sentiment analysis using Kafka, Spark, and Streamlit dashboard.☆11Oct 2, 2024Updated 2 years ago
- A lightweight Python HTTP server with fuzzy filename matching and automatic fallback to directory listing.☆13Aug 28, 2025Updated last year
- A bash script that extracts `shodan-query, google-query, censys-query, fofa-query, hunter-query, zoomeye-query` in nucleihub-templates.☆15Feb 17, 2026Updated 8 months ago
- wifi bruteforce Script with wordlist and without wordlist☆12Aug 29, 2018Updated 8 years ago
- ☆16Jul 6, 2025Updated last year
- shiro attack☆10Apr 28, 2022Updated 4 years ago
- My solutions and writeups for the CTF challenges hosted @ backdoor.sdslabs.co☆10Oct 23, 2017Updated 9 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Documenting all the sources from where I'm learning Mobile(adnroid/IOS) bug bounty so if another researcher want to start with mobile bug…☆73Sep 17, 2026Updated last month
- ☆39Oct 20, 2023Updated 3 years ago
- Interactive web platform designed to provide a safe and legal environment for learning about web application vulnerabilities.☆11Sep 26, 2026Updated last month
- A curated collection of my security research and bug bounty writeups, documenting real-world vulnerabilities, exploitation methods☆27Oct 16, 2026Updated 2 weeks ago
- ☆52Oct 1, 2025Updated last year
- A list of Private Nuclei Templates☆14May 22, 2023Updated 3 years ago
- Autonomous Bug Bounty Hunting Framework powered by Claude Code. 20 AI agents, state-machine orchestration, Burp Suite MCP, credential vau…☆91May 19, 2026Updated 5 months ago