A comprehensive bug bounty methodology compiled from extensive research, covering web application reconnaissance, checklists, and methods for identifying various bugs. This guide aims to help bug hunters improve their skills in finding, verifying, and responsibly reporting security vulnerabilities.
☆176Nov 11, 2024Updated last year
Alternatives and similar repositories for BugHunterMethodology
Users that are interested in BugHunterMethodology are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆250Oct 15, 2026Updated 3 weeks ago
- Bug Bounty Methodology 2025: Tools, techniques, and steps to guide you through reconnaissance, enumeration, and testing.☆498May 21, 2025Updated last year
- certinfo is a powerful SSL certificate scraping tool that extracts domain names from SSL certificates of arbitrary hosts. It supports bot…☆11Nov 23, 2025Updated 11 months ago
- My Private Bug Hunting Methodology☆456Sep 22, 2026Updated last month
- ☆13Aug 15, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ex-param is an automated tool designed for finding reflected parameters for XSS vulnerabilities. It crawls a target website, extracts GET…☆62Feb 22, 2025Updated last year
- A high-performance technology detection tool built with Go, leveraging the projectdiscovery wappalyzergo library to identify web technolo…☆15Oct 5, 2026Updated last month
- The repo contains all the the notes, slides, and study material for my workshop at DEFCON 32 at the Bug Bounty Village☆229Aug 13, 2024Updated 2 years ago
- ☆547Aug 21, 2025Updated last year
- A simple browser extension to quickly find interesting security-related information on a webpage.☆189Updated this week
- Hunt down social media accounts by username across social networks using httpx☆18Nov 6, 2025Updated last year
- List of Directory Traversal/LFI Payloads Scraped from the Internet☆183Feb 10, 2025Updated last year
- this repo contains some public methodologies which I found from internet (google,telegram,discord,writeups etc..)☆44May 30, 2024Updated 2 years ago
- A structured, folderized offensive security framework covering passive/active reconnaissance, web content discovery, cloud recon, vulnera…☆44Jul 6, 2026Updated 4 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆67Sep 8, 2025Updated last year
- Bug Bounty ~ Awesomes | Books | Cheatsheets | Checklists | Tools | Wordlists | More☆667Oct 27, 2025Updated last year
- A passive way to find backups/ sensitive information.☆96Jul 10, 2025Updated last year
- An automated bug hunting tool for comprehensive reconnaissance, including subdomain enumeration, port scanning, vulnerability detection, …☆17Jun 24, 2025Updated last year
- ☆13Oct 24, 2024Updated 2 years ago
- Bug Bounty Methodology☆341Oct 5, 2026Updated last month
- A Python script designed to monitor bug bounty programs for any changes and promptly notify users.☆197Apr 25, 2024Updated 2 years ago
- Url scrapper or extractor from alienvault☆39Mar 1, 2025Updated last year
- Fback is a tool that helps you create target-specific wordlists using a .json pattern.☆63Nov 21, 2025Updated 11 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- ☆205Jan 22, 2026Updated 9 months ago
- ☆11Mar 1, 2025Updated last year
- A Python (Jython) extension for Burp Suite that allows sending multiple HTTP requests to the Repeater in bulk☆11Sep 24, 2024Updated 2 years ago
- LazyHunter is an automated reconnaissance tool designed for bug hunters, leveraging Shodan's InternetDB and CVEDB APIs☆239Apr 5, 2025Updated last year
- Get acquisitions by scraping titles of crunchbase.☆15Dec 18, 2024Updated last year
- GarudRecon automates domain recon with top open-source tools to discover assets, enumerate subdomains, and detect XSS, SQLi, LFI, RCE & m…☆276Mar 28, 2026Updated 7 months ago
- List of Google Dorks for sites that have responsible disclosure program / bug bounty program☆2,159Dec 8, 2025Updated 11 months ago
- Chrome and Firefox extension that lists Amazon S3 Buckets while browsing☆133Mar 30, 2026Updated 7 months ago
- ☆18Sep 2, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- best tool for finding SQLi,CRLF,XSS,LFi,OpenRedirect☆1,619Dec 7, 2025Updated 11 months ago
- Hey there! Welcome to my collection of bug bounty and security testing resources. Whether you're just starting out or already deep into y…☆22Apr 8, 2026Updated 7 months ago
- how to look for Leaked Credentials !☆1,175May 6, 2024Updated 2 years ago
- ParamScan is a chrome extension for finding reflected parameters in a webpage.☆93Jan 11, 2025Updated last year
- Bug Bounty Methodology-slides by Muhammad M. Awali. Pentesting and Researcher Talks.☆32Feb 17, 2023Updated 3 years ago
- ☆94Sep 20, 2024Updated 2 years ago
- All About XSS☆16Oct 23, 2022Updated 4 years ago