A comprehensive bug bounty methodology compiled from extensive research, covering web application reconnaissance, checklists, and methods for identifying various bugs. This guide aims to help bug hunters improve their skills in finding, verifying, and responsibly reporting security vulnerabilities.
☆161Nov 11, 2024Updated last year
Alternatives and similar repositories for BugHunterMethodology
Users that are interested in BugHunterMethodology are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Bug Bounty Methodology 2025: Tools, techniques, and steps to guide you through reconnaissance, enumeration, and testing.☆477May 21, 2025Updated last year
- My Private Bug Hunting Methodology☆447Nov 27, 2024Updated last year
- ☆246Jan 20, 2026Updated 6 months ago
- this repo contains some public methodologies which I found from internet (google,telegram,discord,writeups etc..)☆38May 30, 2024Updated 2 years ago
- A simple browser extension to quickly find interesting security-related information on a webpage.☆184Jul 31, 2026Updated 2 weeks ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆535Aug 21, 2025Updated 11 months ago
- ☆161Jan 22, 2026Updated 6 months ago
- ex-param is an automated tool designed for finding reflected parameters for XSS vulnerabilities. It crawls a target website, extracts GET…☆60Feb 22, 2025Updated last year
- The repo contains all the the notes, slides, and study material for my workshop at DEFCON 32 at the Bug Bounty Village☆222Aug 13, 2024Updated 2 years ago
- ☆65Sep 8, 2025Updated 11 months ago
- List of Directory Traversal/LFI Payloads Scraped from the Internet☆184Feb 10, 2025Updated last year
- Hunt down social media accounts by username across social networks using httpx☆17Nov 6, 2025Updated 9 months ago
- Hey there! Welcome to my collection of bug bounty and security testing resources. Whether you're just starting out or already deep into y…☆22Apr 8, 2026Updated 4 months ago
- An automated bug hunting tool for comprehensive reconnaissance, including subdomain enumeration, port scanning, vulnerability detection, …☆16Jun 24, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Bug Bounty ~ Awesomes | Books | Cheatsheets | Checklists | Tools | Wordlists | More☆657Oct 27, 2025Updated 9 months ago
- Bug Bounty Methodology☆328Aug 4, 2026Updated 2 weeks ago
- ☆13Oct 24, 2024Updated last year
- GarudRecon automates domain recon with top open-source tools to discover assets, enumerate subdomains, and detect XSS, SQLi, LFI, RCE & m…☆266Mar 28, 2026Updated 4 months ago
- Get acquisitions by scraping titles of crunchbase.☆16Dec 18, 2024Updated last year
- A Python script designed to monitor bug bounty programs for any changes and promptly notify users.☆197Apr 25, 2024Updated 2 years ago
- ☆125Dec 26, 2023Updated 2 years ago
- ☆30Sep 9, 2025Updated 11 months ago
- ParamScan is a chrome extension for finding reflected parameters in a webpage.☆93Jan 11, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Auth Mutator is a Burp Suite extension that helps you experiment with mutated authentication requests while keeping the original traffic …☆16Aug 1, 2026Updated 2 weeks ago
- ☆19Mar 23, 2023Updated 3 years ago
- ☆17Sep 2, 2024Updated last year
- Community curated list of search queries for various products across multiple search engines.☆404Updated this week
- HackTheBox Certified Penetration Tester Specialist Cheatsheet☆798Jul 10, 2024Updated 2 years ago
- Custom Trickest Workflows☆12Oct 26, 2023Updated 2 years ago
- Free BugBounty KrazePlanetTraining☆60Dec 17, 2025Updated 8 months ago
- ☆53Oct 1, 2025Updated 10 months ago
- This repository contains all the GF-Patterns Repositories. All we have to do is just to run the given Shell File and it's Done !!☆21Jun 28, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Chrome and Firefox extension that lists Amazon S3 Buckets while browsing☆133Mar 30, 2026Updated 4 months ago
- ☆226Jun 11, 2024Updated 2 years ago
- ☆14Nov 8, 2024Updated last year
- A passive way to find backups/ sensitive information.☆94Jul 10, 2025Updated last year
- My Priv8 Nuclei Templates☆346May 12, 2024Updated 2 years ago
- vulntechfinder is a powerful security tool that automates vulnerability scanning based on technology stack detection. It intelligently pr…☆16Apr 12, 2026Updated 4 months ago
- IP Finder tool, ipfinder collects IP addresses from Shodan search queries.☆17Dec 12, 2025Updated 8 months ago