Hey there! Welcome to my collection of bug bounty and security testing resources. Whether you're just starting out or already deep into your security journey, you'll find tools, notes, and scripts here that I've gathered and created along the way.
☆21Apr 8, 2026Updated 6 months ago
Alternatives and similar repositories for bugbounty
Users that are interested in bugbounty are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Vulnerability Research Group☆19Jul 2, 2026Updated 3 months ago
- Autonomous Bug Bounty Hunting Framework powered by Claude Code. 20 AI agents, state-machine orchestration, Burp Suite MCP, credential vau…☆86May 19, 2026Updated 4 months ago
- ☆16Jun 27, 2024Updated 2 years ago
- XSS Payload Cheat Sheet☆11Sep 1, 2024Updated 2 years ago
- If you're using Burp Suite Community Edition and want to supercharge your workflow with some powerful AI assistance – without needing Bur…☆58Apr 16, 2025Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- AIHTTPAnalyzer revolutionizes web application security testing by bringing artificial intelligence capabilities to Burp Suite. This innov…☆77Mar 2, 2025Updated last year
- A Fuzzing skill based on purely what i know.☆43Jun 3, 2026Updated 4 months ago
- A web tool to aggregate the latest publicly listed Bug Bounty programs.☆23Jul 22, 2026Updated 2 months ago
- Response Filter Denial of Service (RFDoS) Experimental Scanner☆17Nov 10, 2024Updated last year
- PoC for Exploiting CVE-2024-31848/49/50/51 - File Path Traversal☆18May 7, 2024Updated 2 years ago
- Recently, the OpenSSH maintainers released security updates to fix a critical vulnerability that could lead to unauthenticated remote cod…☆14Jul 2, 2024Updated 2 years ago
- AIHTTPAnalyzer revolutionizes web application security testing by bringing artificial intelligence capabilities to Burp Suite. This innov…☆27Mar 12, 2025Updated last year
- Converts Youtube videos to PDF☆14Dec 8, 2022Updated 3 years ago
- Mini recon script to identify the links and sensitive information from a particular link☆23Mar 9, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- [CVE-2024-4956] Nexus Repository Manager 3 Unauthenticated Path Traversal Bulk Scanner☆17Sep 26, 2024Updated 2 years ago
- Torrentpier v2.4.1. CVE-2024-1651. Remote Code Execution (RCE). Exploit.☆14Mar 7, 2024Updated 2 years ago
- A collection of tutorials, CTFs, wargames, articles, and other resources for Smart Contract security.☆14Jun 4, 2022Updated 4 years ago
- Simple Chatbot for testing AI Red Team tooling☆16Feb 11, 2025Updated last year
- A simple lightdm web greeter for weebs.☆10Jun 14, 2023Updated 3 years ago
- Our plan is to improve cybersecurity posture through risk assessment, goal-setting, resource allocation, KPI monitoring, and ongoing revi…☆17Mar 3, 2024Updated 2 years ago
- Scripts I have made for blue team☆16Apr 1, 2018Updated 8 years ago
- Collection of templates from various resources☆48Jun 17, 2026Updated 3 months ago
- BugBounty Hub: Your one-stop destination for Bug Bounty excellence! Explore Nuclei Templates and BugBounty Worldlists for comprehensive …☆16Apr 3, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Challenges for NUS Greyhats CTF101 Web Security (2017)☆17Sep 9, 2017Updated 9 years ago
- Convert your HackerOne reports into reusable AI skills.☆112Mar 9, 2026Updated 7 months ago
- ☆20May 22, 2021Updated 5 years ago
- Keycloak admin API allows low privilege users to use administrative functions☆32Oct 12, 2024Updated 2 years ago
- Search-driven OSINT and reconnaissance toolkit for web and GitHub discovery.☆41Sep 17, 2026Updated 3 weeks ago
- Fetch, download, and decompile Android/iOS/Exe assets from HackerOne bug bounty programs☆43Jun 24, 2026Updated 3 months ago
- An improvement and a different approach to Mockingjay Self-Injection.☆35May 21, 2024Updated 2 years ago
- ☆15Mar 6, 2026Updated 7 months ago
- A curated list of available Bug Bounty & Disclosure Programs and Write-ups.☆82Dec 3, 2023Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Config files for my GitHub profile.☆16Oct 7, 2026Updated last week
- Repo containing walkthroughs to possibly pwn Admin Panels and Exposed Consoles☆17Sep 20, 2024Updated 2 years ago
- Subdosec is a fast, accurate subdomain takeover scanner with no false positives. It also offers a database of sites vulnerable to subdoma…☆62Aug 30, 2026Updated last month
- Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens…☆36Dec 8, 2023Updated 2 years ago
- Install PowerShell on Termux☆20Jan 22, 2023Updated 3 years ago
- Use this tools properly Only for education purpose☆12Jul 27, 2023Updated 3 years ago
- Shodan Favicon Hash Generator By Aziz Hakim @eternyle☆26May 25, 2024Updated 2 years ago