Hey there! Welcome to my collection of bug bounty and security testing resources. Whether you're just starting out or already deep into your security journey, you'll find tools, notes, and scripts here that I've gathered and created along the way.
☆11Dec 25, 2025Updated 2 months ago
Alternatives and similar repositories for bugbounty
Users that are interested in bugbounty are comparing it to the libraries listed below
Sorting:
- Recon for Pentesting and BugBounty 🕵️☆14Jan 14, 2026Updated last month
- ☆20Feb 3, 2026Updated last month
- Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens…☆36Dec 8, 2023Updated 2 years ago
- ☆24Jan 31, 2024Updated 2 years ago
- At this repo you can find any tools, tricks or templates for general penetration testing assesment☆15Apr 27, 2024Updated last year
- ☆15Mar 21, 2025Updated 11 months ago
- c4mund0n60 is a tool that use output of known tools for generate smart information about a domain☆11Sep 20, 2023Updated 2 years ago
- ☆10Feb 28, 2023Updated 3 years ago
- The Ultimate Recon Framework☆11Mar 29, 2024Updated last year
- Config files for my GitHub profile.☆11Updated this week
- Scripts I have made for blue team☆16Apr 1, 2018Updated 7 years ago
- Collection of my CTF Writeups, mostly Indonesian CTFs☆13Jan 15, 2024Updated 2 years ago
- Exploring hands-on Cybersecurity techniques with a comprehensive repository covering offensive and defensive tools for home-lab environme…☆20Mar 27, 2024Updated last year
- This script searches NVD's website for new CVES, alerting you by email or telegram. You can configure a list of products that interest yo…☆11Mar 21, 2021Updated 4 years ago
- ☆13Jun 26, 2025Updated 8 months ago
- A script to build a Docker image for a DNN Platform website☆10Feb 8, 2018Updated 8 years ago
- A script written in python3 to spread blind cross-site scripting payloads on HTTP requests headers☆10Oct 2, 2022Updated 3 years ago
- this repository is a base so everyone can modify it according to there thoughts and process used☆10Jun 9, 2021Updated 4 years ago
- Credax - Fuzzing Tool with Slack Notifications. Also removes false positive responses.☆10Oct 14, 2021Updated 4 years ago
- ☆16Sep 6, 2017Updated 8 years ago
- ☆12Feb 20, 2025Updated last year
- RootMe Challenges Writeups☆12Jun 1, 2019Updated 6 years ago
- ☆21Dec 4, 2014Updated 11 years ago
- a recon framework that facilitates discovering, scanning and monitoring assets trough a configurable engine running on serverless aws inf…☆12Aug 26, 2024Updated last year
- Welcome to the Very Vulnerable Lambda Application repository! This repository contains an intentionally vulnerable serverless applicatio…☆11Jul 22, 2024Updated last year
- ☆16Updated this week
- A vulnerable Cognito application is a simple web app that can be used to practice various Cognito attacks.☆12Jul 13, 2022Updated 3 years ago
- ☆11Jan 24, 2023Updated 3 years ago
- Collection of all the resources published by Payatu.☆11Aug 11, 2025Updated 6 months ago
- Filter URLs that match your scope file for bugbounty.☆11May 23, 2023Updated 2 years ago
- Collection of rules for Static Application Security Testing (SAST) with Semgrep☆12Apr 16, 2025Updated 10 months ago
- ☆15Apr 10, 2025Updated 10 months ago
- simple tool for finding javascript files from webapps☆10Apr 20, 2023Updated 2 years ago
- Collection of tools, scripts, one-liners, templates, dorks and more☆12Dec 13, 2025Updated 2 months ago
- Pimp my Kali but for lazy AFKers☆12Jun 18, 2023Updated 2 years ago
- A small pentesting lab for Azure☆10Apr 19, 2019Updated 6 years ago
- my n00b notes on web_study☆16May 29, 2025Updated 9 months ago
- Exploring fundamentals of the Web including HTML, CSS and JavaScript☆14Jul 31, 2021Updated 4 years ago
- Bug Bounty tool to automate the recon process.☆12Oct 4, 2023Updated 2 years ago