Hey there! Welcome to my collection of bug bounty and security testing resources. Whether you're just starting out or already deep into your security journey, you'll find tools, notes, and scripts here that I've gathered and created along the way.
☆22Apr 8, 2026Updated 4 months ago
Alternatives and similar repositories for bugbounty
Users that are interested in bugbounty are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PenTest and BugBounty 🕵️☆16Jul 11, 2026Updated last month
- Vulnerability Research Group☆17Jul 2, 2026Updated last month
- Autonomous Bug Bounty Hunting Framework powered by Claude Code. 20 AI agents, state-machine orchestration, Burp Suite MCP, credential vau…☆60May 19, 2026Updated 2 months ago
- AIHTTPAnalyzer revolutionizes web application security testing by bringing artificial intelligence capabilities to Burp Suite. This innov…☆77Mar 2, 2025Updated last year
- CTF and Bug Bounty Hunting WriteUps.☆21Updated this week
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A compilation of resources for studying for the eCPPTv2☆19Sep 28, 2022Updated 3 years ago
- ☆15Jun 27, 2024Updated 2 years ago
- Stealth hybrid URL mapper☆26May 1, 2026Updated 3 months ago
- XSS Payload Cheat Sheet☆11Sep 1, 2024Updated last year
- A Fuzzing skill based on purely what i know.☆43Jun 3, 2026Updated 2 months ago
- A web tool to aggregate the latest publicly listed Bug Bounty programs.☆20Jul 22, 2026Updated 3 weeks ago
- Pimp my Kali but for lazy AFKers☆12Jun 18, 2023Updated 3 years ago
- ☆29Apr 24, 2025Updated last year
- A powerful command-line tool for Google dorking, enabling users to uncover hidden information and vulnerabilities with advanced search qu…☆41Mar 4, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆23Feb 3, 2026Updated 6 months ago
- Response Filter Denial of Service (RFDoS) Experimental Scanner☆16Nov 10, 2024Updated last year
- A comprehensive bug bounty methodology compiled from extensive research, covering web application reconnaissance, checklists, and methods…☆158Nov 11, 2024Updated last year
- Fetch, download, and decompile Android/iOS/Exe assets from HackerOne bug bounty programs☆41Jun 24, 2026Updated last month
- Poderosas herramienta de phishing☆11Mar 6, 2026Updated 5 months ago
- This script is designed to analyze network traffic captured in a .pcap file using the pyshark library. // Este script está diseñado para …☆10Feb 8, 2025Updated last year
- Convert your HackerOne reports into reusable AI skills.☆105Mar 9, 2026Updated 5 months ago
- PoC for Exploiting CVE-2024-31848/49/50/51 - File Path Traversal☆18May 7, 2024Updated 2 years ago
- ☆12Jul 21, 2022Updated 4 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Subdosec is a fast, accurate subdomain takeover scanner with no false positives. It also offers a database of sites vulnerable to subdoma…☆64May 28, 2026Updated 2 months ago
- Recently, the OpenSSH maintainers released security updates to fix a critical vulnerability that could lead to unauthenticated remote cod…☆14Jul 2, 2024Updated 2 years ago
- AIHTTPAnalyzer revolutionizes web application security testing by bringing artificial intelligence capabilities to Burp Suite. This innov…☆27Mar 12, 2025Updated last year
- Burpsuite Extension for Jsmon☆25Jul 1, 2026Updated last month
- Mini recon script to identify the links and sensitive information from a particular link☆23Mar 9, 2021Updated 5 years ago
- create a custom iso of debian☆12May 18, 2022Updated 4 years ago
- Revision tracking for various dotfiles☆17May 20, 2026Updated 2 months ago
- ☆16Jun 26, 2025Updated last year
- [CVE-2024-4956] Nexus Repository Manager 3 Unauthenticated Path Traversal Bulk Scanner☆17Sep 26, 2024Updated last year
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- A universal MCP client with proxying feature to interact with MCP Servers which support STDIO transport.☆23Apr 17, 2026Updated 3 months ago
- Torrentpier v2.4.1. CVE-2024-1651. Remote Code Execution (RCE). Exploit.☆15Mar 7, 2024Updated 2 years ago
- A simple 👍 and efficient 💪 DataBase 📚 designed to store and use large amounts of data.☆11Jul 31, 2021Updated 5 years ago
- Exploring fundamentals of the Web including HTML, CSS and JavaScript☆13Jul 31, 2021Updated 5 years ago
- A collection of tutorials, CTFs, wargames, articles, and other resources for Smart Contract security.☆14Jun 4, 2022Updated 4 years ago
- Simple Chatbot for testing AI Red Team tooling☆16Feb 11, 2025Updated last year
- Android security tool that scans installed apps bytecode to discover content providers, file providers, and intent interfaces, then gener…☆19Mar 12, 2026Updated 5 months ago