Hey there! Welcome to my collection of bug bounty and security testing resources. Whether you're just starting out or already deep into your security journey, you'll find tools, notes, and scripts here that I've gathered and created along the way.
☆22Apr 8, 2026Updated 6 months ago
Alternatives and similar repositories for bugbounty
Users that are interested in bugbounty are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A sensible no bullshit repo of summaries of reports on hackerone, bugcrowd and alike, that makes straight up sense and make it easy to re…☆10Oct 21, 2023Updated 3 years ago
- Telephasma is an OSINT-focused tool designed to automate the analysis of Telegram gift exchange behavior. It replaces manual profile-by-p…☆15Feb 15, 2026Updated 8 months ago
- PenTest and BugBounty 🕵️☆17Sep 15, 2026Updated last month
- The community knowledge base for RedTeamGarage - practical red teaming, offensive security, tools, labs, cheatsheets, research and learni…☆33Oct 24, 2026Updated last week
- A powerful and efficient Go-based tool for extracting archived URLs from the Wayback Machine with advanced filtering capabilities, rate l…☆13Nov 5, 2025Updated 11 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- CTF and Bug Bounty Hunting WriteUps.☆21Oct 27, 2026Updated last week
- ☆16Jun 27, 2024Updated 2 years ago
- AIHTTPAnalyzer revolutionizes web application security testing by bringing artificial intelligence capabilities to Burp Suite. This innov…☆76Mar 2, 2025Updated last year
- Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens…☆37Dec 8, 2023Updated 2 years ago
- ☆11Mar 1, 2025Updated last year
- A Fuzzing skill based on purely what i know.☆43Jun 3, 2026Updated 5 months ago
- crto-study-notes☆23May 23, 2026Updated 5 months ago
- PoC for Exploiting CVE-2024-31848/49/50/51 - File Path Traversal☆18May 7, 2024Updated 2 years ago
- If you're using Burp Suite Community Edition and want to supercharge your workflow with some powerful AI assistance – without needing Bur…☆57Apr 16, 2025Updated last year
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- AI desktop overlay and dashboard that captures gameplay sessions and generates "Previously On..." summaries using LLMs.☆114Sep 11, 2026Updated last month
- XSS Payload Cheat Sheet☆11Sep 1, 2024Updated 2 years ago
- Response Filter Denial of Service (RFDoS) Experimental Scanner☆18Nov 10, 2024Updated last year
- ☆24Feb 3, 2026Updated 9 months ago
- This repo has a collection of scripts and exploits for OSCP-style labs. It covers enumeration, exploitation, web testing, and reverse she…☆39Aug 20, 2026Updated 2 months ago
- AIHTTPAnalyzer revolutionizes web application security testing by bringing artificial intelligence capabilities to Burp Suite. This innov…☆27Mar 12, 2025Updated last year
- Converts Youtube videos to PDF☆14Dec 8, 2022Updated 3 years ago
- When it comes to exploiting web application security, this is a methodology. Enumeration and Networking guidelines are also listed to hel…☆25Nov 18, 2025Updated 11 months ago
- An exploit proof of concept for ConnectWise SecureConnect authentication bypass vulnerability.☆13Feb 20, 2024Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆10Jul 5, 2023Updated 3 years ago
- Bug Bounty Recon Automation Script -- Scan AWS IP Range Certs for Matching FQDN☆27Sep 17, 2021Updated 5 years ago
- Specify what you want it to build, the AI asks for clarification, and then builds it.☆22Jun 16, 2023Updated 3 years ago
- Caido Request Minimizer Plugin☆17Aug 25, 2026Updated 2 months ago
- Mini recon script to identify the links and sensitive information from a particular link☆23Mar 9, 2021Updated 5 years ago
- ☆11Jun 19, 2024Updated 2 years ago
- [CVE-2024-4956] Nexus Repository Manager 3 Unauthenticated Path Traversal Bulk Scanner☆17Sep 26, 2024Updated 2 years ago
- Simple Chatbot for testing AI Red Team tooling☆16Feb 11, 2025Updated last year
- Autonomous Bug Bounty Hunting Framework powered by Claude Code. 20 AI agents, state-machine orchestration, Burp Suite MCP, credential vau…☆94May 19, 2026Updated 5 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Run Claude Code CLI with DeepSeek API — cheap high-volume automation for security research & bug bounty☆27Jun 5, 2026Updated 4 months ago
- The Clutch VS code extension allows any user to scan for secrets in his/hers open workspace automatically within the IDE☆17Sep 24, 2025Updated last year
- BugBounty Hub: Your one-stop destination for Bug Bounty excellence! Explore Nuclei Templates and BugBounty Worldlists for comprehensive …☆16Apr 3, 2025Updated last year
- CTF-focused password spray wordlist generator. Perfected for OSCP/PNPT/CPTS. Generates realistic seasonal passwords without the bloat of…☆25Jun 9, 2026Updated 4 months ago
- A web tool to aggregate the latest publicly listed Bug Bounty programs.☆22Jul 22, 2026Updated 3 months ago
- Keycloak admin API allows low privilege users to use administrative functions☆32Oct 12, 2024Updated 2 years ago
- Challenges for NUS Greyhats CTF101 Web Security (2017)☆17Sep 9, 2017Updated 9 years ago