Hey there! Welcome to my collection of bug bounty and security testing resources. Whether you're just starting out or already deep into your security journey, you'll find tools, notes, and scripts here that I've gathered and created along the way.
β21Apr 8, 2026Updated 3 months ago
Alternatives and similar repositories for bugbounty
Users that are interested in bugbounty are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PenTest and BugBounty π΅οΈβ15Jul 11, 2026Updated last week
- Vulnerability Research Groupβ17Jul 2, 2026Updated 3 weeks ago
- Autonomous Bug Bounty Hunting Framework powered by Claude Code. 20 AI agents, state-machine orchestration, Burp Suite MCP, credential vauβ¦β56May 19, 2026Updated 2 months ago
- If you're using Burp Suite Community Edition and want to supercharge your workflow with some powerful AI assistance β without needing Burβ¦β55Apr 16, 2025Updated last year
- AIHTTPAnalyzer revolutionizes web application security testing by bringing artificial intelligence capabilities to Burp Suite. This innovβ¦β77Mar 2, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI β’ AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- CTF and Bug Bounty Hunting WriteUps.β21May 23, 2026Updated 2 months ago
- A compilation of resources for studying for the eCPPTv2β19Sep 28, 2022Updated 3 years ago
- Stealth hybrid URL mapperβ23May 1, 2026Updated 2 months ago
- XSS Payload Cheat Sheetβ11Sep 1, 2024Updated last year
- A Fuzzing skill based on purely what i know.β39Jun 3, 2026Updated last month
- Pimp my Kali but for lazy AFKersβ12Jun 18, 2023Updated 3 years ago
- β29Apr 24, 2025Updated last year
- A powerful command-line tool for Google dorking, enabling users to uncover hidden information and vulnerabilities with advanced search quβ¦β37Mar 4, 2026Updated 4 months ago
- Response Filter Denial of Service (RFDoS) Experimental Scannerβ16Nov 10, 2024Updated last year
- Managed Kubernetes at scale on DigitalOcean β’ AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A comprehensive bug bounty methodology compiled from extensive research, covering web application reconnaissance, checklists, and methodsβ¦β154Nov 11, 2024Updated last year
- Fetch, download, and decompile Android/iOS/Exe assets from HackerOne bug bounty programsβ41Jun 24, 2026Updated last month
- This repository contains all helping SQL Server Script which will use in day to day life to troubleshoot and understand SQL Server Healthβ¦β10Nov 18, 2020Updated 5 years ago
- Convert your HackerOne reports into reusable AI skills.β104Mar 9, 2026Updated 4 months ago
- PoC for Exploiting CVE-2024-31848/49/50/51 - File Path Traversalβ18May 7, 2024Updated 2 years ago
- β12Jul 21, 2022Updated 4 years ago
- This repository supports the content for the book of the same name from Manningβ14Nov 17, 2025Updated 8 months ago
- Subdosec is a fast, accurate subdomain takeover scanner with no false positives. It also offers a database of sites vulnerable to subdomaβ¦β64May 28, 2026Updated last month
- AIHTTPAnalyzer revolutionizes web application security testing by bringing artificial intelligence capabilities to Burp Suite. This innovβ¦β27Mar 12, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways β’ AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Recently, the OpenSSH maintainers released security updates to fix a critical vulnerability that could lead to unauthenticated remote codβ¦β14Jul 2, 2024Updated 2 years ago
- The first browser MCP built for security testing. Give your AI agent a real Firefox browser and let it find vulnerabilities.β17Mar 14, 2026Updated 4 months ago
- Burpsuite Extension for Jsmonβ25Jul 1, 2026Updated 3 weeks ago
- Converts Youtube videos to PDFβ14Dec 8, 2022Updated 3 years ago
- The Clutch VS code extension allows any user to scan for secrets in his/hers open workspace automatically within the IDEβ17Sep 24, 2025Updated 10 months ago
- β16Jun 26, 2025Updated last year
- [CVE-2024-4956] Nexus Repository Manager 3 Unauthenticated Path Traversal Bulk Scannerβ17Sep 26, 2024Updated last year
- A universal MCP client with proxying feature to interact with MCP Servers which support STDIO transport.β22Apr 17, 2026Updated 3 months ago
- Torrentpier v2.4.1. CVE-2024-1651. Remote Code Execution (RCE). Exploit.β15Mar 7, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient β’ AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A simple π and efficient πͺ DataBase π designed to store and use large amounts of data.β11Jul 31, 2021Updated 4 years ago
- Simple Chatbot for testing AI Red Team toolingβ17Feb 11, 2025Updated last year
- Exploring fundamentals of the Web including HTML, CSS and JavaScriptβ13Jul 31, 2021Updated 4 years ago
- A collection of tutorials, CTFs, wargames, articles, and other resources for Smart Contract security.β14Jun 4, 2022Updated 4 years ago
- Android security tool that scans installed apps bytecode to discover content providers, file providers, and intent interfaces, then generβ¦β18Mar 12, 2026Updated 4 months ago
- Simple implementation of Redux in Kotlin.β16Jun 3, 2026Updated last month
- Blast credentials across all 10 NetExec protocols in parallel β live hits, auto-skip timeouts, clean summaries. Built for fast iterative β¦β17Mar 10, 2026Updated 4 months ago