Alternatives and similar repositories for bounty-targets

Users that are interested in bounty-targets are comparing it to the libraries listed below

• ghsec / webHunt
  Web App bug hunting
  ☆577Updated last month
• lc / subjs
  Fetches javascript file from a list of URLS or subdomains.
  ☆822Updated 5 months ago
• cujanovic / Open-Redirect-Payloads
  Open Redirect Payloads
  ☆644Updated last year
• anshumanbh / tko-subs
  A tool that can help detect and takeover subdomains with dead DNS records
  ☆772Updated 4 years ago
• gwen001 / github-subdomains
  Find subdomains on GitHub.
  ☆804Updated 2 years ago
• tomnomnom / unfurl
  Pull out bits of URLs provided on stdin
  ☆1,270Updated 2 years ago
• AlephNullSK / dnsgen
  DNSGen is a powerful and flexible DNS name permutation tool designed for security researchers and penetration testers. It generates intel…
  ☆1,032Updated 11 months ago
• devanshbatham / OpenRedireX
  A fuzzer for detecting open redirect vulnerabilities
  ☆780Updated last year
• robre / jsmon
  a javascript change monitoring tool for bugbounties
  ☆703Updated last year
• honoki / bbrf-client
  The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices
  ☆640Updated 5 months ago
• random-robbie / keywords
  ☆369Updated 3 years ago
• 1ndianl33t / Gf-Patterns
  GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep
  ☆1,386Updated last year
• ayoubfathi / leaky-paths
  A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..e…
  ☆1,008Updated last year
• KathanP19 / JSFScan.sh
  Automation for javascript recon in bug bounty.
  ☆1,057Updated 2 years ago
• KathanP19 / Gxss
  A tool to check a bunch of URLs that contain reflecting params.
  ☆599Updated last year
• projectdiscovery / public-bugbounty-programs
  Community curated list of public bug bounty and responsible disclosure programs.
  ☆1,263Updated last month
• ksharinarayanan / SSRFire
  An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects
  ☆966Updated 4 years ago
• harsh-bothra / Bheem
  ☆375Updated 4 years ago
• jobertabma / relative-url-extractor
  A small tool that extracts relative URLs from a file.
  ☆762Updated 5 years ago
• robre / scripthunter
  Tool to find JavaScript files on Websites
  ☆524Updated 2 years ago
• zricethezav / h1domains
  HackerOne "in scope" domains
  ☆493Updated this week
• 003random / getJS
  A tool to fastly get all javascript sources/files
  ☆849Updated 5 months ago
• assetnote / commonspeak2-wordlists
  Wordlists that have been compiled using Commonspeak2. This repo is updated every time new wordlists are generated.
  ☆539Updated 7 years ago
• s0md3v / Parth
  Heuristic Vulnerable Parameter Scanner
  ☆601Updated last year
• Ice3man543 / SubOver
  A Powerful Subdomain Takeover Tool
  ☆960Updated 2 years ago
• pentester-io / commonspeak
  Content discovery wordlists generated using BigQuery
  ☆577Updated 5 years ago
• chrislockard / api_wordlist
  A wordlist of API names for web application assessments
  ☆859Updated 6 months ago
• r0075h3ll / Oralyzer
  Open Redirection Analyzer
  ☆804Updated 2 years ago
• tomnomnom / qsreplace
  Accept URLs on stdin, replace all query string values with a user-supplied value
  ☆854Updated 3 years ago
• capt-meelo / LazyRecon
  An automated approach to performing recon for bug bounty hunting and penetration testing.
  ☆451Updated 5 years ago