Documenting my security research journey: This repository contains detailed vulnerability write-ups, proof-of-concept (PoC) exploits, and the custom automation tools I use for reconnaissance and system assessment.
☆104Aug 23, 2026Updated this week
Alternatives and similar repositories for bug-bounty
Users that are interested in bug-bounty are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An obsessive, expert-tier knowledge base + AI skill system for professional bug bounty hunting, security research, and penetration testin…☆31Apr 25, 2026Updated 3 months ago
- A simple HAR-based JavaScript recon automation kit for organizing JS files, endpoints, secrets, and gf-filtered attack surface during bug…☆18May 20, 2026Updated 3 months ago
- GromHacks Labs -- The payload lists they don't want you to have. 1,324 injection probes beamed down from the mothership to detect what's …☆36Apr 12, 2026Updated 4 months ago
- Auth Mutator is a Burp Suite extension that helps you experiment with mutated authentication requests while keeping the original traffic …☆16Aug 1, 2026Updated 3 weeks ago
- Welcome to the Bug Bounty Methodology 2026 Edition!☆79Mar 28, 2026Updated 4 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Tutorial Dasar Codeigniter☆13Oct 3, 2019Updated 6 years ago
- Explore a collection of resources and projects in Computer Science, covering algorithms, data structures, programming languages, and emer…☆79Aug 13, 2026Updated last week
- Full-stack server fingerprinting tool for bug bounty hunters — auto-detects server, CDN, WAF, SSL, ports & more☆20Mar 8, 2026Updated 5 months ago
- MCP (Model Context Protocol) Server for pycti☆16Jul 11, 2025Updated last year
- Stealth hybrid URL mapper☆31May 1, 2026Updated 3 months ago
- HaXder is an advanced, asynchronous reconnaissance framework for security researchers. Discover subdomains, map attack surfaces, fingerpr…☆49Jul 1, 2026Updated last month
- ☆79May 5, 2025Updated last year
- PenTest and BugBounty 🕵️☆16Updated this week
- ☆16Oct 14, 2022Updated 3 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- CVE-2026-63030, CVE-2026-60137, wp2shell scanner☆54Jul 18, 2026Updated last month
- A curated collection of my security research and bug bounty writeups, documenting real-world vulnerabilities, exploitation methods☆26Jul 15, 2026Updated last month
- ex-redirect — An automated open redirect scanner using Wayback Machine archives. Supports subdomain grouping, live URL filtering, and Wor…☆15May 9, 2025Updated last year
- ☆96May 11, 2026Updated 3 months ago
- Fast Go-based XSS assessment toolkit☆20Mar 18, 2026Updated 5 months ago
- Some CTFs and challenges writeups from differents CTF Platforms☆17Oct 31, 2025Updated 9 months ago
- Interactive XSS Labs to get into Client-Side Hacking☆96Feb 25, 2026Updated 5 months ago
- ☆11Nov 26, 2016Updated 9 years ago
- A simple tool that generates QR codes for NGROK URLs to use on mobile phone.☆11Feb 23, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A collection of advanced Python scripts for cybersecurity, penetration testing, and ethical hacking.☆137Aug 13, 2026Updated last week
- powerfull pentesting tool to checking email by smtp command☆10Feb 29, 2024Updated 2 years ago
- This tool is created for ethical use only☆20Apr 20, 2026Updated 4 months ago
- Pentest and manual code review templates -- web/API, cloud (AWS/GCP/Azure), mobile (iOS/Android), thick client, hardware/IoT, plus 11 lan…☆31Apr 12, 2026Updated 4 months ago
- 必应每日壁纸数据采集脚本、必应壁纸历史数据API和必应壁纸在线浏览。☆10Dec 31, 2020Updated 5 years ago
- At this repo you can find any tools, tricks or templates for general penetration testing assesment☆16Apr 27, 2024Updated 2 years ago
- IMEI-Based Phone Tracker — proof-of-concept for collecting and visualizing device location metadata from lawful/consenting sources; NOT …☆43Oct 30, 2025Updated 9 months ago
- A structured and beginner-friendly knowledge base for learning Certified Ethical Hacker (CEH v13) concepts. This repository contains cle…☆31Mar 11, 2026Updated 5 months ago
- PoC for CVE-2026-48907 - Joomla! JCE extension < 2.9.99.5 unauthenticated RCE☆15Jun 11, 2026Updated 2 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Gampung tools for find nuclei template from github☆12Sep 6, 2023Updated 2 years ago
- A diagnostic methodology for bypassing LLM defense layers — from input filters to persistent memory exploitation.☆40May 8, 2026Updated 3 months ago
- This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter☆35Feb 10, 2024Updated 2 years ago
- This is the report that goes with my mock full-scope red team engagement against Game of Active Directory.☆20Oct 26, 2025Updated 9 months ago
- 🗄 CLI archival tool for the Wayback Machine☆11Mar 5, 2023Updated 3 years ago
- github stats for my readme☆19Updated this week
- Certified ethical hacker V13 AI Study notes☆24Jan 27, 2026Updated 6 months ago