๐ A list of writeups from the MSRC (Microsoft) Bug Bounty program
โ46Nov 1, 2026Updated this week
Alternatives and similar repositories for awesome-msrc-writeups
Users that are interested in awesome-msrc-writeups are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Android webviews and securiyโ25Jul 19, 2026Updated 3 months ago
- A BugBounty playbook covering vulnerability bypasses, payloads, and quick checks for OWASP Top 10 + extras.โ23Sep 29, 2025Updated last year
- web app monitoring automationโ14Jan 7, 2025Updated last year
- JSSCM detects expired domains for Stored XSS exploitation during browsing.โ59Apr 3, 2025Updated last year
- โ11May 22, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer โข AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A local, safety-first pre-submission reviewer for bug bounty reports.โ43Oct 3, 2026Updated 3 weeks ago
- Webshell with the newest, easiest, and shortest code and technique.โ10Oct 23, 2021Updated 5 years ago
- Subbdom API Clientโ12Feb 7, 2025Updated last year
- Spec-driven bug bounty writeups and real world security failures.โ43Sep 18, 2026Updated last month
- A collection of ctf 'web-pwn' challenges, which require the exploitation of memory-related vulnerabilities within essential web componentโฆโ17Oct 2, 2024Updated 2 years ago
- HackerOne Notifier is an automated bot that monitors new programs launched on HackerOne and sends Telegram Bot notifications whenever a nโฆโ22Nov 4, 2025Updated 11 months ago
- A fancier postMessage tracker with Chrome Manifest version V3 support and a few additional features, inspired by Frans Rosens postmessageโฆโ133Sep 12, 2025Updated last year
- uforall is a fast url crawler this tool crawl all URLs number of different sources, alienvault,WayBackMachine,urlscan,commoncrawlโ58Nov 3, 2025Updated 11 months ago
- Tools and methods that I personally use for Recon and Exploitationsโ56May 1, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient โข AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Archive Alchemist is a tool for creating specially crafted archives to test extraction vulnerabilities.โ243Jul 24, 2025Updated last year
- Generates statistics based on output from CrackMapExec. Ideal for enumeration of host-based controls.โ13Oct 23, 2026Updated last week
- jxscout superpowers JavaScript analysis for security researchersโ468Apr 12, 2026Updated 6 months ago
- Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Ofโฆโ30Sep 23, 2026Updated last month
- ๐ CVE Monitor v1.0โ28Jun 30, 2025Updated last year
- A resources for who want to learn and get deep into client-side bugsโ561Dec 8, 2024Updated last year
- โ52Apr 30, 2026Updated 6 months ago
- โ1,182Jan 28, 2026Updated 9 months ago
- The Ultimate Recon Frameworkโ11Mar 11, 2026Updated 7 months ago
- Deploy on Railway without the complexity - Free Credits Offer โข AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- PoC Listโ10Sep 4, 2022Updated 4 years ago
- Enhanced Burp Suite extension for finding links and sensitive data in JavaScript filesโ27May 10, 2026Updated 5 months ago
- ้ ๅ CVE-2023-22515 ๅๅฐไธไผ jarๅ ๅฎ็ฐRCEโ23Nov 9, 2023Updated 2 years ago
- โ326Updated this week
- Run a command in a sandbox with the same flags on every OS โ one capability model compiled to Seatbelt (macOS), gVisor (Linux), and AppCoโฆโ28Jun 12, 2026Updated 4 months ago
- Most Powerful Open Source Bypasser Tool for Bypass 4XX Status codeโ14Mar 16, 2026Updated 7 months ago
- Better Google Dorking with Dorker.โ32Aug 28, 2022Updated 4 years ago
- 176 vulnerabilities in Samsung preinstalled Android appsโ364Jul 15, 2026Updated 3 months ago
- Authenticated SSRF in Grafanaโ83Jun 24, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient โข AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Tool to parse subdomains from dmarc.liveโ156Apr 19, 2024Updated 2 years ago
- BetterBugBounty - Here tools are classic, bugs are hunted, and nostalgia is the ultimate weapon!โ30Feb 10, 2024Updated 2 years ago
- Keep track of changes in website with WEBSYโ35May 22, 2023Updated 3 years ago
- Find input and textarea hidden parameters in html.โ11Jan 20, 2026Updated 9 months ago
- Effective C++ and Java interoperability via JNIโ12Feb 24, 2025Updated last year
- Pre-auth RCE PoC for WordPress core โ chains CVE-2026-63030 (REST /batch/v1 route-confusion desync) with CVE-2026-60137 (author__not_in Sโฆโ16Jul 22, 2026Updated 3 months ago
- CT Log Scannerโ600Dec 26, 2025Updated 10 months ago