🐛 A list of writeups from the MSRC (Microsoft) Bug Bounty program
☆36Oct 29, 2025Updated 8 months ago
Alternatives and similar repositories for awesome-msrc-writeups
Users that are interested in awesome-msrc-writeups are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Android webviews and securiy☆25Updated this week
- A BugBounty playbook covering vulnerability bypasses, payloads, and quick checks for OWASP Top 10 + extras.☆23Sep 29, 2025Updated 9 months ago
- A basic tutorial to web scraping using python for beginners☆17Jul 15, 2025Updated last year
- JSSCM detects expired domains for Stored XSS exploitation during browsing.☆57Apr 3, 2025Updated last year
- web app monitoring automation☆15Jan 7, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A collection of ctf 'web-pwn' challenges, which require the exploitation of memory-related vulnerabilities within essential web component…☆16Oct 2, 2024Updated last year
- A fancier postMessage tracker with Chrome Manifest version V3 support and a few additional features, inspired by Frans Rosens postmessage…☆130Sep 12, 2025Updated 10 months ago
- Spec-driven bug bounty writeups and real world security failures.☆43Jul 5, 2026Updated 2 weeks ago
- HackerOne Notifier is an automated bot that monitors new programs launched on HackerOne and sends Telegram Bot notifications whenever a n…☆22Nov 4, 2025Updated 8 months ago
- Archive Alchemist is a tool for creating specially crafted archives to test extraction vulnerabilities.☆237Jul 24, 2025Updated 11 months ago
- ☆11Sep 7, 2023Updated 2 years ago
- Argus is used to test for Blind XSS and SSRF vulnerbilities or any sort of OOB detection☆14Nov 1, 2024Updated last year
- 🎉 CVE Monitor v1.0☆27Jun 30, 2025Updated last year
- ☆51Apr 30, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A resources for who want to learn and get deep into client-side bugs☆551Dec 8, 2024Updated last year
- 配合 CVE-2023-22515 后台上传jar包实现RCE☆23Nov 9, 2023Updated 2 years ago
- PoC List☆10Sep 4, 2022Updated 3 years ago
- Enhanced Burp Suite extension for finding links and sensitive data in JavaScript files☆26May 10, 2026Updated 2 months ago
- ☆15Oct 30, 2022Updated 3 years ago
- 8 Week course to transition from Web/API/Cloud Hacker to AI Red Team☆30Nov 17, 2025Updated 8 months ago
- My Notes & Resources Of Bug Bounty Checklists☆90Dec 28, 2024Updated last year
- Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist☆31Jan 6, 2026Updated 6 months ago
- Tool to parse subdomains from dmarc.live☆154Apr 19, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Keep track of changes in website with WEBSY☆35May 22, 2023Updated 3 years ago
- Authenticated SSRF in Grafana☆83Jun 24, 2024Updated 2 years ago
- Automatic Enumeration is a command line utility that automatically tries to collect and retrieve various pieces of information from a tar…☆15Apr 21, 2025Updated last year
- BetterBugBounty - Here tools are classic, bugs are hunted, and nostalgia is the ultimate weapon!☆30Feb 10, 2024Updated 2 years ago
- Independent file type identification python library☆12Mar 16, 2023Updated 3 years ago
- PostScript examples useful for attacking Ghostscript.☆12Aug 1, 2024Updated last year
- This repo contains code for the parser to extract data from .tm7 and .tb7 files. The project can by consumed as a NuGet package that pars…☆16Jun 15, 2023Updated 3 years ago
- jxscout superpowers JavaScript analysis for security researchers☆471Apr 12, 2026Updated 3 months ago
- 申明：仅供教学演示，禁用非法、未授权等进行钓鱼，后果自负。☆12May 21, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆39Oct 16, 2025Updated 9 months ago
- Locally scan all the repositories of a github organization☆35Jul 20, 2025Updated last year
- ☆35Jan 8, 2026Updated 6 months ago
- Script to automate bypassing 403 forbidden status code☆26Jun 18, 2025Updated last year
- Things help you get started with Java Vulnerability☆74Feb 26, 2023Updated 3 years ago
- ☆38Jul 4, 2026Updated 2 weeks ago
- ☆1,169Jan 28, 2026Updated 5 months ago