๐ A list of writeups from the MSRC (Microsoft) Bug Bounty program
โ36Oct 29, 2025Updated 10 months ago
Alternatives and similar repositories for awesome-msrc-writeups
Users that are interested in awesome-msrc-writeups are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Android webviews and securiyโ25Jul 19, 2026Updated last month
- A BugBounty playbook covering vulnerability bypasses, payloads, and quick checks for OWASP Top 10 + extras.โ23Sep 29, 2025Updated 11 months ago
- A basic tutorial to web scraping using python for beginnersโ16Jul 15, 2025Updated last year
- JSSCM detects expired domains for Stored XSS exploitation during browsing.โ57Apr 3, 2025Updated last year
- web app monitoring automationโ15Jan 7, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways โข AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A collection of ctf 'web-pwn' challenges, which require the exploitation of memory-related vulnerabilities within essential web componentโฆโ16Oct 2, 2024Updated last year
- A fancier postMessage tracker with Chrome Manifest version V3 support and a few additional features, inspired by Frans Rosens postmessageโฆโ131Sep 12, 2025Updated 11 months ago
- Spec-driven bug bounty writeups and real world security failures.โ42Jul 5, 2026Updated last month
- HackerOne Notifier is an automated bot that monitors new programs launched on HackerOne and sends Telegram Bot notifications whenever a nโฆโ22Nov 4, 2025Updated 9 months ago
- Archive Alchemist is a tool for creating specially crafted archives to test extraction vulnerabilities.โ241Jul 24, 2025Updated last year
- โ11Sep 7, 2023Updated 2 years ago
- Argus is used to test for Blind XSS and SSRF vulnerbilities or any sort of OOB detectionโ14Nov 1, 2024Updated last year
- ๐ CVE Monitor v1.0โ27Jun 30, 2025Updated last year
- โ51Apr 30, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer โข AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A resources for who want to learn and get deep into client-side bugsโ557Dec 8, 2024Updated last year
- ้ ๅ CVE-2023-22515 ๅๅฐไธไผ jarๅ ๅฎ็ฐRCEโ23Nov 9, 2023Updated 2 years ago
- PoC Listโ10Sep 4, 2022Updated 3 years ago
- Enhanced Burp Suite extension for finding links and sensitive data in JavaScript filesโ26May 10, 2026Updated 3 months ago
- โ15Oct 30, 2022Updated 3 years ago
- โ295Updated this week
- 8 Week course to transition from Web/API/Cloud Hacker to AI Red Teamโ32Nov 17, 2025Updated 9 months ago
- My Notes & Resources Of Bug Bounty Checklistsโ92Dec 28, 2024Updated last year
- Burp Extension to find potential endpoints, parameters, and generate a custom target wordlistโ32Jan 6, 2026Updated 7 months ago
- AI Agents on DigitalOcean Gradient AI Platform โข AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Tool to parse subdomains from dmarc.liveโ154Apr 19, 2024Updated 2 years ago
- Keep track of changes in website with WEBSYโ35May 22, 2023Updated 3 years ago
- Authenticated SSRF in Grafanaโ83Jun 24, 2024Updated 2 years ago
- BetterBugBounty - Here tools are classic, bugs are hunted, and nostalgia is the ultimate weapon!โ30Feb 10, 2024Updated 2 years ago
- Independent file type identification python libraryโ12Mar 16, 2023Updated 3 years ago
- PostScript examples useful for attacking Ghostscript.โ12Aug 1, 2024Updated 2 years ago
- jxscout superpowers JavaScript analysis for security researchersโ473Apr 12, 2026Updated 4 months ago
- ็ณๆ๏ผไป ไพๆๅญฆๆผ็คบ๏ผ็ฆ็จ้ๆณใๆชๆๆ ็ญ่ฟ่ก้้ฑผ๏ผๅๆ่ช่ดใโ12May 21, 2024Updated 2 years ago
- โ39Oct 16, 2025Updated 10 months ago
- Managed hosting for WordPress and PHP on Cloudways โข AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Locally scan all the repositories of a github organizationโ35Jul 20, 2025Updated last year
- PoC for XSS in org.webjars:swagger-ui [3.14.2, 3.36.2]โ51Feb 17, 2023Updated 3 years ago
- โ35Jan 8, 2026Updated 7 months ago
- Things help you get started with Java Vulnerabilityโ74Feb 26, 2023Updated 3 years ago
- โ38Jul 4, 2026Updated last month
- Additional resources for leaking and exploiting ObjRefs via HTTP .NET Remoting (CVE-2024-29059)โ92Mar 25, 2024Updated 2 years ago
- โ1,173Jan 28, 2026Updated 7 months ago