Real world bug bounty wordlists
☆116Jul 20, 2023Updated 2 years ago
Alternatives and similar repositories for bugbounty-wordlist
Users that are interested in bugbounty-wordlist are comparing it to the libraries listed below
Sorting:
- Find subdomains on GitLab.☆106Apr 28, 2024Updated last year
- vīlicus is a bug bounty api dashboard☆41Aug 13, 2023Updated 2 years ago
- Generate tens of thousands of subdomain combinations in a matter of seconds☆273Sep 25, 2023Updated 2 years ago
- Nuclei Templates☆14Jan 13, 2023Updated 3 years ago
- Zed Attack Proxy Scripts for finding CVEs and Secrets.☆128Jun 2, 2022Updated 3 years ago
- 1337 Wordlists for Bug Bounty Hunting☆932Updated this week
- Some contributions in the nuclei-templates repository☆62Jun 18, 2022Updated 3 years ago
- Fast and lightweight Web Application Firewall Fingerprinting tool☆64Dec 21, 2024Updated last year
- ☆628Dec 19, 2025Updated 2 months ago
- Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one pl…☆1,039Aug 23, 2025Updated 6 months ago
- Script that download 37+ open source nuclei templates☆45Sep 2, 2022Updated 3 years ago
- A repository that includes all the important wordlists used while bug hunting.☆1,379Mar 11, 2023Updated 2 years ago
- Repositories, Links, Payloads, Blogs, Tools, etc.. which I think might be useful for pentesting and bug bounty☆48Jan 6, 2026Updated 2 months ago
- ☆35Aug 2, 2022Updated 3 years ago
- Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load☆296Sep 22, 2024Updated last year
- This includes all the templates of nuclei collected from different sources☆18Dec 30, 2022Updated 3 years ago
- Smart context-based SSRF vulnerability scanner.☆360May 5, 2022Updated 3 years ago
- Some oneliners with descriptions and Regex that I frequently use while doing bug hunting. More to come 🚀🚀☆22Dec 24, 2022Updated 3 years ago
- Burp Suite extension that offers a toolkit for testing GraphQL endpoints.☆203Aug 5, 2024Updated last year
- i will upload more templates here to share with the comunity.☆567Apr 17, 2024Updated last year
- ☆756Jun 26, 2024Updated last year
- ☆858Dec 26, 2025Updated 2 months ago
- This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contai…☆534Dec 4, 2024Updated last year
- Burp extension to create target specific and tailored wordlist from burp history.☆256Dec 8, 2021Updated 4 years ago
- Subdomains analysis and generation tool. Reveal the hidden!☆244Jun 8, 2025Updated 8 months ago
- A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflows☆300Sep 8, 2023Updated 2 years ago
- Ffuf output browser☆39Feb 25, 2023Updated 3 years ago
- Filter and enrich a list of subdomains by level☆208Sep 25, 2023Updated 2 years ago
- Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests w…☆631Feb 22, 2026Updated last week
- These are my checklists which I use during my hunting.☆852Nov 30, 2023Updated 2 years ago
- Rust-based high performance domain permutation generator.☆299Dec 2, 2023Updated 2 years ago
- Automated Recon Tool Installer☆16Jun 29, 2022Updated 3 years ago
- Wordlist for web fuzzing, made from a variety of reliable sources including: result from my pentests, git.rip, ChatGPT, Lex, nuclei templ…☆101Nov 6, 2025Updated 4 months ago
- ☆148Dec 23, 2022Updated 3 years ago
- Workshop & Talk Slide Decks from HackSpaceCon☆26Dec 14, 2025Updated 2 months ago
- User-Agent , X-Forwarded-For and Referer SQLI Fuzzer☆382May 19, 2023Updated 2 years ago
- A path-normalization pentesting tool.☆151Jan 22, 2026Updated last month
- tool that generates bypasses for open redirects☆51Apr 18, 2022Updated 3 years ago
- Directory scans☆85Jan 7, 2026Updated 2 months ago