Alternatives and similar repositories for bug-bounty-tips

Users that are interested in bug-bounty-tips are comparing it to the libraries listed below

• Dheerajmadhukar / karma_v1
  KARMA is a simple bash script automation that can hit Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Po…
  ☆59Updated 3 years ago
• Dheerajmadhukar / subzzZ
  SubzzZ to find possible subdomains using passive recon. Tool also support Permutations, Mutations, Alterations.
  ☆38Updated 4 years ago
• emadshanab / Burp-Bounty-free-Profiles-Collection
  ☆42Updated 4 years ago
• zeronine9 / Blind_SPOT
  Blind spot is a python tool for blind injection vulnerabilities , SQLi time based , Command injection , code injection , SSTI
  ☆27Updated 4 years ago
• gwen001 / bxss
  Alternative to XSS Hunter for blind XSS.
  ☆51Updated 2 years ago
• Sachin-v3rma / hactivity
  A Tool to find subdomains from hackerone reports.
  ☆17Updated 4 years ago
• emadshanab / Multi_tools_subdomains
  ☆22Updated 4 years ago
• R0X4R / ssrf-tool
  An SSRF detector tool written in golang. I have fixed some errors and added some more payloads to it. But the tool credits go to z0idsec.
  ☆45Updated 4 years ago
• Sicks3c / Reconizer
  ☆38Updated 4 years ago
• MShahine / Bug-Bounty-Recon
  All The Notes And Tips I FOund In Github And Twitter I Put Them Here
  ☆35Updated 4 years ago
• akincibor / 403-bypass
  Enhanced 403 bypass header
  ☆21Updated 2 years ago
• darklotuskdb / SSTI-XSS-Finder
  XSS Finder Via SSTI
  ☆56Updated last year
• akshaysharma016 / aem-detector
  ☆21Updated 2 years ago
• Ravirajrao / HackerOne-Reports
  Cool HackerOne Reports
  ☆22Updated 2 years ago
• Ravaan21 / Chandrahasa
  A solid recon tool I use personally.
  ☆30Updated 2 years ago
• NitinYadav00 / gf-patterns
  Some of the gf patterns which i use
  ☆44Updated 3 years ago
• vikrantbatra05 / HuntTheBug
  Basic Recon For Bug Bounty Hunter - "HuntTheBug" is Basic Scripts For Sub Domain Enumeration> Live Domain Enumeration > Sub Domain Hijack…
  ☆55Updated 3 years ago
• defparam / h1stats
  a tool that compiles a csv of all h1 program stats
  ☆47Updated 2 years ago
• Josue87 / roboxtractor
  Extract endpoints marked as disallow in robots files to generate wordlists.
  ☆57Updated 3 years ago
• novanazizr / BugBountyHunting
  Some Tutorials and Things to Help Bug Hunter
  ☆29Updated 4 years ago
• abdallaabdalrhman / Wordlist-for-Bug-Bounty
  I collected it to help the bug hunter get a reward
  ☆58Updated 2 years ago
• emadshanab / Adobe-Experience-Manager
  ☆33Updated 4 years ago
• 0xRTH / IISRecon
  IIS shortname scanner + bruteforce
  ☆52Updated last year
• BrownBearSec / Utils-and-Wrappers
  A repo for tools, utils, and wrappers that are to small to put in their own repo.
  ☆23Updated 2 years ago
• emadshanab / Subdomains-brutforce-wordlists-collection
  ☆38Updated 4 years ago
• iamthefrogy / bucketbunny
  AWS S3 open bucket poc automated script.
  ☆57Updated 3 years ago
• tamimhasan404 / Gau-Expose
  It grep subdomains, email/username, build custom wordlist etc from gau results
  ☆48Updated 2 years ago
• xElkomy / Workflow-Bug-Bounty
  My Tools For Bug Bounty
  ☆66Updated 9 months ago
• six2dez / resolvers_reconftw
  Resolvers updated daily for reconftw
  ☆47Updated 2 years ago
• shiblisec / hostinjector
  Multithreaded Host Header Redirection Scanner
  ☆13Updated 4 years ago