Alternatives and similar repositories for bug-bounty-tips:

Users that are interested in bug-bounty-tips are comparing it to the libraries listed below

• Dheerajmadhukar / subzzZ
  SubzzZ to find possible subdomains using passive recon. Tool also support Permutations, Mutations, Alterations.
  ☆38Updated 4 years ago
• Ravirajrao / HackerOne-Reports
  Cool HackerOne Reports
  ☆20Updated 2 years ago
• emadshanab / Burp-Bounty-free-Profiles-Collection
  ☆42Updated 3 years ago
• zeronine9 / Blind_SPOT
  Blind spot is a python tool for blind injection vulnerabilities , SQLi time based , Command injection , code injection , SSTI
  ☆27Updated 4 years ago
• akshaysharma016 / aem-detector
  ☆20Updated last year
• Sachin-v3rma / hactivity
  A Tool to find subdomains from hackerone reports.
  ☆17Updated 3 years ago
• ghsec / BurpBountyProfile
  BurpSiute - BurpBounty Profiles
  ☆19Updated 2 years ago
• HernanRodriguez1 / ScanMySQLiErrorBased-Nuclei
  ☆21Updated 2 years ago
• emadshanab / femida
  Automated blind-xss search for Burp Suite
  ☆23Updated 3 years ago
• BitTheByte / BitTraversal
  Burpsuite Plugin to detect Directory Traversal vulnerabilities
  ☆28Updated 3 years ago
• notmarshmllow / credax
  Credax - Fuzzing Tool with Slack Notifications. Also removes false positive responses.
  ☆10Updated 3 years ago
• Sicks3c / Reconizer
  ☆38Updated 4 years ago
• SirBugs / JsValidator
  JsValidator is a tool created for validating the JS files after crawlling it from waybackurls
  ☆19Updated 2 years ago
• tamimhasan404 / Open-Source-Nuclei-Templates-Downloader
  Script that download 37+ open source nuclei templates
  ☆43Updated 2 years ago
• subzero987 / S3-Recon
  S3 Recon tips and tricks collected from different resources,Sorry if i missed to mention all resources owners
  ☆27Updated 3 years ago
• eslam3kl / ShoLister
  ShoLister is a tool that collects all available subdomains for specific hostname or organization from Shodan. The tool is designed to be …
  ☆58Updated 2 years ago
• tamimhasan404 / Gau-Expose
  It grep subdomains, email/username, build custom wordlist etc from gau results
  ☆48Updated 2 years ago
• eslam3kl / 3klector
  3klector is an automation Recon tool which collecting information about Acquisitions and ASN which related to Big Scope company
  ☆48Updated 2 years ago
• Dheerajmadhukar / karma_v1
  KARMA is a simple bash script automation that can hit Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Po…
  ☆58Updated 3 years ago
• emadshanab / Extract-and-Probe-all-the-ips-associated-with-same-host-via-httpx
  ☆12Updated 3 years ago
• akincibor / 403-bypass
  Enhanced 403 bypass header
  ☆21Updated 2 years ago
• honoki / burp-copy-regex-matches
  Burp Suite plugin to copy regex matches from selected requests and/or responses to the clipboard.
  ☆33Updated 3 years ago
• darklotuskdb / SSTI-XSS-Finder
  XSS Finder Via SSTI
  ☆54Updated last year
• Mesh3l911 / Sub_Search
  ☆9Updated 3 years ago
• novanazizr / BugBountyHunting
  Some Tutorials and Things to Help Bug Hunter
  ☆29Updated 4 years ago
• k4k4r07 / CertSubDumb
  Basic Bash Script to scrape all subdomains from crtsh in a single run
  ☆18Updated 2 years ago
• byt3hx / gup
  gup aka Get All Urls parameters to create wordlists for brute forcing parameters.
  ☆18Updated 3 years ago
• R0X4R / ssrf-tool
  An SSRF detector tool written in golang. I have fixed some errors and added some more payloads to it. But the tool credits go to z0idsec.
  ☆43Updated 4 years ago
• emadshanab / Adobe-Experience-Manager
  ☆33Updated 3 years ago
• Josue87 / roboxtractor
  Extract endpoints marked as disallow in robots files to generate wordlists.
  ☆56Updated 3 years ago