Alternatives and similar repositories for bug-bounty-tips:

Users that are interested in bug-bounty-tips are comparing it to the libraries listed below

• zeronine9 / Blind_SPOT
  Blind spot is a python tool for blind injection vulnerabilities , SQLi time based , Command injection , code injection , SSTI
  ☆27Updated 4 years ago
• Dheerajmadhukar / karma_v1
  KARMA is a simple bash script automation that can hit Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Po…
  ☆58Updated 3 years ago
• Dheerajmadhukar / subzzZ
  SubzzZ to find possible subdomains using passive recon. Tool also support Permutations, Mutations, Alterations.
  ☆38Updated 3 years ago
• Ravirajrao / HackerOne-Reports
  Cool HackerOne Reports
  ☆19Updated 2 years ago
• byt3hx / gup
  gup aka Get All Urls parameters to create wordlists for brute forcing parameters.
  ☆17Updated 3 years ago
• emadshanab / DIR-WORDLISTS
  Some wordlists collected form github to all bug bounty hunters.
  ☆27Updated 3 years ago
• Ravaan21 / Chandrahasa
  A solid recon tool I use personally.
  ☆30Updated last year
• Sachin-v3rma / hactivity
  A Tool to find subdomains from hackerone reports.
  ☆16Updated 3 years ago
• SirBugs / JsValidator
  JsValidator is a tool created for validating the JS files after crawlling it from waybackurls
  ☆18Updated last year
• emadshanab / Multi_tools_subdomains
  ☆22Updated 3 years ago
• emadshanab / Burp-Bounty-free-Profiles-Collection
  ☆42Updated 3 years ago
• leetIbrahim / JSNotify
  JSNotify is a Python script designed to monitor JavaScript files in a specified directory for changes. This tool can be used by developer…
  ☆18Updated last year
• akshaysharma016 / aem-detector
  ☆20Updated last year
• eslam3kl / 3klector
  3klector is an automation Recon tool which collecting information about Acquisitions and ASN which related to Big Scope company
  ☆49Updated 2 years ago
• xhzeem / paramix
  Paramix is a command-line tool for modifying the parameters of a list of URLs from stdin and returns them in stdout.
  ☆16Updated 4 months ago
• tamimhasan404 / Gau-Expose
  It grep subdomains, email/username, build custom wordlist etc from gau results
  ☆46Updated 2 years ago
• Sybil-Scan / TLDbrute
  A simple utility to generate domain names with all possible TLDs
  ☆23Updated last year
• emadshanab / Adobe-Experience-Manager
  ☆33Updated 3 years ago
• bp0lr / myGF_patterns
  ☆21Updated 4 years ago
• adrianlarion / pegaxss
  Magic Header Blind Xss tool (deliver blind xss payloads in request headers).
  ☆27Updated 3 years ago
• ghsec / BurpBountyProfile
  BurpSiute - BurpBounty Profiles
  ☆19Updated last year
• notmarshmllow / credax
  Credax - Fuzzing Tool with Slack Notifications. Also removes false positive responses.
  ☆10Updated 3 years ago
• shiblisec / hostinjector
  Multithreaded Host Header Redirection Scanner
  ☆13Updated 4 years ago
• alyrezo / FindBBP
  Bug Bounty Program Discovery tool, that discovers bug Bounty Program via security.txt file by default and you can use custom dork
  ☆15Updated 2 years ago
• bugbountyhunters / Iris-JS
  #JavascriptRecon #bugbounty
  ☆21Updated 3 years ago
• Sicks3c / Reconizer
  ☆38Updated 4 years ago
• darklotuskdb / SSTI-XSS-Finder
  XSS Finder Via SSTI
  ☆53Updated last year
• gwen001 / detectify-cves
  Find CVEs that don't have a Detectify modules.
  ☆21Updated last year