Complete collection of bug bounty reports from Hackerone.
☆106Oct 13, 2024Updated 2 years ago
Alternatives and similar repositories for hackerone-bug-bounty-reports
Users that are interested in hackerone-bug-bounty-reports are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Convert public bug bounty hackerone reports (9,950) into reusable AI security skills and vulnerability knowledge.☆14Sep 26, 2026Updated last month
- ☆16Jun 28, 2026Updated 4 months ago
- Public Disclosed Bug Bounty Reports formated in markdown☆121Jul 14, 2026Updated 3 months ago
- ☆12Aug 17, 2022Updated 4 years ago
- A structured, auto-updating archive of disclosed HackerOne reports. Filter by severity, CWE weakness, bounty program, or year - ideal for…☆72Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A lightweight Python HTTP server with fuzzy filename matching and automatic fallback to directory listing.☆13Aug 28, 2025Updated last year
- Pre-auth RCE PoC for WordPress core — chains CVE-2026-63030 (REST /batch/v1 route-confusion desync) with CVE-2026-60137 (author__not_in S…☆16Jul 22, 2026Updated 3 months ago
- Pentest AI agents: 23 hunt-agent skills, a 4-arm detection engine, a 14-gate validation lab, and the two gates that stop false findings i…☆21Oct 20, 2026Updated 2 weeks ago
- The official Rifteo agent skills library - a collection of reusable instruction sets for AI agents covering security testing, audit, and …☆38Sep 16, 2026Updated last month
- 🎯 Chrome Extension - Passive scanner for Dependency Confusion vulnerabilities in npm/PyPI packages☆44Jan 31, 2026Updated 9 months ago
- High-performance subdomain prober written in Rust. Like httpx, but faster.☆31Oct 9, 2026Updated 3 weeks ago
- A simple HAR-based JavaScript recon automation kit for organizing JS files, endpoints, secrets, and gf-filtered attack surface during bug…☆19May 20, 2026Updated 5 months ago
- ☆13Apr 6, 2022Updated 4 years ago
- A sensible no bullshit repo of summaries of reports on hackerone, bugcrowd and alike, that makes straight up sense and make it easy to re…☆10Oct 21, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Auth Mutator is a Burp Suite extension that helps you experiment with mutated authentication requests while keeping the original traffic …☆16Oct 7, 2026Updated 3 weeks ago
- Command Execution PoC for OpenSSL Stack buffer overflow CVE-2025-15467☆15Feb 25, 2026Updated 8 months ago
- SelfHosted - Bug Bounty Programs | Discover new and fresh bug bounty programs across platforms. Updated frequently to always display the …☆16Nov 24, 2025Updated 11 months ago
- Xss payload for bypassing waf☆20Apr 18, 2020Updated 6 years ago
- ☆13Apr 27, 2021Updated 5 years ago
- ☆13Aug 15, 2025Updated last year
- ☆10Feb 27, 2023Updated 3 years ago
- A complete, beginner-friendly bug bounty roadmap that takes you from zero experience to earning your first bounty.☆1,555Sep 5, 2025Updated last year
- All writeups of Author Hakcer404 in Root CTF 2021 Organizer By Bytersec_Squad . User name : Hacker404 Youtube :cyberteach360☆10Apr 18, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Algopwn is an interactive Python tool for security researchers and bug-bounty hunters to audit Algolia API keys. It detects ACLs, disting…☆11Nov 6, 2025Updated 11 months ago
- Burp Suite extension for cross-identity & cross-tenant access-control testing — BAC, IDOR, BOLA, and privilege escalation.☆62Jul 12, 2026Updated 3 months ago
- Solidity CTFs by RareSkills☆10Nov 20, 2023Updated 2 years ago
- Java library used to upload files following the security steps described by OWASP☆10Jun 7, 2021Updated 5 years ago
- Ultra-fast hybrid IPv4/IPv6 port scanner with adaptive concurrency, banner grab, TLS sniff, and built-in httpx + nuclei recon pipeline — …☆17Sep 30, 2026Updated last month
- ☆11Jun 26, 2017Updated 9 years ago
- A curated collection of my security research and bug bounty writeups, documenting real-world vulnerabilities, exploitation methods☆27Oct 16, 2026Updated 2 weeks ago
- This is a complete set of HTB academy CBBH path cheatsheets and skills assesment solutions☆11May 10, 2024Updated 2 years ago
- Removes duplicate entries from a file, resulting in only unique parameter combinations. Useful for parsing waybackurls and making recon m…☆11May 31, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Collection of over 9000 xss payloads | heavy xss collection☆12Dec 6, 2022Updated 3 years ago
- ☆13Sep 17, 2026Updated last month
- Windows Privilege Escalation (Modified RottePotato)☆13Jun 5, 2018Updated 8 years ago
- Walkthroughs and notes for HTB Academy content☆13Sep 1, 2025Updated last year
- After getting heavy demand on my Crest CPSA. I am sharing my notes on Network Security Assessment from recommended book for CPSA. Please …☆18Sep 15, 2026Updated last month
- Write-up and PoC for $500 HackerOne bug bounty report involving GitHub Actions. Based on net-core-injector technique.☆18Nov 5, 2022Updated 3 years ago
- ☆13Jul 21, 2022Updated 4 years ago