A curated collection of bug bounty tips, tricks, payloads, and bypass techniques
☆51Jul 8, 2026Updated 2 weeks ago
Alternatives and similar repositories for bugbounty-Tips-and-Tricks
Users that are interested in bugbounty-Tips-and-Tricks are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆53Oct 1, 2025Updated 9 months ago
- ☆16Aug 25, 2025Updated 11 months ago
- Caido plugin to send HTTP requests to external CLI security tools with preview, batch execution, and live output☆23Jun 29, 2026Updated 3 weeks ago
- Proof of concept exploit for Ivanti EPM CVE-2024-13159 and others☆13Feb 19, 2025Updated last year
- ☆15Apr 5, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Wireless Hacker is an open-source toolkit for auditing the security of authorized Wi-Fi networks. Built for ethical hackers, penetration …☆35Jul 5, 2026Updated 2 weeks ago
- ☆89Sep 13, 2025Updated 10 months ago
- ex-redirect — An automated open redirect scanner using Wayback Machine archives. Supports subdomain grouping, live URL filtering, and Wor…☆15May 9, 2025Updated last year
- ☆15Nov 11, 2023Updated 2 years ago
- Automated red-team toolkit for stress-testing LLM defences - Vector Attacks on LLMs (Gendalf Case Study)☆115Jul 30, 2025Updated 11 months ago
- An AI-powered assistant for hackers and security professionals built for Caido☆36Jan 24, 2026Updated 6 months ago
- MIT license BRS-XSS is a modular Python CLI scanner for XSS vulnerabilities. Features context-aware payloads, WAF evasion, DOM analysis v…☆33Jan 12, 2026Updated 6 months ago
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆22Mar 16, 2026Updated 4 months ago
- Code to check AWS S3 buckets☆17Dec 19, 2017Updated 8 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Tool CTF Forensik File extract/convert☆17Mar 22, 2024Updated 2 years ago
- Reverse‑engineered Claude AI's HTTPS completion API to build a free, API‑less CLI client. Modify prompts at the protocol level and stream…☆33Apr 25, 2026Updated 3 months ago
- IOS PUBG AUTO UPDATE ESP AIMBOT ALL VERSIONS☆17Nov 14, 2023Updated 2 years ago
- A comprehensive bug bounty methodology compiled from extensive research, covering web application reconnaissance, checklists, and methods…☆154Nov 11, 2024Updated last year
- CamJacking is a tool designed for use in human penetration testing tool. It is intended to simulate potential security threats by testing…☆58Feb 26, 2026Updated 4 months ago
- A cyber security toolkit blending manual testing with AI Agents☆136May 9, 2026Updated 2 months ago
- Detecting leaked secrets, API keys, credentials, and sensitive files from public repositories in near real-time using the GitHub Events A…☆34May 1, 2025Updated last year
- Try harder to bypass that WAF...☆14Jan 4, 2015Updated 11 years ago
- Website of Project SEKAI, a CTF team.☆22Jun 30, 2026Updated 3 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- IBAN Validation with country code check☆11Apr 29, 2016Updated 10 years ago
- Red-Team - AI Agent to Phish Employees based on Social Intelligence.☆24Dec 28, 2025Updated 6 months ago
- ✅ Experience the power of an automated Insecure Direct Object Reference (IDOR) vulnerability detection tool. Safeguard your applications …☆73Mar 9, 2025Updated last year
- XSSGAI is the first-ever AI-powered XSS (Cross-Site Scripting) payload generator. It leverages machine learning and deep learning to crea…☆42Feb 4, 2026Updated 5 months ago
- Monster UI Application: Advanced configuration of KAZOO callflows using a drag-and-drop interface☆14Updated this week
- SSTI – Advanced / Polyglot Payloads☆26Jan 24, 2026Updated 6 months ago
- Remove Offensive and Profane Words from Wordlists☆16Jul 27, 2023Updated 2 years ago
- repository contains main files and sources of the tool☆17Jul 20, 2025Updated last year
- ☆27Jan 2, 2026Updated 6 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Caido's passive workflow to find potential leaked secrets, PII, and sensitive fields.☆29Jan 13, 2025Updated last year
- Tools to recover, extract and decrypt Atomic wallets☆12Dec 12, 2025Updated 7 months ago
- Find S3 AWS/GCP/Azure buckets while surfing. S3DNS acts as DNS server, follows CNAMEs and matches any bucket pattern☆129Updated this week
- ☆39Jul 8, 2026Updated 2 weeks ago
- Live runtime audit for installed Android apps. Runs on the rooted phone, serves a browser dashboard.☆28May 23, 2026Updated 2 months ago
- Android webviews and securiy☆25Updated this week
- AI-powered assistant that integrates seamlessly with Caido☆80Jun 20, 2026Updated last month