A curated collection of bug bounty tips, tricks, payloads, and bypass techniques
☆55Jul 25, 2026Updated last month
Alternatives and similar repositories for bugbounty-Tips-and-Tricks
Users that are interested in bugbounty-Tips-and-Tricks are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Chrome extension designed to decode Walmart Queue-it data directly from the URL, providing insights into your position and likelihood o…☆16Aug 26, 2026Updated last week
- A simple browser extension to quickly find interesting security-related information on a webpage.☆188Updated this week
- Wireless Hacker is an open-source toolkit for auditing the security of authorized Wi-Fi networks. Built for ethical hackers, penetration …☆43Jul 5, 2026Updated last month
- Caido plugin to send HTTP requests to external CLI security tools with preview, batch execution, and live output☆24Aug 20, 2026Updated 2 weeks ago
- Proof of concept exploit for Ivanti EPM CVE-2024-13159 and others☆13Feb 19, 2025Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- ☆90Sep 13, 2025Updated 11 months ago
- ex-redirect — An automated open redirect scanner using Wayback Machine archives. Supports subdomain grouping, live URL filtering, and Wor…☆15May 9, 2025Updated last year
- ☆15Nov 11, 2023Updated 2 years ago
- Automated red-team toolkit for stress-testing LLM defences - Vector Attacks on LLMs (Gendalf Case Study)☆117Jul 30, 2025Updated last year
- An AI-powered assistant for hackers and security professionals built for Caido☆36Aug 12, 2026Updated 3 weeks ago
- Real-time web dashboard for BugTraceAI — scan monitoring, 20+ security tools, and AI-powered analysis☆50Updated this week
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆22Mar 16, 2026Updated 5 months ago
- CVE-2025-5777 Citrix NetScaler Memory Leak Exploit (CitrixBleed 2)☆30Jul 11, 2025Updated last year
- Burp Suite Unfiltered - Go from a Beginner to Advanced, by Packt Publishing☆18Jan 18, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Code to check AWS S3 buckets☆17Dec 19, 2017Updated 8 years ago
- IOS PUBG AUTO UPDATE ESP AIMBOT ALL VERSIONS☆20Nov 14, 2023Updated 2 years ago
- Reverse‑engineered Claude AI's HTTPS completion API to build a free, API‑less CLI client. Modify prompts at the protocol level and stream…☆35Apr 25, 2026Updated 4 months ago
- ALL IN ONE Hacking Tool For Hackers☆17Apr 1, 2022Updated 4 years ago
- A comprehensive bug bounty methodology compiled from extensive research, covering web application reconnaissance, checklists, and methods…☆163Nov 11, 2024Updated last year
- CamJacking is a tool designed for use in human penetration testing tool. It is intended to simulate potential security threats by testing…☆63Feb 26, 2026Updated 6 months ago
- A cyber security toolkit blending manual testing with AI Agents☆137Aug 16, 2026Updated 2 weeks ago
- Detecting leaked secrets, API keys, credentials, and sensitive files from public repositories in near real-time using the GitHub Events A…☆34May 1, 2025Updated last year
- Try harder to bypass that WAF...☆14Jan 4, 2015Updated 11 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Website of Project SEKAI, a CTF team.☆23Jun 30, 2026Updated 2 months ago
- ☆27Jun 21, 2026Updated 2 months ago
- IBAN Validation with country code check☆10Apr 29, 2016Updated 10 years ago
- ✅ Experience the power of an automated Insecure Direct Object Reference (IDOR) vulnerability detection tool. Safeguard your applications …☆73Mar 9, 2025Updated last year
- Red-Team - AI Agent to Phish Employees based on Social Intelligence.☆23Dec 28, 2025Updated 8 months ago
- Monster UI Application: Advanced configuration of KAZOO callflows using a drag-and-drop interface☆12Updated this week
- XSSGAI is the first-ever AI-powered XSS (Cross-Site Scripting) payload generator. It leverages machine learning and deep learning to crea…☆43Feb 4, 2026Updated 7 months ago
- SSTI – Advanced / Polyglot Payloads☆30Jan 24, 2026Updated 7 months ago
- Remove Offensive and Profane Words from Wordlists☆17Jul 27, 2023Updated 3 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- A intentionally vulnerable API and front end, written in Javascript. Adopt a crAPIbara today!☆18Oct 2, 2025Updated 11 months ago
- repository contains main files and sources of the tool☆19Jul 20, 2025Updated last year
- ☆34Jan 2, 2026Updated 8 months ago
- Caido's passive workflow to find potential leaked secrets, PII, and sensitive fields.☆29Jan 13, 2025Updated last year
- Tools to recover, extract and decrypt Atomic wallets☆12Dec 12, 2025Updated 8 months ago
- Track incidents, map attack paths, collaborate in real time, and generate AI-powered reports — all in one place.☆20May 13, 2026Updated 3 months ago
- Find S3 AWS/GCP/Azure buckets while surfing. S3DNS acts as DNS server, follows CNAMEs and matches any bucket pattern☆128Updated this week