Alternatives and similar repositories for bugbounty_tools

Users that are interested in bugbounty_tools are comparing it to the libraries listed below

• yavolo / nuclei-templates

  View on GitHub
  ☆14Feb 7, 2024Updated 2 years ago
• Lu3ky13 / Bypass-Reset-Password-Code-Lead-to-Account-Takeover

  View on GitHub
  Bypass Reset Password Code Lead to Account Takeover
  ☆26Sep 16, 2024Updated last year
• h6nt3r / file_upload_payloads

  View on GitHub
  ☆52Oct 1, 2025Updated 4 months ago
• SeifElsallamy / XSSFire

  View on GitHub
  A standalone Blind XSS Script.
  ☆48Aug 15, 2025Updated 5 months ago
• alihussainzada / BugHunterMethodology

  View on GitHub
  A comprehensive bug bounty methodology compiled from extensive research, covering web application reconnaissance, checklists, and methods…
  ☆116Nov 11, 2024Updated last year
• oh2fih / securitytxt-tools

  View on GitHub
  Tools related to RFC 9116 (security.txt)
  ☆25Feb 11, 2025Updated last year
• gwen001 / favicon-hashtrick

  View on GitHub
  Python script implementing the favicon hash trick to find subdomains.
  ☆38Mar 28, 2023Updated 2 years ago
• 6h4ack / IDOR-Scanner

  View on GitHub
  IDOR Scanner is a Burp Suite extension that automates the detection and enumeration of potentially vulnerable numeric fields to identify …
  ☆43Feb 24, 2025Updated 11 months ago
• rootDR / ex-param

  View on GitHub
  ex-param is an automated tool designed for finding reflected parameters for XSS vulnerabilities. It crawls a target website, extracts GET…
  ☆63Feb 22, 2025Updated 11 months ago
• gwen001 / apk-analyzer

  View on GitHub
  Analyze an APK archive.
  ☆28Feb 24, 2024Updated last year
• orwagodfather / My-Cool-WordList-For-Fuzz-and-Bugs

  View on GitHub
  ☆42Oct 28, 2021Updated 4 years ago
• sys0wn / css-scrollbar-attack

  View on GitHub
  PoC for leaking text nodes via CSS injection
  ☆25Jul 27, 2024Updated last year
• Osb0rn3 / tldfinder

  View on GitHub
  TLDFinder is a Python package that identifies valid top-level domains (TLDs) for a list of domains with wildcard characters in the TLD.
  ☆24Jul 2, 2023Updated 2 years ago
• projectmonke / shortnameguesser

  View on GitHub
  A tool to guess the rest of the shortnames provided by vulnerable IIS instances.
  ☆42Aug 12, 2023Updated 2 years ago
• k4k4r07 / CertSubDumb

  View on GitHub
  Basic Bash Script to scrape all subdomains from crtsh in a single run
  ☆19May 23, 2022Updated 3 years ago
• jsmonhq / jsmon-cli

  View on GitHub
  ☆29Feb 4, 2026Updated last week
• coffinxp / RFC822-Email-Validator

  View on GitHub
  ☆38May 4, 2025Updated 9 months ago
• kankburhan / gampung

  View on GitHub
  Gampung tools for find nuclei template from github
  ☆12Sep 6, 2023Updated 2 years ago
• PortSwigger / change-menu-level

  View on GitHub
  一个用于修改右键插件菜单层级的Burpsuite插件。A simple BurpSuite extension to change extension context menu level.
  ☆14Jan 15, 2024Updated 2 years ago
• gwen001 / bxss

  View on GitHub
  Alternative to XSS Hunter for blind XSS.
  ☆51Dec 8, 2022Updated 3 years ago
• SecGus / anewer

  View on GitHub
  A modified version of TomNomNom's anew, allowing for multiple files to be defined as parameters.
  ☆13Jun 17, 2023Updated 2 years ago
• ifconfig-me / JSSecret-Extractor

  View on GitHub
  This python based tool can be used to discover API keys, access tokens, and other sensitive data in JavaScript files. It can scan JavaScr…
  ☆14Oct 18, 2024Updated last year
• burgerhalva / All-in-Fuzzer

  View on GitHub
  All-in Fuzzer. Burp suite extension for auto fuzzing params, headers, body
  ☆36Dec 13, 2025Updated 2 months ago
• gwyomarch / WebSecurityAcademy

  View on GitHub
  ☆18Nov 2, 2024Updated last year
• bscript / supabase-exposure-check

  View on GitHub
  Scan websites for exposed Supabase JWTs, enumerate accessible tables, and detect sensitive data exposure automatically.
  ☆116Dec 29, 2025Updated last month
• caido-community / burp2caido

  View on GitHub
  A tool to migrate Burpsuite HTTP history to Caido
  ☆35Apr 25, 2025Updated 9 months ago
• rix4uni / resolvers

  View on GitHub
  List of Fresh DNS resolvers updates every 1 hour
  ☆17Updated this week
• bjrjk / js-vuln-studies

  View on GitHub
  A collection of in-depth studies authored by me on JavaScript engine vulnerabilities.
  ☆41Feb 6, 2026Updated last week
• Defend-X / crawlex

  View on GitHub
  Crawlex is a powerful Chrome extension designed to assist bug bounty hunters in their work by enabling easy crawling of all possible URLs…
  ☆12May 28, 2023Updated 2 years ago
• BuildHackSecure / request_logger

  View on GitHub
  Application for logging HTTP and DNS Requests
  ☆15May 14, 2021Updated 4 years ago
• rix4uni / nucleihub-templates

  View on GitHub
  This repo collects nuclei template from 600+ github repos, updates every 6 hours.
  ☆34Jan 25, 2026Updated 2 weeks ago
• mhmdiaa / waybackrobots

  View on GitHub
  Enumerate old versions of robots.txt paths using Wayback Machine for content discovery
  ☆57Sep 21, 2023Updated 2 years ago
• ch1y0w0 / ParamScan

  View on GitHub
  ParamScan is a chrome extension for finding reflected parameters in a webpage.
  ☆92Jan 11, 2025Updated last year
• eslam3kl / ShoLister

  View on GitHub
  ShoLister is a tool that collects all available subdomains for specific hostname or organization from Shodan. The tool is designed to be …
  ☆60May 10, 2022Updated 3 years ago
• zh1tro / BetterBugBounty

  View on GitHub
  BetterBugBounty - Here tools are classic, bugs are hunted, and nostalgia is the ultimate weapon!
  ☆29Feb 10, 2024Updated 2 years ago
• JoshMorrison99 / url-based-nuclei-templates

  View on GitHub
  Nuclei templates to run on urls
  ☆17Sep 14, 2023Updated 2 years ago
• ynsmroztas / CVE-2025-4123-Exploit-Tool-Grafana-

  View on GitHub
  CVE-2025-4123 - Grafana Tool
  ☆30Jun 4, 2025Updated 8 months ago
• 0xdead4f / jswatch

  View on GitHub
  Javascript file change monitoring
  ☆17Nov 11, 2025Updated 3 months ago
• xhzeem / paramix

  View on GitHub
  Paramix is a command-line tool for modifying the parameters of a list of URLs from stdin and returns them in stdout.
  ☆17Aug 23, 2024Updated last year