This repository is dedicated to documenting and sharing bug bounty reports. The goal is to help security researchers and developers: Learn from real-world examples of vulnerabilities. Improve their skills in identifying and reporting bugs. Understand common vulnerability types and their impact.
☆13May 20, 2026Updated this week
Alternatives and similar repositories for report-templates
Users that are interested in report-templates are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Bash scripts to automate the burpsuite's certificate configuration and proxying of an Android device for penetration test.☆21May 26, 2025Updated 11 months ago
- PYMI team CTF write-up☆10Mar 26, 2023Updated 3 years ago
- ☆10Aug 27, 2022Updated 3 years ago
- A comprehensive tutorial for running OpenGL apps on containers☆18Mar 15, 2021Updated 5 years ago
- chatGPT prompts and programs generated by chatGPT (OpenAI)☆11Jan 22, 2026Updated 4 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- GraphSpecter is a tool to audit GraphQL API☆21Oct 6, 2025Updated 7 months ago
- XSS PoCs to elevate your alert()☆23May 18, 2023Updated 3 years ago
- Find CVEs that don't have a Detectify modules.☆22Mar 28, 2023Updated 3 years ago
- My Powershell notes☆16Sep 27, 2022Updated 3 years ago
- Template injection allows an attacker to include template code into an existant (or not) template. A template engine makes designing HTML…☆13Jan 30, 2020Updated 6 years ago
- This is a collection of Bug Bounty Tips collected from security researchers / bug hunters on Twitter.☆13Feb 19, 2021Updated 5 years ago
- code obfuscation via control flow flattening☆13Jan 5, 2018Updated 8 years ago
- Installs ADDS and configures a vulnerable domain via a powershell script☆15Jul 13, 2023Updated 2 years ago
- Automatically exported from code.google.com/p/fuzzdb☆13Mar 23, 2015Updated 11 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ☆16Aug 25, 2025Updated 8 months ago
- This tools used for Automating finding of subdomain, and checking for alive subdomain, and gathering js files from all the subdomain and …☆22Jun 28, 2024Updated last year
- Script to automate bypassing 403 forbidden status code☆24Jun 18, 2025Updated 11 months ago
- Interactive reference guide for pentesting DevOps pipelines. 60+ tools with attack vectors. Credits: Tom & Colbert from Accenture (Fusion…☆42Oct 8, 2025Updated 7 months ago
- ☆25Nov 16, 2023Updated 2 years ago
- Prod Forge is an open-source reference that shows how to build and operate a production-ready system: AI-assisted development, quality ga…☆221Updated this week
- this is an guide for people aspiring to enter the world of cybersecurity☆34Apr 17, 2024Updated 2 years ago
- An Incredibly Annoying, Insufferable Authentication Implementation☆31Apr 17, 2024Updated 2 years ago
- A production-grade NestJS modular monolith E-commerce API 🛒. Built as a reference implementation demonstrating Domain-Driven Design (DDD…☆41May 16, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Challenge Python☆19Apr 26, 2023Updated 3 years ago
- ☆23Aug 9, 2025Updated 9 months ago
- ☆17Oct 15, 2024Updated last year
- A prisma generator that turns your Postgres Database into a realtime Database and make it easy to subscribe to changes from Prisma Client…☆14Nov 16, 2024Updated last year
- automating the zig release process☆11Nov 19, 2025Updated 6 months ago
- Bash Script to Hunt all the targets/Subdomains from Chaos by Project Discovery Team☆36Sep 26, 2020Updated 5 years ago
- Cover Photo jQuery plugin like Facebook☆20Nov 15, 2012Updated 13 years ago
- 🚩 A cheatsheet of useful tools and shell scripts that come in handy in capture the flag contests.☆47Feb 2, 2018Updated 8 years ago
- ☆33Oct 28, 2023Updated 2 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Round switch ToggleColumn for Yii2 GridView☆10Oct 3, 2018Updated 7 years ago
- Proof of concept code to exploit CVE-2020-12116: Unauthenticated arbitrary file read on ManageEngine OpManger.☆31May 8, 2020Updated 6 years ago
- ☆12Oct 10, 2023Updated 2 years ago
- https://codeberg.org/ccxvii/djvudec☆14Aug 13, 2025Updated 9 months ago
- NGINX Api Gateway☆11Apr 13, 2020Updated 6 years ago
- Sending file through ICMP packet using PING☆22Jul 18, 2024Updated last year
- Data Science project involving all Pokémon data: from data gathering (web scraping) to machine learning techniques, including data cleani…☆40Feb 21, 2025Updated last year