Repositories, Links, Payloads, Blogs, Tools, etc.. which I think might be useful for pentesting and bug bounty
☆51Jan 6, 2026Updated 6 months ago
Alternatives and similar repositories for awesome-repos
Users that are interested in awesome-repos are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A collection of GitHub dorks for bug bounty hunters☆18Jun 24, 2022Updated 4 years ago
- Real world bug bounty wordlists☆119Jul 20, 2023Updated 3 years ago
- ☆10Jan 25, 2023Updated 3 years ago
- ☆15May 6, 2023Updated 3 years ago
- S3 Recon tips and tricks collected from different resources,Sorry if i missed to mention all resources owners☆28Nov 13, 2021Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A complete, beginner-friendly bug bounty roadmap that takes you from zero experience to earning your first bounty.☆1,420Sep 5, 2025Updated 10 months ago
- IP Finder tool, ipfinder collects IP addresses from Shodan search queries.☆17Dec 12, 2025Updated 7 months ago
- ☆12Jun 16, 2021Updated 5 years ago
- 🎯 SQL Injection Payload List☆12Jun 6, 2021Updated 5 years ago
- Hand-made Improved Nuclei Templates!🪴☆13Jun 12, 2023Updated 3 years ago
- Scripts/tools to destroy things☆16Sep 13, 2021Updated 4 years ago
- Passive JavaScript reconnaissance for penetration testers — bridging Burp Suite traffic into structured, AST-based analysis in VSCode.☆36Feb 5, 2026Updated 5 months ago
- SCIENCE, HACKING AND SECURITY☆14May 23, 2022Updated 4 years ago
- This repo contains my pentesting template that I have used in PWK and for current assessments. The template has been formatted to be used…☆25Apr 19, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆38Dec 10, 2023Updated 2 years ago
- Script to read input from stdin and encode it☆19Aug 23, 2023Updated 2 years ago
- A repo for tools, utils, and wrappers that are to small to put in their own repo.☆23Mar 18, 2023Updated 3 years ago
- ☆32Dec 30, 2022Updated 3 years ago
- A powerful command-line interface for interacting with the [RapidDNS API](https://rapiddns.io/help/api). This tool allows you to perform …☆35Feb 22, 2026Updated 5 months ago
- When it comes to exploiting web application security, this is a methodology. Enumeration and Networking guidelines are also listed to hel…☆25Nov 18, 2025Updated 8 months ago
- A collection of notes, checklists, writeups on bug bounty hunting and web application security.☆153Jun 30, 2022Updated 4 years ago
- Simple XSS vulnerability checker tool very useful with xsschecker.☆28Nov 21, 2025Updated 8 months ago
- These Repositories About My Recon Methodology To Give Some Idea For Other Hunter How To Do Recon☆47Oct 15, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Jeeves SQLI Finder☆215May 13, 2022Updated 4 years ago
- Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests w…☆638Jul 12, 2026Updated 2 weeks ago
- Intentionally Vulnerable Nodejs Application & APIs☆21Apr 9, 2022Updated 4 years ago
- ☆752Jun 26, 2024Updated 2 years ago
- All Type of Payloads☆140Mar 26, 2024Updated 2 years ago
- Some wordlists collected form github to all bug bounty hunters.☆48Jul 30, 2021Updated 4 years ago
- Useful Github Dorks for BugBounty -☆71Jan 1, 2023Updated 3 years ago
- This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contai…☆538Dec 4, 2024Updated last year
- Turns a list of URLs into hostnames.☆16Feb 9, 2026Updated 5 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A collection of in-depth studies authored by me on JavaScript engine vulnerabilities.☆49Feb 6, 2026Updated 5 months ago
- Fast Bug Bounty Script☆41Jan 15, 2025Updated last year
- A collection of Bug Bounty Tips collected from GitHub to all bug bounty hunters☆32Dec 12, 2023Updated 2 years ago
- ☆14Nov 18, 2021Updated 4 years ago
- Reverse shell based on https://scriptdotsh.com/index.php/2018/09/04/malware-on-steroids-part-1-simple-cmd-reverse-shell/☆32Mar 2, 2019Updated 7 years ago
- A Web Application Penetration Testing Framework build in React with an Node/Express/MongoDB back-end☆25Mar 7, 2023Updated 3 years ago
- ☆634Dec 19, 2025Updated 7 months ago