A list of edge cases that occur in bug bounty programs, conversations on how they should be handled. The goal is to standardise the way that specific situations are handled in bug bounties.
☆238Feb 1, 2022Updated 4 years ago
Alternatives and similar repositories for bug-bounty-standards
Users that are interested in bug-bounty-standards are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This is a Burp Suite extension that allows users to easily add web addresses to the Burp Suite scope.☆97Jan 2, 2025Updated last year
- Repository to house markdown templates for researchers☆225Jun 23, 2026Updated 3 weeks ago
- 🏵 Gee is tool of stdin to each files and stdout. It is similar to the tee command, but there are more functions for convenience. In addi…☆86Sep 30, 2025Updated 9 months ago
- Burp Suite plugin to copy regex matches from selected requests and/or responses to the clipboard.☆35Feb 12, 2022Updated 4 years ago
- De-clutter a list of URLs☆391Mar 8, 2026Updated 4 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Rockyou for web fuzzing☆3,199Mar 11, 2026Updated 4 months ago
- Find endpoints on GitHub.☆219Mar 28, 2023Updated 3 years ago
- Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist☆1,523Jan 8, 2026Updated 6 months ago
- ☆752Jun 26, 2024Updated 2 years ago
- Automated & Manual Wordlists provided by Assetnote☆1,707Feb 27, 2026Updated 4 months ago
- "Can I take over DNS?" — a list of DNS providers and how to claim vulnerable domains.☆1,102Mar 3, 2025Updated last year
- declutters url lists for crawling/pentesting☆1,581Feb 23, 2025Updated last year
- Useful "Match and Replace" burpsuite rules☆374Sep 26, 2023Updated 2 years ago
- A tool to check a bunch of URLs that contain reflecting params.☆602Aug 4, 2024Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Repo for hosting rayder workflows☆64Aug 31, 2023Updated 2 years ago
- Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!☆1,091Mar 24, 2026Updated 3 months ago
- This exention enables autocompletion within BurpSuite Repeater/Intruder tabs.☆167Mar 5, 2021Updated 5 years ago
- Extract URLs, paths, secrets, and other interesting bits from JavaScript☆1,869May 22, 2024Updated 2 years ago
- Scope aggregation tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!☆1,419Jul 6, 2026Updated 2 weeks ago
- Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.☆6,290Aug 14, 2024Updated last year
- Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one pl…☆1,045Jun 6, 2026Updated last month
- A reverse whois tool based on Whoxy API.☆172Mar 31, 2024Updated 2 years ago
- Awesome Bug bounty builder Project☆676Feb 15, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Finding XSS during recon☆270Sep 13, 2022Updated 3 years ago
- ☆23Mar 29, 2022Updated 4 years ago
- XSS payloads designed to turn alert(1) into P1☆1,401Sep 12, 2023Updated 2 years ago
- A Burp Suite extension for identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violati…☆401May 28, 2026Updated last month
- Scanner for Cross-Site WebSocket Hijacking☆40Feb 19, 2026Updated 5 months ago
- TLDs finder — check domain name availability across all valid top-level domains.☆108Oct 20, 2024Updated last year
- Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!☆2,698Jun 11, 2026Updated last month
- BBT - Bug Bounty Tools (examples💡)☆1,904Apr 5, 2024Updated 2 years ago
- A tool to quickly do keyword searches over Gitlab and Github for OSINT & bug bounty recon☆247Oct 20, 2023Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A repository that includes all the important wordlists used while bug hunting.☆1,421Mar 11, 2023Updated 3 years ago
- A tool to fastly get all javascript sources/files☆885Jul 4, 2025Updated last year
- Accept URLs on stdin, replace all query string values with a user-supplied value☆882Nov 23, 2022Updated 3 years ago
- ☆12Feb 18, 2022Updated 4 years ago
- Easily schedule commands to run multiple times at set intervals (like a cronjob, but with one command)☆85Apr 5, 2021Updated 5 years ago
- Jeeves SQLI Finder☆215May 13, 2022Updated 4 years ago
- Find related domains of a given domain.☆107Jun 5, 2026Updated last month