A list of edge cases that occur in bug bounty programs, conversations on how they should be handled. The goal is to standardise the way that specific situations are handled in bug bounties.
☆238Feb 1, 2022Updated 4 years ago
Alternatives and similar repositories for bug-bounty-standards
Users that are interested in bug-bounty-standards are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This is a Burp Suite extension that allows users to easily add web addresses to the Burp Suite scope.☆96Jan 2, 2025Updated last year
- 🏵 Gee is tool of stdin to each files and stdout. It is similar to the tee command, but there are more functions for convenience. In addi…☆86Sep 30, 2025Updated last year
- Repository to house markdown templates for researchers☆228Jul 24, 2026Updated 3 months ago
- Find endpoints on GitHub.☆228Mar 28, 2023Updated 3 years ago
- Burp Suite plugin to copy regex matches from selected requests and/or responses to the clipboard.☆35Feb 12, 2022Updated 4 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!☆1,108Aug 5, 2026Updated 3 months ago
- Rockyou for web fuzzing☆3,288Sep 22, 2026Updated last month
- declutters url lists for crawling/pentesting☆1,601Feb 23, 2025Updated last year
- Scope aggregation tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!☆1,448Sep 2, 2026Updated 2 months ago
- XSS payloads designed to turn alert(1) into P1☆1,405Sep 12, 2023Updated 3 years ago
- "Can I take over DNS?" — a list of DNS providers and how to claim vulnerable domains.☆1,108Aug 13, 2026Updated 2 months ago
- Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.☆6,369Aug 7, 2026Updated 3 months ago
- ☆748Jun 26, 2024Updated 2 years ago
- Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist☆1,541Jan 8, 2026Updated 9 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- De-clutter a list of URLs☆389Mar 8, 2026Updated 7 months ago
- 🍪 CookieMonster helps you detect and abuse vulnerable implementations of stateless sessions.☆1,018Jan 10, 2025Updated last year
- A repository that includes all the important wordlists used while bug hunting.☆1,438Mar 11, 2023Updated 3 years ago
- Accept URLs on stdin, replace all query string values with a user-supplied value☆885Nov 23, 2022Updated 3 years ago
- Extract URLs, paths, secrets, and other interesting bits from JavaScript☆1,971May 22, 2024Updated 2 years ago
- A tool to check a bunch of URLs that contain reflecting params.☆598Aug 4, 2024Updated 2 years ago
- Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one pl…☆1,052Jun 6, 2026Updated 5 months ago
- Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …☆761Jul 10, 2026Updated 3 months ago
- Tips For Bug Bounty Hunters☆85Jul 16, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Useful "Match and Replace" burpsuite rules☆373Sep 26, 2023Updated 3 years ago
- A reverse whois tool based on Whoxy API.☆175Mar 31, 2024Updated 2 years ago
- This is go CLI tool for send fast Multiple get HTTP request.☆290Jan 20, 2023Updated 3 years ago
- Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens…☆5,585Oct 21, 2026Updated 2 weeks ago
- Gotator is a tool to generate DNS wordlists through permutations.☆540Jul 17, 2022Updated 4 years ago
- ☆536Jul 16, 2021Updated 5 years ago
- Awesome Bug bounty builder Project☆678Feb 15, 2023Updated 3 years ago
- BBT - Bug Bounty Tools (examples💡)☆1,912Apr 5, 2024Updated 2 years ago
- Turns any junk text into a usable wordlist for brute-forcing.☆229Aug 5, 2026Updated 3 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!☆2,790Jun 11, 2026Updated 4 months ago
- goverview - Get an overview of the list of URLs☆141Dec 5, 2025Updated 11 months ago
- Random Tools for Bug Bounty☆151Oct 15, 2022Updated 4 years ago
- Automated & Manual Wordlists provided by Assetnote☆1,753Feb 27, 2026Updated 8 months ago
- Repo for hosting rayder workflows☆66Aug 31, 2023Updated 3 years ago
- Nuclei Templates to reproduce Cracking the lens's Research☆132Jan 8, 2022Updated 4 years ago
- Host Header Injection Checker☆86Mar 2, 2022Updated 4 years ago