bounty collection
☆46Sep 1, 2024Updated last year
Alternatives and similar repositories for bug-bounty
Users that are interested in bug-bounty are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Passively check for XSS character encodings☆20Mar 9, 2026Updated 5 months ago
- HuntersEye is designed for Bug Bounty Hunters, and Security Researchers to monitor new subdomains and certificates for specified domains.…☆21Dec 29, 2023Updated 2 years ago
- JsValidator is a tool created for validating the JS files after crawlling it from waybackurls☆21Mar 13, 2023Updated 3 years ago
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆10Sep 22, 2023Updated 2 years ago
- My gfPatterns☆15Aug 31, 2021Updated 4 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Multi-threading wget golang☆11Mar 13, 2024Updated 2 years ago
- header-fuzz allows you to fuzz any HTTP header with a wordlist and evaluate success or failure based on the returning HTTP status code.☆16Apr 15, 2020Updated 6 years ago
- Bcheck scripts for Burp☆31Aug 7, 2024Updated 2 years ago
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆48Mar 4, 2024Updated 2 years ago
- Describe how to use ffuf different options with examples☆14Jun 13, 2022Updated 4 years ago
- Bug bounty API dashboard aggregating data from HackerOne, Bugcrowd and other platforms☆42Aug 13, 2023Updated 3 years ago
- XSSMaze is a web service designed to test and improve the performance of security testing tools by providing various cases of XSS vulnera…☆37Aug 2, 2026Updated last week
- Subdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second修复内存溢出等bug☆15Nov 25, 2023Updated 2 years ago
- Magic Header Blind Xss tool (deliver blind xss payloads in request headers).☆25May 30, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- My own Custom nuclei templates☆26Jun 23, 2026Updated last month
- ☆22Jun 24, 2024Updated 2 years ago
- This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.☆92Dec 29, 2023Updated 2 years ago
- Automated Recon Tool Installer☆16Jun 29, 2022Updated 4 years ago
- A tool which allows HackerOne researchers to download their reports into a local, indexed, and searchable repository☆18Sep 29, 2022Updated 3 years ago
- This repository contains the best fuzzing wordlist files☆34Dec 2, 2024Updated last year
- Finding XSS during recon☆270Sep 13, 2022Updated 3 years ago
- ShoLister is a tool that collects all available subdomains for specific hostname or organization from Shodan. The tool is designed to be …☆13May 10, 2022Updated 4 years ago
- ☆38Nov 27, 2020Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Advanced Tool To Scan And Exploit Local File Inclusion (LFI) Vulnerabilities☆41Mar 24, 2026Updated 4 months ago
- Web cache poisoning vulnerability scanner.☆74May 5, 2022Updated 4 years ago
- Ffuf output browser☆38Feb 25, 2023Updated 3 years ago
- black Ip lists, dorks-collection☆17Aug 1, 2026Updated 2 weeks ago
- BurpSuite extension to convert requests into bcheck scripts☆34Jul 18, 2023Updated 3 years ago
- Acunetix automate telegram bot☆12Jul 19, 2024Updated 2 years ago
- Bug Hunting Handbook☆12Aug 11, 2022Updated 4 years ago
- Wordlist for web fuzzing, made from a variety of reliable sources including: result from my pentests, git.rip, ChatGPT, Lex, nuclei templ…☆101Nov 6, 2025Updated 9 months ago
- Drupal Core PostgreSQL SQL Injection PoC - CVE-2026-9082. Ethical PoC for the Drupal vulnerability allowing anonymous SQL injection throu…☆23May 21, 2026Updated 2 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Reflected XSS Payload List for Vue.js (2 & 3)☆15Jan 12, 2023Updated 3 years ago
- A .git/ folder disclosure exploit☆22Jul 14, 2019Updated 7 years ago
- ☆13Nov 25, 2024Updated last year
- Track HackerOne reports and leaderboard changes on programs through a Discord webhook☆34Jan 31, 2025Updated last year
- A python script to automatically dump files and source code of a Symfony server in debug mode.☆13Feb 11, 2025Updated last year
- A Burp extension to show the Collaborator client in a tab☆24Dec 23, 2022Updated 3 years ago
- Hello Internet; in this playlist, we will together create a car tracking system using PHP & Mysql technology. The idea is to design a ma…☆13May 30, 2023Updated 3 years ago