List of domains in scope for bug bounties (HackerOne, Bugcrowd, etc.)
☆75May 23, 2021Updated 5 years ago
Alternatives and similar repositories for bounty-domains
Users that are interested in bounty-domains are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Automatic finder for subdomains vulnerable to takeover. Written in Go, based on @haccer's subjack.☆151Jun 29, 2020Updated 6 years ago
- It contain google dork to find the wsdl file.☆13May 27, 2020Updated 6 years ago
- Nuclei templates written by Blaze Information Security☆10Dec 28, 2021Updated 4 years ago
- HackerOne "in scope" domains☆533Updated this week
- A list of interesting payloads, tips and tricks for bug bounty hunters.☆13Oct 26, 2017Updated 9 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- An entry level resource to learning bug bounty.☆28Apr 11, 2018Updated 8 years ago
- My personal collection of nuclei templates made for fuzzing.☆29Sep 6, 2024Updated 2 years ago
- nuclei-templates-cutomer☆10Apr 6, 2026Updated 6 months ago
- Discovery Header Bug Bounty to DoD☆48Aug 20, 2021Updated 5 years ago
- Brute force AWS bucket finder☆60Dec 8, 2022Updated 3 years ago
- Open Redirect scanner - (out of date)☆28Nov 27, 2022Updated 3 years ago
- The tools I have programmed to help me with bugbounty's☆115Oct 10, 2019Updated 7 years ago
- Tools that i use n love :D☆18Jun 5, 2020Updated 6 years ago
- Insecure Deserialization, PDF and lab☆18Nov 19, 2019Updated 6 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ☆10Sep 7, 2026Updated last month
- Web Security Checklist (Bug Bounty & Pentesting)☆177Jun 15, 2025Updated last year
- Reversing Citrix Gateway for XSS☆17Jul 3, 2023Updated 3 years ago
- Burp extension to generate multi-step CSRF POC.☆31Sep 23, 2019Updated 7 years ago
- Match and Replace script used to automatically generate JSON option file to BurpSuite☆212May 13, 2019Updated 7 years ago
- this repo contains all nuclei templates for particular vulnerability that i used mosty while hunting..☆14Aug 15, 2024Updated 2 years ago
- Postman Integration is an extension for burp to generate Postman collection fomat json file.☆21Sep 7, 2022Updated 4 years ago
- ☆12Oct 8, 2022Updated 4 years ago
- An Android SSL Pinning Remover tool for Security research and Bug Bounty☆43Jun 1, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Bug Bounty Recon Automation Script -- Scan AWS IP Range Certs for Matching FQDN☆27Sep 17, 2021Updated 5 years ago
- Here we are gather all Nuclei Templates that are Publically available.☆15Apr 28, 2024Updated 2 years ago
- ☆28Dec 13, 2023Updated 2 years ago
- My bug bounty notes☆35Apr 10, 2021Updated 5 years ago
- This Repo clone and organize all nuclei templates that are found in Github. { due to git runner time limit stopped the workflow, ping me …☆13Feb 28, 2025Updated last year
- Bug Bounty Tools☆34Jul 2, 2020Updated 6 years ago
- A list of Awesome Bughunting oneliners , collected from the various sources☆69Aug 14, 2023Updated 3 years ago
- A curated list of amazingly bug bounty tips from security researchers around the world.☆108Mar 14, 2019Updated 7 years ago
- A Python based scanner to find potential SSRF parameters in a web application.☆69Jul 12, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Yet another subdomain finder☆214Jan 20, 2020Updated 6 years ago
- All Nuclei Templates☆99Updated this week
- Nuclei Templates☆14Jan 13, 2023Updated 3 years ago
- XSS scanner that detects Cross-Site Scripting vulnerabilities in website by injecting malicious scripts☆128Aug 9, 2020Updated 6 years ago
- List of Google Dorks for sites that have responsible disclosure program / bug bounty program☆23Sep 8, 2019Updated 7 years ago
- Governance, Risk and Compliance (GRC), Information Security, Blockchain Security, Blockchain Forensics☆10Aug 28, 2022Updated 4 years ago
- nodecraw allows you to perform web crawling on specified URLs. It utilizes various modules and libraries to crawl web pages, extract info…☆14Aug 25, 2024Updated 2 years ago