⚔️ Community maintained directory, MCP and API of 3,000+ active bug bounty programs and VDPs
☆273Jul 18, 2026Updated this week
Alternatives and similar repositories for bug-bounties
Users that are interested in bug-bounties are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An automated GitHub Actions-based crawler that fetches and updates public scopes from popular bug bounty platforms (like Hackerone/Bugcro…☆93Updated this week
- Community curated list of templates for the nuclei engine to find security vulnerabilities.☆109Nov 24, 2025Updated 7 months ago
- Asset inventory of over 800 public bug bounty programs.☆1,594Feb 14, 2025Updated last year
- Community curated list of public bug bounty and responsible disclosure programs.☆1,321Updated this week
- Vulnerability Research Group☆17Jul 2, 2026Updated 2 weeks ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Automate Recon XSS Bug Bounty☆190Mar 9, 2026Updated 4 months ago
- 🎯 Chrome Extension - Passive scanner for Dependency Confusion vulnerabilities in npm/PyPI packages☆35Jan 31, 2026Updated 5 months ago
- Passive JavaScript reconnaissance for penetration testers — bridging Burp Suite traffic into structured, AST-based analysis in VSCode.☆36Feb 5, 2026Updated 5 months ago
- all manner of wordlists☆24Jan 19, 2022Updated 4 years ago
- This tools used for Automating finding of subdomain, and checking for alive subdomain, and gathering js files from all the subdomain and …☆23Jun 28, 2024Updated 2 years ago
- Swisscom Vulnerability Disclosure Policy & Bug Bounty Programme☆139Jul 10, 2026Updated last week
- burp suite插件☆14Jul 9, 2023Updated 3 years ago
- This is a python wrapper around the amazing KNOXSS API by Brute Logic☆286Mar 6, 2026Updated 4 months ago
- A community-powered collection of all known bug bounty platforms, vulnerability disclosure platforms, and crowdsourced security platforms…☆1,074Jul 8, 2026Updated last week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆132Jul 15, 2021Updated 5 years ago
- A BurpSuite extension that allows you to use Chromium with PwnFox☆52Dec 23, 2025Updated 6 months ago
- Looks for parameters in urls☆35Oct 14, 2024Updated last year
- It serves as a practical guide for security researchers to identify and test WordPress targets effectively during bug bounty hunting.☆27Updated this week
- ☆31Jan 19, 2026Updated 6 months ago
- An AI-powered assistant for hackers and security professionals built for Caido☆36Jan 24, 2026Updated 5 months ago
- HackerOne Notifier is an automated bot that monitors new programs launched on HackerOne and sends Telegram Bot notifications whenever a n…☆22Nov 4, 2025Updated 8 months ago
- ☆158Jan 22, 2026Updated 5 months ago
- BackupFinder discovers backup files on web servers by generating intelligent patterns.☆109Jul 29, 2025Updated 11 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ParamScan is a chrome extension for finding reflected parameters in a webpage.☆93Jan 11, 2025Updated last year
- Scans remote JavaScript files with Trufflehog + Semgrep to detect leaked secrets☆146Jan 21, 2025Updated last year
- AI-powered ffuf wrapper☆795Dec 4, 2025Updated 7 months ago
- Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.☆567Mar 8, 2025Updated last year
- Dig through the Wayback Machine and find sensitive or forgotten files exposed by web servers over time.☆31Mar 27, 2025Updated last year
- Provides public bug bounty programs in-scope data that offer rewards and monitors public bug bounty programs assets.☆108Updated this week
- ☆13Oct 24, 2024Updated last year
- https://www.nu11secur1ty.com☆23Jul 1, 2026Updated 2 weeks ago
- ai-based domain name generation☆143May 7, 2026Updated 2 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- List of custom Nuclei templates☆16Nov 4, 2023Updated 2 years ago
- The Distributed Scanning Framework for Everybody! Control Your Infrastructure, Scale Your Scanning-On Your Terms. Easily distribute arbit…☆777Jul 13, 2026Updated last week
- ♥☆220Sep 7, 2025Updated 10 months ago
- IP Finder tool, ipfinder collects IP addresses from Shodan search queries.☆17Dec 12, 2025Updated 7 months ago
- CSPBypass.com, a tool designed to help ethical hackers bypass restrictive Content Security Policies (CSP) and exploit XSS (Cross-Site Scr…☆702Jul 7, 2026Updated 2 weeks ago
- Open-source passive reconnaissance and exposure discovery tool that leverages VirusTotal and the Wayback Machine to uncover subdomains, U…☆146Jun 23, 2026Updated 3 weeks ago
- ☆47Aug 12, 2025Updated 11 months ago