⚔️ Community maintained directory, MCP and API of 3,000+ active bug bounty programs and VDPs
☆440Oct 8, 2026Updated this week
Alternatives and similar repositories for bug-bounties
Users that are interested in bug-bounties are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An automated GitHub Actions-based crawler that fetches and updates public scopes from popular bug bounty platforms (like Hackerone/Bugcro…☆101Updated this week
- A community-powered collection of all known bug bounty platforms, vulnerability disclosure platforms, and crowdsourced security platforms…☆1,128Sep 14, 2026Updated 3 weeks ago
- Community curated list of templates for the nuclei engine to find security vulnerabilities.☆110Nov 24, 2025Updated 10 months ago
- Community curated list of public bug bounty and responsible disclosure programs.☆1,355Sep 14, 2026Updated 3 weeks ago
- Asset inventory of over 800 public bug bounty programs.☆1,614Feb 14, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Automate Recon XSS Bug Bounty☆196Mar 9, 2026Updated 7 months ago
- A collective list of free APIs for use in software and web development 🚀 (Clone of https://github.com/public-apis/public-apis)☆20Jan 6, 2024Updated 2 years ago
- Vulnerability Research Group☆19Jul 2, 2026Updated 3 months ago
- all manner of wordlists☆23Jan 19, 2022Updated 4 years ago
- NetFuzzer is a comprehensive network security assessment tool for internal and external network components, including Host Machines, Fire…☆17Aug 4, 2025Updated last year
- This tools used for Automating finding of subdomain, and checking for alive subdomain, and gathering js files from all the subdomain and …☆23Jun 28, 2024Updated 2 years ago
- Swisscom Vulnerability Disclosure Policy & Bug Bounty Programme☆143Sep 8, 2026Updated last month
- 🎯 Chrome Extension - Passive scanner for Dependency Confusion vulnerabilities in npm/PyPI packages☆43Jan 31, 2026Updated 8 months ago
- burp suite插件☆14Jul 9, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- This is a python wrapper around the amazing KNOXSS API by Brute Logic☆285Mar 6, 2026Updated 7 months ago
- ☆133Jul 15, 2021Updated 5 years ago
- Passive JavaScript reconnaissance for penetration testers — bridging Burp Suite traffic into structured, AST-based analysis in VSCode.☆36Feb 5, 2026Updated 8 months ago
- An astronomical collection of space-related cybersecurity tools 🚀✨☆26Jul 9, 2023Updated 3 years ago
- Looks for parameters in urls☆35Oct 14, 2024Updated last year
- 🔎 A really complete domain lookup (RDAP + WHOIS) API for maximum TLD support☆317Updated this week
- ☆204Jan 22, 2026Updated 8 months ago
- A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting☆1,916Sep 29, 2025Updated last year
- 📬 A quick comparison of private and / or secure email providers☆184Oct 1, 2026Updated last week
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- This is my personal repo, which includes bug bounty tips, a collection of tools, one-liners, and other resources I personally prefer whil…☆69Apr 25, 2025Updated last year
- ☆31Jan 19, 2026Updated 8 months ago
- ParamScan is a chrome extension for finding reflected parameters in a webpage.☆92Jan 11, 2025Updated last year
- A BurpSuite extension that allows you to use Chromium with PwnFox☆54Aug 2, 2026Updated 2 months ago
- 🩻 Web Check API - Xray Vision for any Website☆77Sep 9, 2024Updated 2 years ago
- Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.☆565Mar 8, 2025Updated last year
- Top disclosed reports from HackerOne☆6,595Sep 12, 2026Updated 3 weeks ago
- AI-powered ffuf wrapper☆811Dec 4, 2025Updated 10 months ago
- BackupFinder discovers backup files on web servers by generating intelligent patterns.☆111Jul 29, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Scans remote JavaScript files with Trufflehog + Semgrep to detect leaked secrets☆148Jan 21, 2025Updated last year
- It serves as a practical guide for security researchers to identify and test WordPress targets effectively during bug bounty hunting.☆27Jul 19, 2026Updated 2 months ago
- An automated GitHub Actions-based crawler that fetches and updates public scopes from popular bug bounty platforms.☆210Apr 21, 2025Updated last year
- Dig through the Wayback Machine and find sensitive or forgotten files exposed by web servers over time.☆31Mar 27, 2025Updated last year
- ☆13Oct 24, 2024Updated last year
- A command line tool that reads from stdin and strips ANSI color codes from the input.☆10Feb 11, 2023Updated 3 years ago
- Burp Suite extension + port-based highlighter: dedupes HTTP history into a live unique-request feed and color-codes attacker/victim traff…☆14Aug 14, 2026Updated last month