⚔️ Community maintained directory, MCP and API of 3,000+ active bug bounty programs and VDPs
☆415Aug 29, 2026Updated this week
Alternatives and similar repositories for bug-bounties
Users that are interested in bug-bounties are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An automated GitHub Actions-based crawler that fetches and updates public scopes from popular bug bounty platforms (like Hackerone/Bugcro…☆97Updated this week
- A community-powered collection of all known bug bounty platforms, vulnerability disclosure platforms, and crowdsourced security platforms…☆1,105Aug 11, 2026Updated 2 weeks ago
- Community curated list of templates for the nuclei engine to find security vulnerabilities.☆110Nov 24, 2025Updated 9 months ago
- Community curated list of public bug bounty and responsible disclosure programs.☆1,341Updated this week
- Asset inventory of over 800 public bug bounty programs.☆1,603Feb 14, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Vulnerability Research Group☆17Jul 2, 2026Updated last month
- Automate Recon XSS Bug Bounty☆193Mar 9, 2026Updated 5 months ago
- 🎯 Chrome Extension - Passive scanner for Dependency Confusion vulnerabilities in npm/PyPI packages☆40Jan 31, 2026Updated 6 months ago
- A collective list of free APIs for use in software and web development 🚀 (Clone of https://github.com/public-apis/public-apis)☆20Jan 6, 2024Updated 2 years ago
- Passive JavaScript reconnaissance for penetration testers — bridging Burp Suite traffic into structured, AST-based analysis in VSCode.☆36Feb 5, 2026Updated 6 months ago
- all manner of wordlists☆24Jan 19, 2022Updated 4 years ago
- NetFuzzer is a comprehensive network security assessment tool for internal and external network components, including Host Machines, Fire…☆17Aug 4, 2025Updated last year
- This tools used for Automating finding of subdomain, and checking for alive subdomain, and gathering js files from all the subdomain and …☆23Jun 28, 2024Updated 2 years ago
- Swisscom Vulnerability Disclosure Policy & Bug Bounty Programme☆141Aug 21, 2026Updated last week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- burp suite插件☆14Jul 9, 2023Updated 3 years ago
- This is a python wrapper around the amazing KNOXSS API by Brute Logic☆286Mar 6, 2026Updated 5 months ago
- ☆133Jul 15, 2021Updated 5 years ago
- An astronomical collection of space-related cybersecurity tools 🚀✨☆26Jul 9, 2023Updated 3 years ago
- A BurpSuite extension that allows you to use Chromium with PwnFox☆53Aug 2, 2026Updated 3 weeks ago
- Looks for parameters in urls☆35Oct 14, 2024Updated last year
- A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting☆1,895Sep 29, 2025Updated 11 months ago
- It serves as a practical guide for security researchers to identify and test WordPress targets effectively during bug bounty hunting.☆27Jul 19, 2026Updated last month
- 🔎 A really complete domain lookup (RDAP + WHOIS) API for maximum TLD support☆302Aug 22, 2026Updated last week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Burp Suite extension + port-based highlighter: dedupes HTTP history into a live unique-request feed and color-codes attacker/victim traff…☆13Aug 14, 2026Updated 2 weeks ago
- 📬 A quick comparison of private and / or secure email providers☆183Aug 15, 2026Updated 2 weeks ago
- This is my personal repo, which includes bug bounty tips, a collection of tools, one-liners, and other resources I personally prefer whil…☆70Apr 25, 2025Updated last year
- ☆31Jan 19, 2026Updated 7 months ago
- An AI-powered assistant for hackers and security professionals built for Caido☆36Aug 12, 2026Updated 2 weeks ago
- ☆162Jan 22, 2026Updated 7 months ago
- BackupFinder discovers backup files on web servers by generating intelligent patterns.☆111Jul 29, 2025Updated last year
- Scans remote JavaScript files with Trufflehog + Semgrep to detect leaked secrets☆148Jan 21, 2025Updated last year
- ParamScan is a chrome extension for finding reflected parameters in a webpage.☆93Jan 11, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- AI-powered ffuf wrapper☆804Dec 4, 2025Updated 8 months ago
- 🩻 Web Check API - Xray Vision for any Website☆76Sep 9, 2024Updated last year
- Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.☆567Mar 8, 2025Updated last year
- Top disclosed reports from HackerOne☆6,498Aug 17, 2026Updated 2 weeks ago
- HackerOne Notifier is an automated bot that monitors new programs launched on HackerOne and sends Telegram Bot notifications whenever a n…☆22Nov 4, 2025Updated 9 months ago
- An automated GitHub Actions-based crawler that fetches and updates public scopes from popular bug bounty platforms.☆210Apr 21, 2025Updated last year
- Dig through the Wayback Machine and find sensitive or forgotten files exposed by web servers over time.☆31Mar 27, 2025Updated last year