⚔️ Community maintained directory, MCP and API of 3,000+ active bug bounty programs and VDPs
☆386Aug 8, 2026Updated this week
Alternatives and similar repositories for bug-bounties
Users that are interested in bug-bounties are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An automated GitHub Actions-based crawler that fetches and updates public scopes from popular bug bounty platforms (like Hackerone/Bugcro…☆94Updated this week
- A community-powered collection of all known bug bounty platforms, vulnerability disclosure platforms, and crowdsourced security platforms…☆1,089Jul 8, 2026Updated last month
- Community curated list of templates for the nuclei engine to find security vulnerabilities.☆111Nov 24, 2025Updated 8 months ago
- Community curated list of public bug bounty and responsible disclosure programs.☆1,334Updated this week
- Asset inventory of over 800 public bug bounty programs.☆1,599Feb 14, 2025Updated last year
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Vulnerability Research Group☆17Jul 2, 2026Updated last month
- Automate Recon XSS Bug Bounty☆191Mar 9, 2026Updated 5 months ago
- 🎯 Chrome Extension - Passive scanner for Dependency Confusion vulnerabilities in npm/PyPI packages☆37Jan 31, 2026Updated 6 months ago
- Passive JavaScript reconnaissance for penetration testers — bridging Burp Suite traffic into structured, AST-based analysis in VSCode.☆36Feb 5, 2026Updated 6 months ago
- all manner of wordlists☆24Jan 19, 2022Updated 4 years ago
- NetFuzzer is a comprehensive network security assessment tool for internal and external network components, including Host Machines, Fire…☆16Aug 4, 2025Updated last year
- This tools used for Automating finding of subdomain, and checking for alive subdomain, and gathering js files from all the subdomain and …☆23Jun 28, 2024Updated 2 years ago
- Swisscom Vulnerability Disclosure Policy & Bug Bounty Programme☆142Jul 30, 2026Updated last week
- burp suite插件☆14Jul 9, 2023Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- This is a python wrapper around the amazing KNOXSS API by Brute Logic☆286Mar 6, 2026Updated 5 months ago
- ☆133Jul 15, 2021Updated 5 years ago
- A BurpSuite extension that allows you to use Chromium with PwnFox☆52Aug 2, 2026Updated last week
- Looks for parameters in urls☆35Oct 14, 2024Updated last year
- A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting☆1,887Sep 29, 2025Updated 10 months ago
- It serves as a practical guide for security researchers to identify and test WordPress targets effectively during bug bounty hunting.☆27Jul 19, 2026Updated 3 weeks ago
- This is my personal repo, which includes bug bounty tips, a collection of tools, one-liners, and other resources I personally prefer whil…☆70Apr 25, 2025Updated last year
- ☆31Jan 19, 2026Updated 6 months ago
- An AI-powered assistant for hackers and security professionals built for Caido☆36Jan 24, 2026Updated 6 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆161Jan 22, 2026Updated 6 months ago
- BackupFinder discovers backup files on web servers by generating intelligent patterns.☆111Jul 29, 2025Updated last year
- Scans remote JavaScript files with Trufflehog + Semgrep to detect leaked secrets☆147Jan 21, 2025Updated last year
- ParamScan is a chrome extension for finding reflected parameters in a webpage.☆93Jan 11, 2025Updated last year
- AI-powered ffuf wrapper☆802Dec 4, 2025Updated 8 months ago
- Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.☆567Mar 8, 2025Updated last year
- Top disclosed reports from HackerOne☆6,430Jul 18, 2026Updated 3 weeks ago
- HackerOne Notifier is an automated bot that monitors new programs launched on HackerOne and sends Telegram Bot notifications whenever a n…☆22Nov 4, 2025Updated 9 months ago
- Dig through the Wayback Machine and find sensitive or forgotten files exposed by web servers over time.☆31Mar 27, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- ☆13Oct 24, 2024Updated last year
- https://www.nu11secur1ty.com☆23Jul 1, 2026Updated last month
- List of custom Nuclei templates☆16Nov 4, 2023Updated 2 years ago
- ai-based domain name generation☆143May 7, 2026Updated 3 months ago
- ☆533Aug 21, 2025Updated 11 months ago
- A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.☆895Updated this week
- The Distributed Scanning Framework for Everybody! Control Your Infrastructure, Scale Your Scanning-On Your Terms. Easily distribute arbit…☆784Jul 13, 2026Updated 3 weeks ago