A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference
☆44Dec 26, 2020Updated 5 years ago
Alternatives and similar repositories for Awesome-Bugbounty-Writeups
Users that are interested in Awesome-Bugbounty-Writeups are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A list of useful payloads and bypass for Web Application Security and Pentest/CTF☆22Feb 26, 2021Updated 5 years ago
- Rockyou for web fuzzing☆15Jan 28, 2022Updated 4 years ago
- Notes about the YouTube playlist: Red Team Operations with Cobalt Strike (2019)☆21Feb 16, 2021Updated 5 years ago
- MasTKO is a security tool which detects DNS entries associated with AWS’s EC2 servers susceptible to takeover attack and attempts a takeo…☆11Jun 14, 2023Updated 2 years ago
- Trophy list of zero-day vulnerabilities that I discovered☆13May 6, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Blank methodology sheet for the OSWE exam☆13Dec 17, 2021Updated 4 years ago
- xsschecker tests endpoints for reflected XSS by injecting payloads and checking responses. It prints vulnerable if the payload is reflect…☆37Nov 3, 2025Updated 6 months ago
- Training for SQL injections☆36Feb 3, 2019Updated 7 years ago
- A project to replicate the functionality of Noah Powers' ServerSetup script, but with error handling and fixed Namecheap API support.☆33Oct 1, 2021Updated 4 years ago
- A tool for Pentesters & BugHunters to collect IPs of company, server, Operating System & many more☆13Dec 20, 2022Updated 3 years ago
- OSCP Prep notes☆14Oct 18, 2020Updated 5 years ago
- Template used for my OSCP exam.☆29Aug 9, 2022Updated 3 years ago
- CMB Mobile Google Hacking App☆25Feb 28, 2014Updated 12 years ago
- Your favourite chest/terminal bursting buddy!☆18Nov 27, 2021Updated 4 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Exploits for different vulnerabilities☆12Nov 29, 2021Updated 4 years ago
- Cobalt Strike Get clipboard plugin☆15Aug 11, 2023Updated 2 years ago
- Small Helper Library to increase automatically the file descriptors limits for the current process☆25May 12, 2026Updated last week
- Some Notes because i am too lazy to search☆13May 10, 2021Updated 5 years ago
- Command-line tool to monitor Redis in real-time☆13Apr 25, 2018Updated 8 years ago
- BBT - Bug Bounty Tools (examples💡)☆1,894Apr 5, 2024Updated 2 years ago
- OSCP Preperation☆14Aug 12, 2021Updated 4 years ago
- Some wordlists collected form github to all bug bounty hunters.☆42Jul 30, 2021Updated 4 years ago
- Related subdomains finder☆28May 18, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Everything about xss protection technology☆14Oct 22, 2019Updated 6 years ago
- Test Android Application.☆20Jan 22, 2016Updated 10 years ago
- This is Same as Burpsuite Collaborator | Free | Burpsuite Collaborator Server☆13Jun 27, 2025Updated 10 months ago
- Mobile Pentesting Guide (WIP)☆25May 13, 2020Updated 6 years ago
- A CI/CD-verified list of the internet's known-good public DNS servers (from public-dns.info) Updated weekly!☆36Apr 1, 2026Updated last month
- C# Data Collector for the BloodHound Project, Version 3☆37Dec 28, 2021Updated 4 years ago
- ☆17Sep 2, 2021Updated 4 years ago
- It's an open source restaurant and coffee shop management system.☆10Jan 6, 2023Updated 3 years ago
- Reads in a list of domains or subdomains and crawls them for references to S3 buckets☆10Nov 21, 2023Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Burp or Burp Suite is a set of tools used for penetration testing of web applications. It is developed by the company named Portswigger.☆24Dec 18, 2024Updated last year
- A list of interesting payloads, tips and tricks for bug bounty hunters.☆13Oct 26, 2017Updated 8 years ago
- Convert an IP into Alternative / Obfuscated versions of itself☆14Aug 13, 2022Updated 3 years ago
- Updated fork of XSStrike: The most advanced XSS scanner.☆24Feb 14, 2023Updated 3 years ago
- BlizzardWrap - A CLI tool for encoding and decoding (supports several formats/algos)☆16Jun 19, 2021Updated 4 years ago
- Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.☆11Dec 14, 2025Updated 5 months ago
- Wordlists for Fuzzing☆131Oct 12, 2020Updated 5 years ago