A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference
☆44Dec 26, 2020Updated 5 years ago
Alternatives and similar repositories for Awesome-Bugbounty-Writeups
Users that are interested in Awesome-Bugbounty-Writeups are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A list of useful payloads and bypass for Web Application Security and Pentest/CTF☆21Feb 26, 2021Updated 5 years ago
- A collection of hacks and one-off scripts☆18Jun 4, 2021Updated 5 years ago
- Rockyou for web fuzzing☆15Jan 28, 2022Updated 4 years ago
- Notes about the YouTube playlist: Red Team Operations with Cobalt Strike (2019)☆21Feb 16, 2021Updated 5 years ago
- Collection of fuzzing payloads and corpus from all around added as sub modules☆15Mar 26, 2026Updated 3 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- MasTKO is a security tool which detects DNS entries associated with AWS’s EC2 servers susceptible to takeover attack and attempts a takeo…☆11Jun 14, 2023Updated 3 years ago
- Trophy list of zero-day vulnerabilities that I discovered☆13May 6, 2024Updated 2 years ago
- Blank methodology sheet for the OSWE exam☆14Dec 17, 2021Updated 4 years ago
- Comprehensive notes and resources to ace the eLearnSecurity Junior Penetration Testing certificate, helping you master the art of ethical…☆14Nov 27, 2023Updated 2 years ago
- A project to replicate the functionality of Noah Powers' ServerSetup script, but with error handling and fixed Namecheap API support.☆33Oct 1, 2021Updated 4 years ago
- A tool for Pentesters & BugHunters to collect IPs of company, server, Operating System & many more☆13Dec 20, 2022Updated 3 years ago
- OSCP Prep notes☆14Oct 18, 2020Updated 5 years ago
- Standalone Cobalt Strike operation logging Aggressor script for Ghostwriter 2.0+☆39Dec 1, 2025Updated 7 months ago
- Small Helper Library to increase automatically the file descriptors limits for the current process☆25May 12, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Cobalt Strike Get clipboard plugin☆15Aug 11, 2023Updated 2 years ago
- Exploits for different vulnerabilities☆12Nov 29, 2021Updated 4 years ago
- Some Notes because i am too lazy to search☆12May 10, 2021Updated 5 years ago
- Your favourite chest/terminal bursting buddy!☆18Nov 27, 2021Updated 4 years ago
- CMB Mobile Google Hacking App☆25Feb 28, 2014Updated 12 years ago
- Related subdomains finder☆27May 18, 2022Updated 4 years ago
- Test Android Application.☆20Jan 22, 2016Updated 10 years ago
- C# Data Collector for the BloodHound Project, Version 3☆35Dec 28, 2021Updated 4 years ago
- Mobile Pentesting Guide (WIP)☆24May 13, 2020Updated 6 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- ☆18Sep 2, 2021Updated 4 years ago
- It's an open source restaurant and coffee shop management system.☆10Jan 6, 2023Updated 3 years ago
- A list of interesting payloads, tips and tricks for bug bounty hunters.☆13Oct 26, 2017Updated 8 years ago
- Convert an IP into Alternative / Obfuscated versions of itself☆14Aug 13, 2022Updated 3 years ago
- Burp or Burp Suite is a set of tools used for penetration testing of web applications. It is developed by the company named Portswigger.☆24Dec 18, 2024Updated last year
- Reads in a list of domains or subdomains and crawls them for references to S3 buckets☆10Nov 21, 2023Updated 2 years ago
- Fixes errors for apktool in kali linux☆14Nov 11, 2023Updated 2 years ago
- Updated fork of XSStrike: The most advanced XSS scanner.☆24Feb 14, 2023Updated 3 years ago
- A CI/CD-verified list of the internet's known-good public DNS servers (from public-dns.info) Updated weekly!☆38Apr 1, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Project created to practice SDN-based Attack & Defence on Modbus/TCP and HTTP protocols in an ICS network.☆24Jun 10, 2023Updated 3 years ago
- Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.☆11Dec 14, 2025Updated 7 months ago
- BBT - Bug Bounty Tools (examples💡)☆1,904Apr 5, 2024Updated 2 years ago
- 黑魔鬼插件☆19Jan 30, 2021Updated 5 years ago
- A fast and minimal JS endpoint extractor☆386Nov 10, 2024Updated last year
- GoPhish-Deploy is an automated deployment script for the GoPhish phishing framework, configuring it with SSL and secure defaults.☆15Mar 20, 2025Updated last year
- Study about HQL injection exploitation.☆52May 15, 2016Updated 10 years ago