A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference
☆44Dec 26, 2020Updated 5 years ago
Alternatives and similar repositories for Awesome-Bugbounty-Writeups
Users that are interested in Awesome-Bugbounty-Writeups are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A list of useful payloads and bypass for Web Application Security and Pentest/CTF☆21Feb 26, 2021Updated 5 years ago
- A collection of hacks and one-off scripts☆18Jun 4, 2021Updated 5 years ago
- Rockyou for web fuzzing☆15Jan 28, 2022Updated 4 years ago
- Notes about the YouTube playlist: Red Team Operations with Cobalt Strike (2019)☆21Feb 16, 2021Updated 5 years ago
- S2-057 poc test☆13Aug 31, 2018Updated 7 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Collection of fuzzing payloads and corpus from all around added as sub modules☆15Mar 26, 2026Updated 4 months ago
- A collection of machine learning algorithms in python☆14May 11, 2021Updated 5 years ago
- Regular Expression Pattern Analyzer☆18Aug 9, 2023Updated 3 years ago
- Notes for Assembly language☆15Jul 28, 2020Updated 6 years ago
- MasTKO is a security tool which detects DNS entries associated with AWS’s EC2 servers susceptible to takeover attack and attempts a takeo…☆11Jun 14, 2023Updated 3 years ago
- Trophy list of zero-day vulnerabilities that I discovered☆13May 6, 2024Updated 2 years ago
- Blank methodology sheet for the OSWE exam☆14Dec 17, 2021Updated 4 years ago
- A project to replicate the functionality of Noah Powers' ServerSetup script, but with error handling and fixed Namecheap API support.☆33Oct 1, 2021Updated 4 years ago
- xsschecker tests endpoints for reflected XSS by injecting payloads and checking responses. It prints vulnerable if the payload is reflect…☆38Nov 3, 2025Updated 9 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A tool for Pentesters & BugHunters to collect IPs of company, server, Operating System & many more☆13Dec 20, 2022Updated 3 years ago
- Template used for my OSCP exam.☆29Aug 9, 2022Updated 4 years ago
- OSCP Prep notes☆14Oct 18, 2020Updated 5 years ago
- Small Helper Library to increase automatically the file descriptors limits for the current process☆25May 12, 2026Updated 2 months ago
- Exploits for different vulnerabilities☆12Nov 29, 2021Updated 4 years ago
- CMB Mobile Google Hacking App☆25Feb 28, 2014Updated 12 years ago
- Related subdomains finder☆27May 18, 2022Updated 4 years ago
- A basic Python program to check Cybersecurity & Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) Catalog☆25Jun 13, 2023Updated 3 years ago
- Test Android Application.☆20Jan 22, 2016Updated 10 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- C# Data Collector for the BloodHound Project, Version 3☆35Dec 28, 2021Updated 4 years ago
- GoTEE - example application☆17Apr 10, 2026Updated 4 months ago
- Chrome extension to extract domains from Google search results - by ofjaaah☆20Dec 24, 2025Updated 7 months ago
- Everything about xss protection technology☆15Oct 22, 2019Updated 6 years ago
- BlizzardWrap - A CLI tool for encoding and decoding (supports several formats/algos)☆16Jun 19, 2021Updated 5 years ago
- ☆18Sep 2, 2021Updated 4 years ago
- A list of interesting payloads, tips and tricks for bug bounty hunters.☆13Oct 26, 2017Updated 8 years ago
- It's an open source restaurant and coffee shop management system.☆10Jan 6, 2023Updated 3 years ago
- Convert an IP into Alternative / Obfuscated versions of itself☆14Aug 13, 2022Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Burp or Burp Suite is a set of tools used for penetration testing of web applications. It is developed by the company named Portswigger.☆24Dec 18, 2024Updated last year
- Fixes errors for apktool in kali linux☆14Nov 11, 2023Updated 2 years ago
- Reads in a list of domains or subdomains and crawls them for references to S3 buckets☆10Nov 21, 2023Updated 2 years ago
- Updated fork of XSStrike: The most advanced XSS scanner.☆24Feb 14, 2023Updated 3 years ago
- A curated list of awesome plugins for Claude☆18Oct 12, 2025Updated 9 months ago
- This is Same as Burpsuite Collaborator | Free | Burpsuite Collaborator Server☆14Jun 27, 2025Updated last year
- Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.☆11Dec 14, 2025Updated 7 months ago