A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference
☆43Dec 26, 2020Updated 5 years ago
Alternatives and similar repositories for Awesome-Bugbounty-Writeups
Users that are interested in Awesome-Bugbounty-Writeups are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A list of useful payloads and bypass for Web Application Security and Pentest/CTF☆19Feb 26, 2021Updated 5 years ago
- Web path scanner☆11Apr 1, 2021Updated 5 years ago
- A collection of hacks and one-off scripts☆18Jun 4, 2021Updated 5 years ago
- Rockyou for web fuzzing☆15Jan 28, 2022Updated 4 years ago
- Collection of fuzzing payloads and corpus from all around added as sub modules☆15Oct 23, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Takes a list of domains as the input, checks if they have a security.txt, outputs the results.☆16May 15, 2020Updated 6 years ago
- OSCP Prep notes☆16Oct 18, 2020Updated 6 years ago
- A Python program to scrape secrets from GitHub through usage of a large repository of dorks.☆14Jan 28, 2021Updated 5 years ago
- Blank methodology sheet for the OSWE exam☆14Dec 17, 2021Updated 4 years ago
- Public Exploits☆10Apr 6, 2021Updated 5 years ago
- Field guide to gather low-hanging fruits☆16Mar 20, 2025Updated last year
- A project to replicate the functionality of Noah Powers' ServerSetup script, but with error handling and fixed Namecheap API support.☆33Oct 1, 2021Updated 5 years ago
- Malware campaigns and APTs research by BlackArrow☆19Apr 30, 2020Updated 6 years ago
- Small Helper Library to increase automatically the file descriptors limits for the current process☆25Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆20Jan 14, 2026Updated 9 months ago
- Exploits for different vulnerabilities☆12Nov 29, 2021Updated 4 years ago
- Some Notes because i am too lazy to search☆13May 10, 2021Updated 5 years ago
- BBT - Bug Bounty Tools (examples💡)☆1,912Apr 5, 2024Updated 2 years ago
- OSCP Preperation☆13Aug 12, 2021Updated 5 years ago
- This repository provides a comprehensive Digital Footprint Checklist to help individuals manage their online presence and enhance privacy…☆19Dec 25, 2024Updated last year
- A fast and minimal JS endpoint extractor☆394Nov 10, 2024Updated last year
- Your favourite chest/terminal bursting buddy!☆18Nov 27, 2021Updated 4 years ago
- Cobalt Strike Get clipboard plugin☆16Aug 11, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Mobile Pentesting Guide (WIP)☆23May 13, 2020Updated 6 years ago
- Related subdomains finder☆27May 18, 2022Updated 4 years ago
- Standalone Cobalt Strike operation logging Aggressor script for Ghostwriter 2.0+☆38Dec 1, 2025Updated 11 months ago
- Updated fork of XSStrike: The most advanced XSS scanner.☆23Feb 14, 2023Updated 3 years ago
- Secrets detection based on regular expressions.☆23Sep 8, 2026Updated last month
- 黑魔鬼插件☆19Jan 30, 2021Updated 5 years ago
- BlizzardWrap - A CLI tool for encoding and decoding (supports several formats/algos)☆16Jun 19, 2021Updated 5 years ago
- Test Android Application.☆20Jan 22, 2016Updated 10 years ago
- 🔍 gowitness - a golang, web screenshot utility using Chrome Headless☆13May 31, 2019Updated 7 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A list of interesting payloads, tips and tricks for bug bounty hunters.☆13Oct 26, 2017Updated 9 years ago
- ☆18Sep 2, 2021Updated 5 years ago
- Everything about xss protection technology☆15Oct 22, 2019Updated 7 years ago
- Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.☆11Dec 14, 2025Updated 10 months ago
- Reads in a list of domains or subdomains and crawls them for references to S3 buckets☆11Sep 30, 2026Updated last month
- Deploy multiple instances of Nessus in docker containers easily☆20Mar 31, 2021Updated 5 years ago
- Insecure Vulnerable Android Application that helps to learn hacing and securing apps☆21Oct 4, 2015Updated 11 years ago