mark-zh/BugBountyTips external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

mark-zh/BugBountyTips

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/mark-zh/BugBountyTips)

Close

mark-zh / BugBountyTipsView on GitHubMore

• External links
• Readme badge

记录一些国外漏洞赏金猎人的挖洞技巧和一些有意思的东西

☆39Dec 4, 2019Updated 6 years ago

Alternatives and similar repositories for BugBountyTips

Users that are interested in BugBountyTips are comparing it to the libraries listed below

• mark-zh / POC-AND-EXP

  View on GitHub
  一些POC、EXP
  ☆11Nov 4, 2019Updated 6 years ago
• nw01f / CmsIdentification-masterV2

  View on GitHub
  CMS指纹识别
  ☆17Jan 8, 2019Updated 7 years ago
• yzddmr6 / cmd2bx

  View on GitHub
  把jsp的cmdshell升级为冰蝎一句话
  ☆11Sep 23, 2019Updated 6 years ago
• Draven996 / XXE-Payload

  View on GitHub
  XXE漏洞检测 Payload大全
  ☆13Apr 28, 2019Updated 6 years ago
• sp0ckus / DefCon33

  View on GitHub
  ☆16Aug 25, 2025Updated 6 months ago
• j5s / GetDomainAdmin

  View on GitHub
  获取域控权限方法枚举
  ☆13May 8, 2022Updated 3 years ago
• caido-community / Chatio

  View on GitHub
  An AI-powered assistant for hackers and security professionals built for Caido
  ☆31Jan 24, 2026Updated last month
• hack2012 / awvs-decode

  View on GitHub
  awvs script decode 最新最好的解码方法
  ☆39Apr 3, 2020Updated 5 years ago
• kelvinBen / DrozerFuzz

  View on GitHub
  基于Drozer对Android的四大组件进行批量处理
  ☆22Jan 15, 2020Updated 6 years ago
• MuyeGecko / WebCMSScanner

  View on GitHub
  识别网站cms指纹
  ☆12May 19, 2019Updated 6 years ago
• sp4rkw / BurpExtenderCollect

  View on GitHub
  此项目用于收集渗透测试中，BurpSuite中好用的插件
  ☆27Nov 18, 2021Updated 4 years ago
• geeknik / nuclei-template-generator

  View on GitHub
  A simple tool which makes creating nuclei templates even easier.
  ☆37Jun 23, 2024Updated last year
• safe6Sec / burpDevNote

  View on GitHub
  burp插件开发笔记
  ☆11Dec 26, 2021Updated 4 years ago
• Adian-kids / Awvs13_Batch

  View on GitHub
  Awvs批量扫描脚本，Awvs13批量扫描脚本（对低配置机器进行优化，避免跑死），对Scan进行控制
  ☆11Dec 29, 2020Updated 5 years ago
• vavkamil / h1_2_nuclei

  View on GitHub
  Scan any HackerOne program with Nuclei
  ☆14Sep 21, 2021Updated 4 years ago
• SmileZXLee / AppStoreMonitor

  View on GitHub
  🌈 实时监控AppStore上的App，并在其版本更新生效时通知您
  ☆12Oct 14, 2020Updated 5 years ago
• z1ng / VulBoxSpider

  View on GitHub
  漏洞盒子入驻企业列表爬虫
  ☆14Jan 18, 2019Updated 7 years ago
• RandomRobbieBF / nuclei-drupal-sa

  View on GitHub
  Nuclei templates for drupal vulns... far from perfect
  ☆19Jan 9, 2025Updated last year
• timwhitez / find-subdomain-by-xray

  View on GitHub
  利用xray高级版批量收集子域名
  ☆18Feb 19, 2020Updated 6 years ago
• oneoy / thinkphp-RCE-POC

  View on GitHub
  thinkphp v5.x 远程代码执行漏洞-POC集合
  ☆25Aug 6, 2019Updated 6 years ago
• XalfiE / Bug-Bounty-Oneliners

  View on GitHub
  Oneliners curated from my experience and from the internet
  ☆23Feb 8, 2021Updated 5 years ago
• praetorian-inc / chariot-launch-nuclei-templates

  View on GitHub
  ☆13Mar 15, 2022Updated 4 years ago
• test502git / Hosts_scanV2

  View on GitHub
  这是一个用于IP和域名碰撞匹配访问的小工具优化版，能减少碰撞中出来的误报，旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。
  ☆48Nov 18, 2021Updated 4 years ago
• rogerinn / codex

  View on GitHub
  Endpoint enumeration
  ☆11Apr 1, 2022Updated 3 years ago
• Acmesec / 2019MST-OpenSourceLists

  View on GitHub
  米斯特2019年开源项目清单
  ☆70Jan 12, 2020Updated 6 years ago
• mstxq17 / MoreCode

  View on GitHub
  一个常用编码加解密的懒人工具，自动识别，尝试转换所有类型，包括html实体化，base64，base32，32位md5，16位md5，hash，\x,0x等十六进制格式,url编码...
  ☆15Feb 1, 2022Updated 4 years ago
• DVPNET / Report_Public

  View on GitHub
  DVPNET 公开漏洞知识库
  ☆94Jun 10, 2021Updated 4 years ago
• xitmakes / scope.sh

  View on GitHub
  ☆15Mar 21, 2025Updated last year
• Ovi3 / 010Editor-Template

  View on GitHub
  010Editor Templates
  ☆13May 29, 2024Updated last year
• flowerwind / Weblogic404Memshell

  View on GitHub
  当找不到任何weblogic路径时打内存马的代码，原理为拦截404请求最开始的代码，通过java agent修改为webshell的逻辑。
  ☆15Nov 22, 2021Updated 4 years ago
• 0xr2r / templates-nucleir2r

  View on GitHub
  ☆24Sep 9, 2025Updated 6 months ago
• TimelifeCzy / Windows-emergency-servicetools

  View on GitHub
  Windows一键检测应急响应服务工具/r3数据采集
  ☆100Apr 5, 2022Updated 3 years ago
• atdpa4sw0rd / Experience-library

  View on GitHub
  离线文档库
  ☆14Jun 17, 2020Updated 5 years ago
• jiangsir404 / PHP-code-audit

  View on GitHub
  php code audit for cms vulnerabilities / 代码审计，对一些大型cms漏洞的复现研究，更新源码和漏洞exp
  ☆279Dec 12, 2018Updated 7 years ago
• yaseng / yafinger

  View on GitHub
  yet another web fingerprinter
  ☆14Nov 30, 2017Updated 8 years ago
• jthack / ffuf_presentation

  View on GitHub
  ☆16Dec 2, 2021Updated 4 years ago
• cybersecplayground / bugbounty-Tips-and-Tricks

  View on GitHub
  A curated collection of bug bounty tips, tricks, payloads, and bypass techniques
  ☆33Feb 17, 2026Updated last month
• profmoriarity / everythingjs

  View on GitHub
  A CLI tool to extract, analyze, and filter JavaScript links from web pages or URLs, with regex matching and structured JSON output.
  ☆19Jan 6, 2025Updated last year
• arg3t / massurl

  View on GitHub
  A simple tool that aims to efficiently and quickly parse the outputs of web scraping tools like gau
  ☆12Jun 28, 2021Updated 4 years ago