Here you can find mostly all disclosed h1 reports
☆21Apr 4, 2019Updated 7 years ago
Alternatives and similar repositories for HackerOneReports
Users that are interested in HackerOneReports are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- in this repo i will write down every writeup about all types of BAC bugs☆12Jul 24, 2026Updated 3 months ago
- A curated list of common and advanced Cross-Site Scripting (XSS) payloads for penetration testing, bug bounty hunting, and web applicatio…☆25Jun 19, 2025Updated last year
- 🎯 Chrome Extension - Passive scanner for Dependency Confusion vulnerabilities in npm/PyPI packages☆44Jan 31, 2026Updated 9 months ago
- Real bug bounty track record — live VDP/H1 findings, disclosed report analysis, and lessons from rejections. Focus: IDOR, Authentication,…☆15Updated this week
- ☆10Dec 8, 2022Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A Python tool to scan JavaScript files for sensitive information exposure, helping security researchers identify potential leaks of API k…☆17Feb 17, 2026Updated 8 months ago
- SelfHosted - Bug Bounty Programs | Discover new and fresh bug bounty programs across platforms. Updated frequently to always display the …☆16Nov 24, 2025Updated 11 months ago
- Wordlists for Fuzzing☆144Oct 12, 2020Updated 6 years ago
- High-performance JavaScript reconnaissance tool with Aho-Corasick pattern matching for bug bounty hunters and security researchers☆11Jan 24, 2026Updated 9 months ago
- Match & Replace rules for Portswigger's Burp that operate globally across all utilities.☆25Jan 26, 2026Updated 9 months ago
- Get real-time DuckDuckGo search results as structured JSON — organic results, knowledge panels, sponsored links, and related queries in o…☆13Mar 19, 2026Updated 7 months ago
- My Main App Hacking CheckList☆34Jun 20, 2026Updated 4 months ago
- A proof-of-concept PDF file designed for authorized security testing of PDF upload functionality and PDF viewer behavior, including XSS a…☆79Aug 28, 2026Updated 2 months ago
- ☆18Mar 3, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ADKAVEH - One PowerShell script for Active Directory discovery and safe attack simulation.☆38Sep 28, 2025Updated last year
- Cockpit: Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection☆15Apr 18, 2026Updated 6 months ago
- xsschecker tests endpoints for reflected XSS by injecting payloads and checking responses. It prints vulnerable if the payload is reflect…☆38Nov 3, 2025Updated last year
- Python Flood Attack Tool You can easily launch Flood Attack with this tool☆12Jul 13, 2022Updated 4 years ago
- An obsessive, expert-tier knowledge base + AI skill system for professional bug bounty hunting, security research, and penetration testin…☆69Apr 25, 2026Updated 6 months ago
- Chrome MV3 parameter/endpoint/secret harvester for authorized web security testing (GAP-style + Next.js RSC path maps)☆12Sep 9, 2026Updated last month
- Reads in a list of domains or subdomains and crawls them for references to S3 buckets☆11Sep 30, 2026Updated last month
- ☆11Apr 29, 2018Updated 8 years ago
- NextForge — unified Next.js exploitation framework. RCE · SSRF · middleware · authorized lab only.☆18Sep 23, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆15Nov 4, 2024Updated 2 years ago
- Transforming Smooth AD Automation Scripts into Attack Vectors☆20Nov 22, 2025Updated 11 months ago
- An automatic XSS scanner☆17Updated this week
- Seecurity helper tool to detect entry points of WordPress plugins☆10May 16, 2024Updated 2 years ago
- The wordlists that have been compiled using disclosed reports at HackerOne bug bounty platform☆10Jun 28, 2020Updated 6 years ago
- ssh user enumeration☆13Mar 21, 2023Updated 3 years ago
- A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference☆6,182Aug 6, 2023Updated 3 years ago
- Replay any request as another user to find IDOR/BOLA/BFLA, right in the browser.☆30Jun 16, 2026Updated 4 months ago
- Universal QR and barcode scanner SDK built with Kotlin Multiplatform and Compose. Supports Android, iOS, Desktop, and Web. Ideal for KMP,…☆21Aug 5, 2026Updated 3 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆13Mar 6, 2025Updated last year
- Web path scanner☆11Apr 1, 2021Updated 5 years ago
- web cache deception detect☆43Aug 26, 2026Updated 2 months ago
- PhoneFy un simple script para obtener informacion de un telefono☆10Nov 5, 2021Updated 5 years ago
- Association of Computer Enthusiasts brings you with ACECTF. Test your hacking skills in our thrilling 24-hour cybersecurity challenge. Le…☆16Mar 2, 2025Updated last year
- ☆18Sep 6, 2018Updated 8 years ago
- It's an open source restaurant and coffee shop management system.☆10Jan 6, 2023Updated 3 years ago