A local, safety-first pre-submission reviewer for bug bounty reports.
☆45Oct 3, 2026Updated last month
Alternatives and similar repositories for should-i-submit
Users that are interested in should-i-submit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Reusable prompts for a structured, evidence-first bug bounty hunting workflow☆923Oct 3, 2026Updated last month
- Agent skill for rigorous bug bounty report triage, validation, severity escalation, and submission-ready reporting.☆150Oct 9, 2026Updated last month
- Useful scripts for tampermonkey that I used during bug hunting. Will be updated "au fil de l'eau"☆18Jun 2, 2025Updated last year
- A list of AI security skills☆118Oct 29, 2026Updated last week
- web app monitoring automation☆14Jan 7, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Unveil new endpoints. Discover new features.☆17Oct 24, 2026Updated 2 weeks ago
- Sectiv is a skill-driven AI security review for Burp Suite. Pick captured traffic and a review goal (IDOR, XSS, SQLi, SSRF…), and ge…☆109Updated this week
- 🐛 A list of writeups from the MSRC (Microsoft) Bug Bounty program☆78Updated this week
- Collection of documentation, tools, and tips related to vulnerability research.☆284Sep 24, 2026Updated last month
- Passive JavaScript reconnaissance for penetration testers — bridging Burp Suite traffic into structured, AST-based analysis in VSCode.☆35Feb 5, 2026Updated 9 months ago
- find sources and sinks from js files☆17Apr 4, 2026Updated 7 months ago
- A proof-of-concept PDF file designed for authorized security testing of PDF upload functionality and PDF viewer behavior, including XSS a…☆81Aug 28, 2026Updated 2 months ago
- Replay any request as another user to find IDOR/BOLA/BFLA, right in the browser.☆30Jun 16, 2026Updated 4 months ago
- Classify Git commit diffs and messages with Jev. Bug fixes, security fixes/CWEs, and change types.☆38Sep 17, 2026Updated last month
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆11May 22, 2026Updated 5 months ago
- ☆31Sep 9, 2025Updated last year
- Claude Code plugin for writing triager-grade bug bounty reports☆374Aug 25, 2026Updated 2 months ago
- 403 Access Bypass Tester☆127Oct 13, 2026Updated 3 weeks ago
- A raw dump of my Apple MacOS research. Some likely can be ported over to other Apple OSes. Alot of this should likely be patched, but I d…☆487Updated this week
- Oxford is a warm, muted Base16 colorscheme inspired by the elite 80s college aesthetic—dim library corners, aged pages, and the quiet cha…☆15Oct 5, 2026Updated last month
- ☆51Aug 17, 2026Updated 2 months ago
- Extract subdomains from CSP headers☆12Jul 10, 2025Updated last year
- CORS Exploit POC for WordPress REST API☆11Oct 27, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A tool to migrate Burpsuite HTTP history to Caido☆43Apr 25, 2025Updated last year
- A Fuzzing skill based on purely what i know.☆44Jun 3, 2026Updated 5 months ago
- A fancier postMessage tracker with Chrome Manifest version V3 support and a few additional features, inspired by Frans Rosens postmessage…☆132Sep 12, 2025Updated last year
- FetchDiff is a tool to monitor remote JavaScript and web pages for changes.☆25Sep 27, 2026Updated last month
- This plugin is inspired by tools.slcyber.io. It contains two tools: Surf (an SSRF target discovery tool) and Wordlists (custom wordlists …☆27Jan 19, 2026Updated 9 months ago
- output burp body only and auto pretiffy☆22May 1, 2025Updated last year
- Caido plugin for jxscout☆18Jul 7, 2026Updated 4 months ago
- X9 a tool to create URLs with many parameter☆32Feb 8, 2026Updated 9 months ago
- Shannon's 5-phase pentest pipeline running natively in Claude Code — no Docker, no Temporal, just /pentest https://github.com/KeygraphHQ…☆18Sep 19, 2026Updated last month
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- web cache deception detect☆43Aug 26, 2026Updated 2 months ago
- Let your AI agents find any conversation you've had across Claude Code, Codex, and OpenCode.☆17Sep 27, 2026Updated last month
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆24Mar 16, 2026Updated 7 months ago
- Content discovery and fuzzing with HTTP/3 support (100k requests per second)☆141Oct 30, 2026Updated last week
- ☆47Aug 12, 2025Updated last year
- Chrome MV3 parameter/endpoint/secret harvester for authorized web security testing (GAP-style + Next.js RSC path maps)☆12Sep 9, 2026Updated 2 months ago
- A tool to manipulate parameters inside URLs with different modes in order to check for reflected parameters.☆10Sep 2, 2023Updated 3 years ago
Are these results useful?