this repo contains some public methodologies which I found from internet (google,telegram,discord,writeups etc..)
☆38May 30, 2024Updated 2 years ago
Alternatives and similar repositories for Bug-Hunting-methodologies
Users that are interested in Bug-Hunting-methodologies are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- anveshan is a completed script that helps to automate your recon process, It finds subdomains, urls, js files, parameters, screenshots, a…☆30Oct 29, 2024Updated last year
- CORS Exploit POC for WordPress REST API☆11Oct 27, 2024Updated last year
- Official writeups and challenges for Codefest CTF 2025☆11Jan 27, 2025Updated last year
- Auth Mutator is a Burp Suite extension that helps you experiment with mutated authentication requests while keeping the original traffic …☆16Aug 1, 2026Updated last week
- Brute-force a JWT HS256, HS384 or HS512 from your browser (online)☆20Apr 8, 2026Updated 4 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Oty is a fast, customizable, CLI tool designed to streamline your Bug Bounty and Pentesting workflows. Powered by a simple yet flexible Y…☆28Jan 27, 2025Updated last year
- A comprehensive bug bounty methodology compiled from extensive research, covering web application reconnaissance, checklists, and methods…☆157Nov 11, 2024Updated last year
- ☆28Dec 4, 2025Updated 8 months ago
- ☆14Nov 8, 2024Updated last year
- ☆16Jun 26, 2025Updated last year
- List of Public Bug Bounty and Responsible Disclosure Programs☆22Dec 11, 2025Updated 7 months ago
- An opensource tool built to help bug bounty hunters and developers to easily/quickly find the perfect command to validate API keys☆25Apr 20, 2025Updated last year
- A Collection of Notes, Methodologies, POCs and everything else related to Bug Hunting.☆169Jul 14, 2021Updated 5 years ago
- WonderCMS Authenticated RCE - CVE-2023-41425☆27Dec 30, 2024Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆27May 21, 2025Updated last year
- IP Finder tool, ipfinder collects IP addresses from Shodan search queries.☆17Dec 12, 2025Updated 7 months ago
- simple bash script to earn bounties☆37Apr 27, 2024Updated 2 years ago
- An automated bug hunting tool for comprehensive reconnaissance, including subdomain enumeration, port scanning, vulnerability detection, …☆15Jun 24, 2025Updated last year
- ex-redirect — An automated open redirect scanner using Wayback Machine archives. Supports subdomain grouping, live URL filtering, and Wor…☆15May 9, 2025Updated last year
- Lightweight reflection scanner☆20Aug 31, 2025Updated 11 months ago
- X9 a tool to create URLs with many parameter☆31Feb 8, 2026Updated 6 months ago
- ☆22Nov 11, 2024Updated last year
- Blank methodology sheet for the OSWE exam☆14Dec 17, 2021Updated 4 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆13Oct 24, 2024Updated last year
- ☆15Mar 21, 2025Updated last year
- Wordlists for content discovery with special words in different languages☆14Jan 17, 2025Updated last year
- ex-param is an automated tool designed for finding reflected parameters for XSS vulnerabilities. It crawls a target website, extracts GET…☆60Feb 22, 2025Updated last year
- Get 10k subdomains in securitytrails using cookie without apikey.☆41Oct 23, 2025Updated 9 months ago
- Filter URLs that match your scope file for bugbounty.☆11May 23, 2023Updated 3 years ago
- Automagically decode DNS Exfiltration queries to convert Blind RCE into proper RCE via Burp Collaborator☆21Jan 7, 2026Updated 7 months ago
- GarudRecon automates domain recon with top open-source tools to discover assets, enumerate subdomains, and detect XSS, SQLi, LFI, RCE & m…☆264Mar 28, 2026Updated 4 months ago
- ☆246Jan 20, 2026Updated 6 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- It's the collection of all common Question and answers that can possibly come in your exam, if you just complete these question's you wil…☆13Mar 26, 2023Updated 3 years ago
- Scans remote JavaScript files with Trufflehog + Semgrep to detect leaked secrets☆147Jan 21, 2025Updated last year
- ☆17Jul 21, 2025Updated last year
- Sec-Payloads, It's a collection of multiple types of lists used during security assessments & used for bug bounty hunting or penetration …☆10Nov 17, 2025Updated 8 months ago
- A powerful subdomain enumeration tool that aggregates data from multiple sources to create comprehensive lists of root subdomains.☆51May 2, 2026Updated 3 months ago
- ☆39Oct 16, 2025Updated 9 months ago
- Personal notes from the eJPT course, for the eJPT exam.☆25Sep 13, 2023Updated 2 years ago