this repo contains some public methodologies which I found from internet (google,telegram,discord,writeups etc..)
☆40May 30, 2024Updated 2 years ago
Alternatives and similar repositories for Bug-Hunting-methodologies
Users that are interested in Bug-Hunting-methodologies are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- anveshan is a completed script that helps to automate your recon process, It finds subdomains, urls, js files, parameters, screenshots, a…☆29Oct 29, 2024Updated last year
- CORS Exploit POC for WordPress REST API☆11Oct 27, 2024Updated last year
- ☆28Dec 4, 2025Updated 9 months ago
- ☆14Nov 8, 2024Updated last year
- A comprehensive bug bounty methodology compiled from extensive research, covering web application reconnaissance, checklists, and methods…☆165Nov 11, 2024Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Auth Mutator is a Burp Suite extension that helps you experiment with mutated authentication requests while keeping the original traffic …☆16Sep 1, 2026Updated 2 weeks ago
- Oty is a fast, customizable, CLI tool designed to streamline your Bug Bounty and Pentesting workflows. Powered by a simple yet flexible Y…☆28Jan 27, 2025Updated last year
- A Collection of Notes, Methodologies, POCs and everything else related to Bug Hunting.☆168Jul 14, 2021Updated 5 years ago
- WonderCMS Authenticated RCE - CVE-2023-41425☆27Dec 30, 2024Updated last year
- simple bash script to earn bounties☆37Apr 27, 2024Updated 2 years ago
- An automated bug hunting tool for comprehensive reconnaissance, including subdomain enumeration, port scanning, vulnerability detection, …☆17Jun 24, 2025Updated last year
- Lightweight reflection scanner☆20Aug 31, 2025Updated last year
- ☆22Nov 11, 2024Updated last year
- Blank methodology sheet for the OSWE exam☆14Dec 17, 2021Updated 4 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- ☆13Oct 24, 2024Updated last year
- ☆15Mar 21, 2025Updated last year
- Wordlists for content discovery with special words in different languages☆14Jan 17, 2025Updated last year
- ex-param is an automated tool designed for finding reflected parameters for XSS vulnerabilities. It crawls a target website, extracts GET…☆60Feb 22, 2025Updated last year
- An opensource tool built to help bug bounty hunters and developers to easily/quickly find the perfect command to validate API keys☆25Apr 20, 2025Updated last year
- Filter URLs that match your scope file for bugbounty.☆11May 23, 2023Updated 3 years ago
- ☆246Jan 20, 2026Updated 7 months ago
- List of Public Bug Bounty and Responsible Disclosure Programs☆30Dec 11, 2025Updated 9 months ago
- ☆28May 21, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆17Jul 21, 2025Updated last year
- Sec-Payloads, It's a collection of multiple types of lists used during security assessments & used for bug bounty hunting or penetration …☆10Nov 17, 2025Updated 10 months ago
- GarudRecon automates domain recon with top open-source tools to discover assets, enumerate subdomains, and detect XSS, SQLi, LFI, RCE & m…☆270Mar 28, 2026Updated 5 months ago
- Personal notes from the eJPT course, for the eJPT exam.☆25Sep 13, 2023Updated 3 years ago
- X9 a tool to create URLs with many parameter☆33Feb 8, 2026Updated 7 months ago
- ☆16Jun 26, 2025Updated last year
- A JavaScript Secret Finder tool.☆35Nov 3, 2025Updated 10 months ago
- IP Finder tool, ipfinder collects IP addresses from Shodan search queries.☆17Dec 12, 2025Updated 9 months ago
- Bug Bounty Recon Automation Script -- Scan AWS IP Range Certs for Matching FQDN☆26Sep 17, 2021Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Auto Recon tool for finding SQLi,XSS,LFi,OpenRedirect☆58Mar 4, 2025Updated last year
- ☆13Feb 25, 2025Updated last year
- A CLI tool to extract, analyze, and filter JavaScript links from web pages or URLs, with regex matching and structured JSON output.☆19Jan 6, 2025Updated last year
- Simple tmux session management.☆17Dec 16, 2023Updated 2 years ago
- ☆58Apr 24, 2020Updated 6 years ago
- Command line interface for Jsmon Security Platform☆34Jul 31, 2026Updated last month
- A Burp Suite extension that helps track and manage multiple sessions simultaneously by color-coding HTTP requests based on custom pattern…☆28Nov 21, 2024Updated last year