this repo contains some public methodologies which I found from internet (google,telegram,discord,writeups etc..)
☆35May 30, 2024Updated 2 years ago
Alternatives and similar repositories for Bug-Hunting-methodologies
Users that are interested in Bug-Hunting-methodologies are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- anveshan is a completed script that helps to automate your recon process, It finds subdomains, urls, js files, parameters, screenshots, a…☆30Oct 29, 2024Updated last year
- CORS Exploit POC for WordPress REST API☆10Oct 27, 2024Updated last year
- Auth Mutator is a Burp Suite extension that helps you experiment with mutated authentication requests while keeping the original traffic …☆16Jul 1, 2026Updated 2 weeks ago
- Official writeups and challenges for Codefest CTF 2025☆11Jan 27, 2025Updated last year
- Brute-force a JWT HS256, HS384 or HS512 from your browser (online)☆20Apr 8, 2026Updated 3 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆28Dec 4, 2025Updated 7 months ago
- A comprehensive bug bounty methodology compiled from extensive research, covering web application reconnaissance, checklists, and methods…☆153Nov 11, 2024Updated last year
- ☆14Nov 8, 2024Updated last year
- ☆16Jun 26, 2025Updated last year
- List of Public Bug Bounty and Responsible Disclosure Programs☆18Dec 11, 2025Updated 7 months ago
- An opensource tool built to help bug bounty hunters and developers to easily/quickly find the perfect command to validate API keys☆25Apr 20, 2025Updated last year
- WonderCMS Authenticated RCE - CVE-2023-41425☆27Dec 30, 2024Updated last year
- A Collection of Notes, Methodologies, POCs and everything else related to Bug Hunting.☆166Jul 14, 2021Updated 5 years ago
- ☆27May 21, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- IP Finder tool, ipfinder collects IP addresses from Shodan search queries.☆17Dec 12, 2025Updated 7 months ago
- simple bash script to earn bounties☆37Apr 27, 2024Updated 2 years ago
- ex-redirect — An automated open redirect scanner using Wayback Machine archives. Supports subdomain grouping, live URL filtering, and Wor…☆15May 9, 2025Updated last year
- Lightweight reflection scanner☆20Aug 31, 2025Updated 10 months ago
- An automated bug hunting tool for comprehensive reconnaissance, including subdomain enumeration, port scanning, vulnerability detection, …☆15Jun 24, 2025Updated last year
- X9 a tool to create URLs with many parameter☆31Feb 8, 2026Updated 5 months ago
- ☆22Nov 11, 2024Updated last year
- Blank methodology sheet for the OSWE exam☆14Dec 17, 2021Updated 4 years ago
- ☆13Oct 24, 2024Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- ☆15Mar 21, 2025Updated last year
- Wordlists for content discovery with special words in different languages☆14Jan 17, 2025Updated last year
- Get 10k subdomains in securitytrails using cookie without apikey.☆41Oct 23, 2025Updated 8 months ago
- ex-param is an automated tool designed for finding reflected parameters for XSS vulnerabilities. It crawls a target website, extracts GET…☆61Feb 22, 2025Updated last year
- Automagically decode DNS Exfiltration queries to convert Blind RCE into proper RCE via Burp Collaborator☆21Jan 7, 2026Updated 6 months ago
- Filter URLs that match your scope file for bugbounty.☆11May 23, 2023Updated 3 years ago
- GarudRecon automates domain recon with top open-source tools to discover assets, enumerate subdomains, and detect XSS, SQLi, LFI, RCE & m…☆263Mar 28, 2026Updated 3 months ago
- ☆245Jan 20, 2026Updated 6 months ago
- Scans remote JavaScript files with Trufflehog + Semgrep to detect leaked secrets☆146Jan 21, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆17Jul 21, 2025Updated last year
- ☆39Oct 16, 2025Updated 9 months ago
- Sec-Payloads, It's a collection of multiple types of lists used during security assessments & used for bug bounty hunting or penetration …☆10Nov 17, 2025Updated 8 months ago
- A powerful subdomain enumeration tool that aggregates data from multiple sources to create comprehensive lists of root subdomains.☆51May 2, 2026Updated 2 months ago
- **A powerful, offline, single-file HTML tool designed for developers and security researchers to inspect and analyze JavaScript Source Ma…☆98Oct 24, 2025Updated 8 months ago
- Personal notes from the eJPT course, for the eJPT exam.☆25Sep 13, 2023Updated 2 years ago
- Building reliable Retrieval Augmented Generation(RAG) AI Architecture☆13Jul 30, 2024Updated last year