this repo contains some public methodologies which I found from internet (google,telegram,discord,writeups etc..)
☆42May 30, 2024Updated 2 years ago
Alternatives and similar repositories for Bug-Hunting-methodologies
Users that are interested in Bug-Hunting-methodologies are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- anveshan is a completed script that helps to automate your recon process, It finds subdomains, urls, js files, parameters, screenshots, a…☆29Oct 29, 2024Updated last year
- CORS Exploit POC for WordPress REST API☆11Oct 27, 2024Updated last year
- Official writeups and challenges for Codefest CTF 2025☆11Jan 27, 2025Updated last year
- Brute-force a JWT HS256, HS384 or HS512 from your browser (online)☆21Apr 8, 2026Updated 6 months ago
- ☆28Dec 4, 2025Updated 10 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆14Nov 8, 2024Updated last year
- A comprehensive bug bounty methodology compiled from extensive research, covering web application reconnaissance, checklists, and methods…☆167Nov 11, 2024Updated last year
- Auth Mutator is a Burp Suite extension that helps you experiment with mutated authentication requests while keeping the original traffic …☆16Sep 1, 2026Updated last month
- Oty is a fast, customizable, CLI tool designed to streamline your Bug Bounty and Pentesting workflows. Powered by a simple yet flexible Y…☆28Jan 27, 2025Updated last year
- A Collection of Notes, Methodologies, POCs and everything else related to Bug Hunting.☆166Jul 14, 2021Updated 5 years ago
- WonderCMS Authenticated RCE - CVE-2023-41425☆27Dec 30, 2024Updated last year
- simple bash script to earn bounties☆37Apr 27, 2024Updated 2 years ago
- An automated bug hunting tool for comprehensive reconnaissance, including subdomain enumeration, port scanning, vulnerability detection, …☆17Jun 24, 2025Updated last year
- Lightweight reflection scanner☆20Aug 31, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Blank methodology sheet for the OSWE exam☆14Dec 17, 2021Updated 4 years ago
- ☆13Oct 24, 2024Updated last year
- ☆15Mar 21, 2025Updated last year
- Wordlists for content discovery with special words in different languages☆14Jan 17, 2025Updated last year
- ex-param is an automated tool designed for finding reflected parameters for XSS vulnerabilities. It crawls a target website, extracts GET…☆61Feb 22, 2025Updated last year
- An opensource tool built to help bug bounty hunters and developers to easily/quickly find the perfect command to validate API keys☆25Apr 20, 2025Updated last year
- Filter URLs that match your scope file for bugbounty.☆11May 23, 2023Updated 3 years ago
- ☆247Jan 20, 2026Updated 8 months ago
- List of Public Bug Bounty and Responsible Disclosure Programs☆32Dec 11, 2025Updated 9 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆28May 21, 2025Updated last year
- ☆17Jul 21, 2025Updated last year
- Sec-Payloads, It's a collection of multiple types of lists used during security assessments & used for bug bounty hunting or penetration …☆11Nov 17, 2025Updated 10 months ago
- GarudRecon automates domain recon with top open-source tools to discover assets, enumerate subdomains, and detect XSS, SQLi, LFI, RCE & m…☆274Mar 28, 2026Updated 6 months ago
- X9 a tool to create URLs with many parameter☆33Feb 8, 2026Updated 8 months ago
- ☆16Jun 26, 2025Updated last year
- A JavaScript Secret Finder tool.☆35Nov 3, 2025Updated 11 months ago
- IP Finder tool, ipfinder collects IP addresses from Shodan search queries.☆17Dec 12, 2025Updated 9 months ago
- Bug Bounty Recon Automation Script -- Scan AWS IP Range Certs for Matching FQDN☆27Sep 17, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A extension for collecting parameters☆23Oct 25, 2020Updated 5 years ago
- AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.☆49Sep 6, 2023Updated 3 years ago
- ☆13Feb 25, 2025Updated last year
- A CLI tool to extract, analyze, and filter JavaScript links from web pages or URLs, with regex matching and structured JSON output.☆19Jan 6, 2025Updated last year
- Simple tmux session management.☆17Dec 16, 2023Updated 2 years ago
- Command line interface for Jsmon Security Platform☆34Jul 31, 2026Updated 2 months ago
- A Burp Suite extension that helps track and manage multiple sessions simultaneously by color-coding HTTP requests based on custom pattern…☆28Nov 21, 2024Updated last year