ngalongc / bug-bounty-referenceLinks
Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature
☆3,932Updated 11 months ago
Alternatives and similar repositories for bug-bounty-reference
Users that are interested in bug-bounty-reference are comparing it to the libraries listed below
Sorting:
- A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.☆4,974Updated last year
- A list of interesting payloads, tips and tricks for bug bounty hunters.☆6,179Updated last year
- The Bug Hunters Methodology☆4,102Updated last year
- A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference☆5,199Updated last year
- Penetration tests guide based on OWASP including test cases, resources and examples.☆2,645Updated 3 years ago
- Open source education content for the researcher community☆2,700Updated 3 years ago
- A curated list of amazingly awesome Burp Extensions☆3,220Updated 4 months ago
- A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and…☆3,816Updated 3 years ago
- Git All the Payloads! A collection of web attack payloads.☆3,797Updated 2 years ago
- Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.☆5,585Updated 10 months ago
- A collection of custom security tools for quick needs.☆3,222Updated 2 years ago
- This script is intended to automate your reconnaissance process in an organized fashion☆1,984Updated 3 years ago
- A collection of awesome one-liner scripts especially for bug bounty tips.☆2,878Updated 11 months ago
- This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for …☆3,386Updated this week
- "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.☆5,240Updated 5 months ago
- ☆2,269Updated last year
- Ressources for bug bounty hunting☆1,835Updated 2 years ago
- A python script that finds endpoints in JavaScript files☆4,008Updated last year
- Collection of methodology and test case for various web vulnerabilities.☆6,490Updated 2 weeks ago
- Top disclosed reports from HackerOne☆4,644Updated 2 weeks ago
- Bug Bounty Roadmaps☆1,682Updated 4 years ago
- This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.☆1,667Updated 3 years ago
- A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study mater…☆2,539Updated 5 years ago
- A big list of Android Hackerone disclosed reports and other resources.☆1,570Updated 11 months ago
- This repository holds all the list of advanced XSS payloads that can be used in penetration testing. These payloads can be loaded into XS…☆1,072Updated 11 months ago
- PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with othe…☆3,610Updated last year
- A script to set up a quick Ubuntu 17.10 x64 box with tools I use.☆1,202Updated last year
- Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios☆1,348Updated 2 years ago
- Automatic SSRF fuzzer and exploitation tool☆3,245Updated 4 months ago
- Awesome XSS stuff☆4,939Updated 8 months ago