A list of interesting payloads, tips and tricks for bug bounty hunters.
☆23Jul 8, 2024Updated 2 years ago
Alternatives and similar repositories for bugbounty-cheatsheet
Users that are interested in bugbounty-cheatsheet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Productivity-Boosting Burp Suite extension written in Kotlin that enables persistent sticky session handling in web application testing…☆15Oct 8, 2025Updated last year
- This repository contains Nanny-On agent source codes. Anyone can contribute to write and update the codes. Please join us.☆18Nov 22, 2021Updated 4 years ago
- ☆24Mar 20, 2023Updated 3 years ago
- Methodoloy for pentesting web applications.☆10Aug 18, 2022Updated 4 years ago
- XSS scanner tool to scan a list of URLs provided in a .txt file for reflected XSS(rxss) vulnerabilities. This tool is designed to efficie…☆14Jun 29, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Automate bug bounty recon using bash alias☆15Aug 6, 2024Updated 2 years ago
- A meta-scan tool used to kick off a number of command-line security tools during VA/PT work.☆23May 1, 2022Updated 4 years ago
- ☆20Mar 13, 2022Updated 4 years ago
- Bug Hunting Handbook☆12Aug 11, 2022Updated 4 years ago
- Publicly available training resources used by Security PS to train application security engineers☆10Feb 16, 2021Updated 5 years ago
- Sec-Payloads, It's a collection of multiple types of lists used during security assessments & used for bug bounty hunting or penetration …☆11Nov 17, 2025Updated 10 months ago
- CyberSec Resources: FRAMEWORKS & STANDARDS; Pentesting Audits & Hacking; PURPLE TEAMING, AD, API, web, clouds, CTF, OSINT, Pentest tools,…☆33Feb 22, 2023Updated 3 years ago
- ☆25Mar 3, 2020Updated 6 years ago
- Simple tmux session management.☆17Dec 16, 2023Updated 2 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- sshchecker is a fast dedicated ssh brute-forcing tool to check ssh login on the giving IP list.☆23Feb 8, 2026Updated 8 months ago
- A simple script to convert text to speech in Python.☆13Jul 3, 2022Updated 4 years ago
- simple bash script to earn bounties☆37Apr 27, 2024Updated 2 years ago
- XSS-Freak is an xss scanner fully written in python3 from scratch. it is one of its kind since it crawls the website for all possible lin…☆15Nov 25, 2019Updated 6 years ago
- BurpSuite Extension leveraging new Montoya API to automatically sets payload positions to your inruder tab saving you time during VAPT.☆19Feb 21, 2026Updated 7 months ago
- [Forked] This repo is for learning various heap exploitation techniques.☆10Sep 6, 2018Updated 8 years ago
- A list of Awesome Bughunting oneliners , collected from the various sources☆69Aug 14, 2023Updated 3 years ago
- an awesome list of honeypot resources☆10Jul 14, 2017Updated 9 years ago
- An ongoing collection of awesome software, API libraries, checlists, best guidelines and resources and most important security countermea…☆14Nov 15, 2022Updated 3 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- These are tools I cheated with the help of ChatGPT to help me with Penetration Testing and Red Teaming☆14Jul 30, 2026Updated 2 months ago
- ☆32Nov 3, 2024Updated last year
- Generatrum Linguarum, a conlang word generator library☆11Mar 28, 2023Updated 3 years ago
- The NodeJs cookie stealer is a tool that can be used in penetration testing and XSS attacks to steal browser cookies from victims.☆15Apr 5, 2023Updated 3 years ago
- Python script to find URLs that could contain secrets☆13Apr 28, 2021Updated 5 years ago
- A simple light weight python web framework☆11Nov 21, 2025Updated 10 months ago
- Auth Mutator is a Burp Suite extension that helps you experiment with mutated authentication requests while keeping the original traffic …☆16Sep 1, 2026Updated last month
- An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites…☆14Mar 25, 2023Updated 3 years ago
- FindX is an Android phone antitheft app.☆16Nov 9, 2023Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- An automated bug hunting tool for comprehensive reconnaissance, including subdomain enumeration, port scanning, vulnerability detection, …☆17Jun 24, 2025Updated last year
- Yet another awesome fuzzers list☆15Oct 25, 2024Updated last year
- SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in …☆14May 15, 2019Updated 7 years ago
- Statistical Phonotactics-Aware Word Generation System☆23Nov 23, 2015Updated 10 years ago
- A collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about General Data…☆20Oct 27, 2023Updated 2 years ago
- Command-line tool for rendering bar charts that can be displayed directly in the terminal or in text-based files like Markdown.☆19Jul 7, 2024Updated 2 years ago
- A linguistic gloss formatter for several mark-up languages.☆12Apr 10, 2026Updated 5 months ago