A list of interesting payloads, tips and tricks for bug bounty hunters.
☆23Jul 8, 2024Updated 2 years ago
Alternatives and similar repositories for bugbounty-cheatsheet
Users that are interested in bugbounty-cheatsheet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Productivity-Boosting Burp Suite extension written in Kotlin that enables persistent sticky session handling in web application testing…☆15Oct 8, 2025Updated 11 months ago
- Methodoloy for pentesting web applications.☆10Aug 18, 2022Updated 4 years ago
- XSS scanner tool to scan a list of URLs provided in a .txt file for reflected XSS(rxss) vulnerabilities. This tool is designed to efficie…☆14Jun 29, 2024Updated 2 years ago
- Automate bug bounty recon using bash alias☆15Aug 6, 2024Updated 2 years ago
- A meta-scan tool used to kick off a number of command-line security tools during VA/PT work.☆23May 1, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆20Mar 13, 2022Updated 4 years ago
- Bug Hunting Handbook☆12Aug 11, 2022Updated 4 years ago
- Publicly available training resources used by Security PS to train application security engineers☆10Feb 16, 2021Updated 5 years ago
- Sec-Payloads, It's a collection of multiple types of lists used during security assessments & used for bug bounty hunting or penetration …☆10Nov 17, 2025Updated 10 months ago
- CyberSec Resources: FRAMEWORKS & STANDARDS; Pentesting Audits & Hacking; PURPLE TEAMING, AD, API, web, clouds, CTF, OSINT, Pentest tools,…☆32Feb 22, 2023Updated 3 years ago
- Simple tmux session management.☆17Dec 16, 2023Updated 2 years ago
- Isolated nushell envs with specific plugins and libraries (with Nix)☆50Updated this week
- Bug Bounty Recon Automation Script -- Scan AWS IP Range Certs for Matching FQDN☆26Sep 17, 2021Updated 5 years ago
- Script for downloading Burp Suite extension files☆12Jan 29, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A simple script to convert text to speech in Python.☆13Jul 3, 2022Updated 4 years ago
- simple bash script to earn bounties☆37Apr 27, 2024Updated 2 years ago
- XSS-Freak is an xss scanner fully written in python3 from scratch. it is one of its kind since it crawls the website for all possible lin…☆15Nov 25, 2019Updated 6 years ago
- BurpSuite Extension leveraging new Montoya API to automatically sets payload positions to your inruder tab saving you time during VAPT.☆19Feb 21, 2026Updated 6 months ago
- [Forked] This repo is for learning various heap exploitation techniques.☆10Sep 6, 2018Updated 8 years ago
- A list of Awesome Bughunting oneliners , collected from the various sources☆69Aug 14, 2023Updated 3 years ago
- an awesome list of honeypot resources☆10Jul 14, 2017Updated 9 years ago
- An ongoing collection of awesome software, API libraries, checlists, best guidelines and resources and most important security countermea…☆14Nov 15, 2022Updated 3 years ago
- ☆32Nov 3, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Generatrum Linguarum, a conlang word generator library☆11Mar 28, 2023Updated 3 years ago
- Python script to find URLs that could contain secrets☆13Apr 28, 2021Updated 5 years ago
- A simple light weight python web framework☆11Nov 21, 2025Updated 9 months ago
- Auth Mutator is a Burp Suite extension that helps you experiment with mutated authentication requests while keeping the original traffic …☆16Sep 1, 2026Updated 2 weeks ago
- Living Off Security Tools☆67Aug 19, 2026Updated 3 weeks ago
- FindX is an Android phone antitheft app.☆16Nov 9, 2023Updated 2 years ago
- An automated bug hunting tool for comprehensive reconnaissance, including subdomain enumeration, port scanning, vulnerability detection, …☆17Jun 24, 2025Updated last year
- An Ubuntu 16.04 build containing Suricata, PulledPork, Bro, and Splunk☆22Jul 10, 2018Updated 8 years ago
- Yet another awesome fuzzers list☆15Oct 25, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in …☆14May 15, 2019Updated 7 years ago
- The migration for Botble from CMS(Laravel) to GraphQL + Next.js☆14Oct 22, 2023Updated 2 years ago
- Statistical Phonotactics-Aware Word Generation System☆23Nov 23, 2015Updated 10 years ago
- A word generator for conlangs with a simple and readable language-definition DSL.☆15Oct 30, 2018Updated 7 years ago
- Command-line tool for rendering bar charts that can be displayed directly in the terminal or in text-based files like Markdown.☆19Jul 7, 2024Updated 2 years ago
- 🌸 Conlanging tool and community☆11Dec 26, 2025Updated 8 months ago
- The Paper Artifact Availability☆20Aug 26, 2022Updated 4 years ago