A list of interesting payloads, tips and tricks for bug bounty hunters.
☆23Jul 8, 2024Updated 2 years ago
Alternatives and similar repositories for bugbounty-cheatsheet
Users that are interested in bugbounty-cheatsheet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Productivity-Boosting Burp Suite extension written in Kotlin that enables persistent sticky session handling in web application testing…☆15Oct 8, 2025Updated 10 months ago
- ☆24Mar 20, 2023Updated 3 years ago
- Methodoloy for pentesting web applications.☆10Aug 18, 2022Updated 3 years ago
- XSS scanner tool to scan a list of URLs provided in a .txt file for reflected XSS(rxss) vulnerabilities. This tool is designed to efficie…☆14Jun 29, 2024Updated 2 years ago
- Automate bug bounty recon using bash alias☆15Aug 6, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A meta-scan tool used to kick off a number of command-line security tools during VA/PT work.☆23May 1, 2022Updated 4 years ago
- ☆20Mar 13, 2022Updated 4 years ago
- Bug Hunting Handbook☆12Aug 11, 2022Updated 3 years ago
- Publicly available training resources used by Security PS to train application security engineers☆10Feb 16, 2021Updated 5 years ago
- Sec-Payloads, It's a collection of multiple types of lists used during security assessments & used for bug bounty hunting or penetration …☆10Nov 17, 2025Updated 8 months ago
- CyberSec Resources: FRAMEWORKS & STANDARDS; Pentesting Audits & Hacking; PURPLE TEAMING, AD, API, web, clouds, CTF, OSINT, Pentest tools,…☆32Feb 22, 2023Updated 3 years ago
- ☆24Mar 3, 2020Updated 6 years ago
- Simple tmux session management.☆17Dec 16, 2023Updated 2 years ago
- Isolated nushell envs with specific plugins and libraries (with Nix)☆48Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Bug Bounty Recon Automation Script -- Scan AWS IP Range Certs for Matching FQDN☆26Sep 17, 2021Updated 4 years ago
- XSS-Freak is an xss scanner fully written in python3 from scratch. it is one of its kind since it crawls the website for all possible lin…☆15Nov 25, 2019Updated 6 years ago
- BurpSuite Extension leveraging new Montoya API to automatically sets payload positions to your inruder tab saving you time during VAPT.☆18Feb 21, 2026Updated 5 months ago
- ex-redirect — An automated open redirect scanner using Wayback Machine archives. Supports subdomain grouping, live URL filtering, and Wor…☆15May 9, 2025Updated last year
- A list of Awesome Bughunting oneliners , collected from the various sources☆70Aug 14, 2023Updated 2 years ago
- ☆24Sep 9, 2025Updated 11 months ago
- an awesome list of honeypot resources☆10Jul 14, 2017Updated 9 years ago
- An ongoing collection of awesome software, API libraries, checlists, best guidelines and resources and most important security countermea…☆14Nov 15, 2022Updated 3 years ago
- These are tools I cheated with the help of ChatGPT to help me with Penetration Testing and Red Teaming☆14Jul 30, 2026Updated last week
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- ☆31Nov 3, 2024Updated last year
- Generatrum Linguarum, a conlang word generator library☆11Mar 28, 2023Updated 3 years ago
- The NodeJs cookie stealer is a tool that can be used in penetration testing and XSS attacks to steal browser cookies from victims.☆13Apr 5, 2023Updated 3 years ago
- vulnlab.com reaper writeup☆27Aug 30, 2023Updated 2 years ago
- Python script to find URLs that could contain secrets☆13Apr 28, 2021Updated 5 years ago
- An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites…☆14Mar 25, 2023Updated 3 years ago
- An automated bug hunting tool for comprehensive reconnaissance, including subdomain enumeration, port scanning, vulnerability detection, …☆15Jun 24, 2025Updated last year
- Auth Mutator is a Burp Suite extension that helps you experiment with mutated authentication requests while keeping the original traffic …☆16Aug 1, 2026Updated last week
- The migration for Botble from CMS(Laravel) to GraphQL + Next.js☆14Oct 22, 2023Updated 2 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Statistical Phonotactics-Aware Word Generation System☆23Nov 23, 2015Updated 10 years ago
- A collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about General Data…☆20Oct 27, 2023Updated 2 years ago
- A word generator for conlangs with a simple and readable language-definition DSL.☆15Oct 30, 2018Updated 7 years ago
- Command-line tool for rendering bar charts that can be displayed directly in the terminal or in text-based files like Markdown.☆19Jul 7, 2024Updated 2 years ago
- A linguistic gloss formatter for several mark-up languages.☆12Apr 10, 2026Updated 4 months ago
- 🌸 Conlanging tool and community☆11Dec 26, 2025Updated 7 months ago
- Fast, simple library in Go to fetch CVEs from the National Vulnerability Database feeds☆33Dec 30, 2020Updated 5 years ago