☆98Oct 17, 2026Updated 3 weeks ago
Alternatives and similar repositories for BugBounty-Methodology
Users that are interested in BugBounty-Methodology are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- SSRFHunter☆18Jan 17, 2026Updated 9 months ago
- A community-curated collection of real bug bounty and penetration testing hunting videos in Arabic 🇪🇬 and English☆28Sep 22, 2026Updated last month
- ☆78May 5, 2025Updated last year
- Local Flask app that converts bug bounty writeup URLs into Obsidian notes via the Claude CLI (Arabic Egyptian dialect).☆14May 12, 2026Updated 6 months ago
- AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes☆466Apr 30, 2026Updated 6 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Fetch, download, and decompile Android/iOS/Exe assets from HackerOne bug bounty programs☆43Oct 12, 2026Updated last month
- ☆85Nov 4, 2025Updated last year
- Most Powerful Open Source Bypasser Tool for Bypass 4XX Status code☆14Mar 16, 2026Updated 7 months ago
- High-performance JavaScript reconnaissance tool with Aho-Corasick pattern matching for bug bounty hunters and security researchers☆11Jan 24, 2026Updated 9 months ago
- 0xJS is an AI-powered JavaScript Security Tool☆68Apr 16, 2026Updated 6 months ago
- Personal Web Application Pentesting Methodology built during my cybersecurity learning journey. Covers reconnaissance, scanning, fuzzing,…☆59Jul 24, 2026Updated 3 months ago
- Burp Suite extension for cross-identity & cross-tenant access-control testing — BAC, IDOR, BOLA, and privilege escalation.☆63Jul 12, 2026Updated 4 months ago
- My Private Bug Hunting Methodology☆457Sep 22, 2026Updated last month
- My Main App Hacking CheckList☆35Jun 20, 2026Updated 4 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- My ATO Via Password Reset Methodology☆53May 13, 2026Updated 5 months ago
- URILoot is a browser extension designed for Bug Bounty Hunters and Pentesters. Makes fetching uris easy from various sources.☆65Feb 15, 2026Updated 8 months ago
- A tool for detecting subdomain takeover vulnerabilities by checking DNS records☆37May 28, 2026Updated 5 months ago
- A curated collection of my security research and bug bounty writeups, documenting real-world vulnerabilities, exploitation methods☆27Oct 16, 2026Updated 3 weeks ago
- Sectiv is a skill-driven AI security review for Burp Suite. Pick captured traffic and a review goal (IDOR, XSS, SQLi, SSRF…), and ge…☆112Nov 5, 2026Updated last week
- A Fuzzing skill based on purely what i know.☆44Jun 3, 2026Updated 5 months ago
- A web security workbench built for AI agents.☆393Updated this week
- A simple HAR-based JavaScript recon automation kit for organizing JS files, endpoints, secrets, and gf-filtered attack surface during bug…☆19May 20, 2026Updated 5 months ago
- RepShot · Generate professional security finding cards directly from Burp Suite Repeater.☆110May 31, 2026Updated 5 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- TokenTwin Checker — Dual Token BAC/IDOR Tester for Burp Suite☆99Aug 24, 2026Updated 2 months ago
- A resources for who want to learn and get deep into client-side bugs☆561Dec 8, 2024Updated last year
- Next-generation intelligent Web Fuzzer & Directory Scanner written in Go. Features WAF detection, secret scanning, auto-calibration, and …☆28Oct 1, 2026Updated last month
- CVE-2022-37122 Path Traversal Scanner☆12Oct 12, 2025Updated last year
- gosqli is a fast and simple tool for detecting blind SQL injection vulnerabilities. It supports scanning URLs with custom payloads, paral…☆17Jun 22, 2026Updated 4 months ago
- How To approach recon on real targets — from passive enumeration to origin IP discovery. Covers tools, automation, and the logic behind e…☆442Jul 5, 2026Updated 4 months ago
- ☆205Jan 22, 2026Updated 9 months ago
- ☆13Aug 15, 2025Updated last year
- Ultra-fast hybrid IPv4/IPv6 port scanner with adaptive concurrency, banner grab, TLS sniff, and built-in httpx + nuclei recon pipeline — …☆18Sep 30, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆28Feb 10, 2026Updated 9 months ago
- Structured practice: Mainly PortSwigger lab writeups☆23Nov 3, 2026Updated last week
- Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full writ…☆1,365Updated this week
- Welcome to the 403 and 401 Bypass Techniques and Bug Bounty Tips repository! This repo is a collection of methods and strategies to bypas…☆40Dec 26, 2024Updated last year
- Spec-driven bug bounty writeups and real world security failures.☆43Sep 18, 2026Updated last month
- This repository contains Bug Bounty writeups☆114Updated this week
- Bug Bounty Methodology☆339Oct 5, 2026Updated last month
Are these results useful?