Welcome! This repo is a conglomeration of tips, tricks, tools, and data analysis to use while doing web application security assessments, and more specifically towards bug hunting in bug bounties.
☆14Jan 13, 2019Updated 7 years ago
Alternatives and similar repositories for The-Bug-Hunters-Methodology
Users that are interested in The-Bug-Hunters-Methodology are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Collection of web app methodology from initial recon into exploit known vulnerability. Used when conducting Bug Bounty, Penetration Testi…☆13Oct 23, 2021Updated 5 years ago
- ☆27Jan 25, 2020Updated 6 years ago
- A simple script to check for insecurely exposed git repositories.☆12Mar 17, 2019Updated 7 years ago
- My personal bug bounty toolkit.☆162Jun 18, 2024Updated 2 years ago
- TheCl0n3r will allow you to download and manage your git repositories.☆51Oct 22, 2020Updated 6 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Open source alternative to Burpsuite☆16May 18, 2021Updated 5 years ago
- This is GitHub_Dorks and some tips i collect from different resources.Recon_Api is tip when you find token or api without knowing what to…☆21Sep 15, 2021Updated 5 years ago
- Simple S3 Bucket Testing Software☆32Nov 4, 2021Updated 4 years ago
- Bug Bounty Tools used on Twitch - Recon☆328Jul 23, 2026Updated 3 months ago
- Firebase database finder.☆13Dec 30, 2020Updated 5 years ago
- Simple tools to handle string and generate subdomain permutations☆15Jun 8, 2022Updated 4 years ago
- List of pentest related scripts edited or created by GoVanguard☆11Nov 4, 2024Updated last year
- A bash script that automates the scanning of a target network for HTTP resources through XXE☆38Dec 2, 2020Updated 5 years ago
- Scraping creds using Github API and truffleHog☆11Dec 13, 2023Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Learn 101 is a challenge to keep the learning spirit going on and challenge myself to learn something daily for 101 days.☆30Jun 7, 2022Updated 4 years ago
- Nmap NSE script for enumerate indices, plugins and cluster nodes on an elasticsearch target☆44Apr 17, 2021Updated 5 years ago
- ShoLister is a tool that collects all available subdomains for specific hostname or organization from Shodan. The tool is designed to be …☆59May 10, 2022Updated 4 years ago
- A list of resources for those interested in getting started in bug bounties☆13Jun 18, 2020Updated 6 years ago
- ☆10Aug 13, 2018Updated 8 years ago
- Flask powered website to display tweets with a hashtag #bugbountytip☆17Apr 14, 2020Updated 6 years ago
- This repository contains the source code of the OWASP TOP 10 NodeJS Panel I have used☆10Nov 20, 2022Updated 3 years ago
- ☆17May 21, 2022Updated 4 years ago
- My Notes on Regular Expressions for AWAE/OSWE.☆39Sep 5, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Tests for LFI in PHP apps and automates the process of leveraging LFI's to recursively download source code and discover new files via in…☆14Sep 29, 2022Updated 4 years ago
- A Modern Operating System Written in C++ From Scratch!☆14Jan 30, 2022Updated 4 years ago
- Bug Bounty Clipboard☆17Nov 6, 2019Updated 6 years ago
- A notification script to help with Recon Stuff☆14Jun 8, 2021Updated 5 years ago
- ☆11Sep 17, 2021Updated 5 years ago
- ☆14Aug 10, 2026Updated 2 months ago
- sub domain wild card filtering tool☆39Apr 18, 2020Updated 6 years ago
- Repository for OWASP Code Review document☆17Jun 24, 2014Updated 12 years ago
- A fast web fuzzer in golang☆17Dec 2, 2020Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Store ZAP reports historically and compare current ZAP results against the most recent for changes in alerts.☆12Sep 28, 2026Updated last month
- ☆17Feb 4, 2020Updated 6 years ago
- This is a docker environment ready set up for multiple WooCommerce Plugin vulnerabilities.☆30Dec 1, 2020Updated 5 years ago
- ☆49Oct 28, 2020Updated 6 years ago
- Apache Tomcat exploit and Pentesting guide for penetration tester☆66Sep 2, 2022Updated 4 years ago
- jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()…☆11Apr 9, 2021Updated 5 years ago
- Collection of templates from various resources☆48Jun 17, 2026Updated 4 months ago