Welcome! This repo is a conglomeration of tips, tricks, tools, and data analysis to use while doing web application security assessments, and more specifically towards bug hunting in bug bounties.
☆14Jan 13, 2019Updated 7 years ago
Alternatives and similar repositories for The-Bug-Hunters-Methodology
Users that are interested in The-Bug-Hunters-Methodology are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Collection of web app methodology from initial recon into exploit known vulnerability. Used when conducting Bug Bounty, Penetration Testi…☆14Oct 23, 2021Updated 5 years ago
- Pentest-Command☆20Nov 10, 2021Updated 5 years ago
- A simple script to check for insecurely exposed git repositories.☆12Mar 17, 2019Updated 7 years ago
- Collection of penetration testing tools☆84Dec 17, 2020Updated 5 years ago
- My personal bug bounty toolkit.☆161Jun 18, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- TheCl0n3r will allow you to download and manage your git repositories.☆51Oct 22, 2020Updated 6 years ago
- Open source alternative to Burpsuite☆16May 18, 2021Updated 5 years ago
- Bug Bounty Tools used on Twitch - Recon☆327Jul 23, 2026Updated 3 months ago
- This is GitHub_Dorks and some tips i collect from different resources.Recon_Api is tip when you find token or api without knowing what to…☆21Sep 15, 2021Updated 5 years ago
- Simple S3 Bucket Testing Software☆32Nov 4, 2021Updated 5 years ago
- This shows the hardware and software that is used on my 'Car in a box' to make it think it is a fully working vehicle.☆23May 26, 2023Updated 3 years ago
- Simple tools to handle string and generate subdomain permutations☆14Jun 8, 2022Updated 4 years ago
- A bash script that automates the scanning of a target network for HTTP resources through XXE☆38Dec 2, 2020Updated 5 years ago
- List of pentest related scripts edited or created by GoVanguard☆11Nov 4, 2024Updated 2 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Scraping creds using Github API and truffleHog☆11Dec 13, 2023Updated 2 years ago
- Learn 101 is a challenge to keep the learning spirit going on and challenge myself to learn something daily for 101 days.☆30Jun 7, 2022Updated 4 years ago
- Nmap NSE script for enumerate indices, plugins and cluster nodes on an elasticsearch target☆44Apr 17, 2021Updated 5 years ago
- A list of resources for those interested in getting started in bug bounties☆13Jun 18, 2020Updated 6 years ago
- ☆10Aug 13, 2018Updated 8 years ago
- Flask powered website to display tweets with a hashtag #bugbountytip☆17Apr 14, 2020Updated 6 years ago
- Tests for LFI in PHP apps and automates the process of leveraging LFI's to recursively download source code and discover new files via in…☆14Sep 29, 2022Updated 4 years ago
- A set of additional PHPStan rules used in Oro products.☆13Oct 28, 2026Updated 2 weeks ago
- This repository contains the source code of the OWASP TOP 10 NodeJS Panel I have used☆10Nov 20, 2022Updated 3 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ShoLister is a tool that collects all available subdomains for specific hostname or organization from Shodan. The tool is designed to be …☆58May 10, 2022Updated 4 years ago
- ☆18May 21, 2022Updated 4 years ago
- A collection of handy and specific tools for the Red Teamer☆11Aug 13, 2024Updated 2 years ago
- Bug Bounty Clipboard☆17Nov 6, 2019Updated 7 years ago
- Writeups of CTFLearn Challenges , by EdbR - EladBeber☆16Feb 21, 2026Updated 8 months ago
- My Notes on Regular Expressions for AWAE/OSWE.☆39Sep 5, 2023Updated 3 years ago
- sub domain wild card filtering tool☆38Apr 18, 2020Updated 6 years ago
- ☆11Sep 17, 2021Updated 5 years ago
- Repository for OWASP Code Review document☆17Jun 24, 2014Updated 12 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A fast web fuzzer in golang☆17Dec 2, 2020Updated 5 years ago
- Store ZAP reports historically and compare current ZAP results against the most recent for changes in alerts.☆12Sep 28, 2026Updated last month
- ☆17Feb 4, 2020Updated 6 years ago
- This is a docker environment ready set up for multiple WooCommerce Plugin vulnerabilities.☆30Dec 1, 2020Updated 5 years ago
- ☆49Oct 28, 2020Updated 6 years ago
- Apache Tomcat exploit and Pentesting guide for penetration tester☆66Sep 2, 2022Updated 4 years ago
- jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()…☆11Apr 9, 2021Updated 5 years ago
Are these results useful?