Welcome! This repo is a conglomeration of tips, tricks, tools, and data analysis to use while doing web application security assessments, and more specifically towards bug hunting in bug bounties.
☆14Jan 13, 2019Updated 7 years ago
Alternatives and similar repositories for The-Bug-Hunters-Methodology
Users that are interested in The-Bug-Hunters-Methodology are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Collection of web app methodology from initial recon into exploit known vulnerability. Used when conducting Bug Bounty, Penetration Testi…☆13Oct 23, 2021Updated 4 years ago
- ☆27Jan 25, 2020Updated 6 years ago
- A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms ti…☆98Jun 5, 2021Updated 5 years ago
- My personal bug bounty toolkit.☆164Jun 18, 2024Updated 2 years ago
- An Automation Tool Written in Python which uses Twitter and GitHub API☆15Jan 25, 2022Updated 4 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- A simple script to check for insecurely exposed git repositories.☆12Mar 17, 2019Updated 7 years ago
- Pentest-Command☆20Nov 10, 2021Updated 4 years ago
- Open source alternative to Burpsuite☆16May 18, 2021Updated 5 years ago
- TheCl0n3r will allow you to download and manage your git repositories.☆51Oct 22, 2020Updated 5 years ago
- Bug Bounty Tools used on Twitch - Recon☆327Jul 23, 2026Updated last month
- ☆13Jan 4, 2022Updated 4 years ago
- This is GitHub_Dorks and some tips i collect from different resources.Recon_Api is tip when you find token or api without knowing what to…☆21Sep 15, 2021Updated 4 years ago
- 'apk-yara-checker' is a little CLI tool written in Rust to check Yara rules against a folder of APK files.☆16Jul 6, 2024Updated 2 years ago
- Simple tools to handle string and generate subdomain permutations☆15Jun 8, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Firebase database finder.☆13Dec 30, 2020Updated 5 years ago
- Learn 101 is a challenge to keep the learning spirit going on and challenge myself to learn something daily for 101 days.☆30Jun 7, 2022Updated 4 years ago
- FirePrint is a security tool for finding misconfigured Firebase realtime databases in Android or iOS applications.☆22Apr 4, 2024Updated 2 years ago
- Google Hack Database dork automatic tool.☆27Dec 11, 2017Updated 8 years ago
- A collection of handy and specific tools for the Red Teamer☆11Aug 13, 2024Updated 2 years ago
- Scraping creds using Github API and truffleHog☆11Dec 13, 2023Updated 2 years ago
- A list of resources for those interested in getting started in bug bounties☆13Jun 18, 2020Updated 6 years ago
- ☆10Aug 13, 2018Updated 8 years ago
- This repository contains the source code of the OWASP TOP 10 NodeJS Panel I have used☆10Nov 20, 2022Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A Modern Operating System Written in C++ From Scratch!☆14Jan 30, 2022Updated 4 years ago
- ShoLister is a tool that collects all available subdomains for specific hostname or organization from Shodan. The tool is designed to be …☆59May 10, 2022Updated 4 years ago
- Tests for LFI in PHP apps and automates the process of leveraging LFI's to recursively download source code and discover new files via in…☆14Sep 29, 2022Updated 3 years ago
- A set of additional PHPStan rules used in Oro products.☆13Mar 31, 2026Updated 4 months ago
- 😈 Hardware USB keylogger project with Arduino.☆16Feb 2, 2017Updated 9 years ago
- ☆71Jul 15, 2022Updated 4 years ago
- Python google hacking (dorking) script.☆18Jul 15, 2018Updated 8 years ago
- Exploit for CVE-2021-27342 vulnerability (telnet authentication brute-force protection bypass)☆15May 15, 2021Updated 5 years ago
- This is a docker environment ready set up for multiple WooCommerce Plugin vulnerabilities.☆30Dec 1, 2020Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆49Oct 28, 2020Updated 5 years ago
- A collection of awesome penetration testing resources, tools and other shiny things☆17Feb 11, 2017Updated 9 years ago
- Backup Youtube playlists and alert you on songs deletions☆17Jul 21, 2026Updated last month
- sub domain wild card filtering tool☆40Apr 18, 2020Updated 6 years ago
- Bug Bounty Clipboard☆17Nov 6, 2019Updated 6 years ago
- A fast web fuzzer in golang☆16Dec 2, 2020Updated 5 years ago
- jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()…☆11Apr 9, 2021Updated 5 years ago