Alternatives and similar repositories for Bugbounty

Users that are interested in Bugbounty are comparing it to the libraries listed below

• daffainfo / vulnerable-web
  Simple vulnerability labs that created using PHP and MySQL.
  ☆17Updated 3 years ago
• xcapri / dProgBb
  Detect Program Bug Bounty
  ☆42Updated 6 months ago
• lucsemassa / payload_launcher
  ☆41Updated 2 years ago
• rix4uni / xsschecker
  xsschecker tests endpoints for reflected XSS by injecting payloads and checking responses. It prints vulnerable if the payload is reflect…
  ☆39Updated 2 months ago
• thecyberneh / BSides-Ahmedabad-2024-Conference-Slides
  A collection of slides and presentations from BSides Ahmedabad 2024, held on October 12th and 13th. This repository features key insights…
  ☆38Updated last year
• dirtycoder0124 / form_finder
  This script can be used to find html forms in the list of endpoints/urls.
  ☆50Updated last year
• AnonKryptiQuz / TimeVault
  TimeVault is a specialized automated tool designed to detect potential information disclosure vulnerabilities in web applications by leve…
  ☆41Updated 11 months ago
• H4cker-Nafeed / Nafeed-Broken-Link
  Nafeed-Broken-Link: A Python tool designed to check for broken social media links on a given domain. This script crawls all accessible pa…
  ☆66Updated last year
• dragonked2 / Dons
  Dons Js Scanner is a sleek command-line tool that hunts for hidden treasures—API keys, credentials, and secrets—lurking in the JavaScript…
  ☆86Updated 5 months ago
• bhavesh-pardhi / BugSquasher
  BugSquasher Bug Bounty Tools List
  ☆20Updated 2 years ago
• 1hehaq / shef
  bring shodan facets into your terminal without API key.
  ☆96Updated 2 months ago
• pikpikcu / hostinject
  hostinject (Host Header Injection) Tool is a Python script that allows you to perform host header injection vulnerability testing on a ta…
  ☆27Updated 2 years ago
• TheHermione / DorkFinder
  Automatic tool to find Google Dorks
  ☆36Updated last year
• AnonKryptiQuz / NextSploit
  NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927, a security flaw in Next.js
  ☆83Updated 8 months ago
• xcapri / subdosec
  Subdosec is a fast, accurate subdomain takeover scanner with no false positives. It also offers a database of sites vulnerable to subdoma…
  ☆53Updated this week
• RevoltSecurities / Dnsbruter
  Dnsbruter is a powerful tool designed to perform active subdomain enumeration and discovery. It uses DNS resolution to efficiently brutef…
  ☆123Updated last year
• ifconfig-me / SQLi-Scanner
  ☆102Updated 9 months ago
• raoufmaklouf / jsecret
  ☆30Updated last year
• freelancermijan / urlfuzzer
  URL Fuzzer
  ☆20Updated last year
• orwagodfather / SQL-Wordlist
  ☆81Updated last year
• NazaninNazari / Origin_Recon
  N0aziXss Origin Recon 🍓
  ☆23Updated 3 weeks ago
• un9nplayer / AutoRecon-XSS
  AutoRecon-XSS is a script designed for automated reconnaissance of XSS vulnerabilities. It crawls the target URL or alive domains, extrac…
  ☆133Updated last year
• hacksys-hub / hacksys_xss
  ☆22Updated last year
• xalgord / My-Methodologies
  Tools and methods that I personally use for Recon and Exploitations
  ☆45Updated 8 months ago
• boobooHQ / private_templates
  Private Nuclei Templates
  ☆100Updated 10 months ago
• rootbakar / LUcek
  This script checks the status of URLs to see if they are alive or not.
  ☆13Updated last year
• h0tak88r / subfalcon
  subfalcon is a subdomain enumeration tool that allows you to discover and monitor subdomains for a given list of domains or a single doma…
  ☆54Updated last year
• anmolksachan / WayBackupFinder
  A passive way to find backups/ sensitive information.
  ☆88Updated 6 months ago
• rootDR / ex-param
  ex-param is an automated tool designed for finding reflected parameters for XSS vulnerabilities. It crawls a target website, extracts GET…
  ☆63Updated 10 months ago
• mr-kasim-mehar / FusionXss
  ☆38Updated 11 months ago