A curated collection of essential tools and scripts for bug bounty hunters and cybersecurity professionals, designed to streamline your vulnerability assessment and penetration testing.
☆21Jul 9, 2025Updated last year
Alternatives and similar repositories for bugbounty-toolkit
Users that are interested in bugbounty-toolkit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Daftar ini berisikan alamat untuk melaporkan Insiden Keamanan Siber dan Kerentanan pada website atau aplikasi web milik Pemerintah Indone…☆11Updated this week
- Vulnerable Library Management Systems - For Web Pentest Educational Purpose Only☆15Jan 2, 2026Updated 10 months ago
- A fast, read-only MCP server for AI-assisted analysis of APK, DEX, JAR, and other Android artifacts, powered by ASC.☆20Oct 8, 2026Updated 3 weeks ago
- yublueflower is a security workflow to discover real-world threats using open-source tools such as urlfinder, katana, httpx, nuclei, and …☆22Oct 15, 2026Updated 3 weeks ago
- Kumpulan command yang dijalankan setiap chapter materi pelatihan Wazuh.☆18Oct 1, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- VulnVerify Skills helps OpenCode, Codex, and Claude Code verify web vulnerability reports from manual or agentic AI testing.☆11Oct 18, 2026Updated 2 weeks ago
- ☆10Jul 28, 2025Updated last year
- Advanced XSS Scanner for modern web apps (Hybrid crawler, WAF-aware, AI-assisted).☆24Nov 2, 2025Updated last year
- XSS Payload Cheat Sheet☆11Sep 1, 2024Updated 2 years ago
- Framework for Unified Flaw & Fault Auditing The ultimate AWS Cloud Security Audit Framework that makes security auditing so easy, you can…☆32Jan 19, 2026Updated 9 months ago
- Praktek API Penetration Testing menggunakan Owasp crAPI☆10May 31, 2024Updated 2 years ago
- 🦅 MataElang (MatEl) OS — Next-gen network surveillance system featuring a stunning 3D interactive globe, real-time satellite traffic int…☆24Feb 19, 2026Updated 8 months ago
- Python-based static analyzer for Android APKs that extracts attack surface and flags high-risk vulnerability patterns with lightweight ta…☆64Feb 22, 2026Updated 8 months ago
- Deploy Vulnerable Lab to Learn Pentest using Bash Script☆18May 2, 2023Updated 3 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- ☆84May 5, 2026Updated 6 months ago
- A simple order management web app built with React + TypeScript for WPU Ramadhan Bootcamp 2025 mini project. Uses Zustand for state manag…☆10Jan 1, 2026Updated 10 months ago
- Mazer for CodeIgniter☆33Jan 24, 2023Updated 3 years ago
- Casino Heist is a playground for learning Solidity smart contracts security, we have it ready for you to play at https://casinoheist.enum…☆15Jan 15, 2026Updated 9 months ago
- Solutions for the HackThisSite Missions☆17Nov 29, 2017Updated 8 years ago
- Simple XSS vulnerability checker tool very useful with xsschecker.☆28Nov 21, 2025Updated 11 months ago
- Debpic lets you easily build Debian packages in an isolated Docker environment.☆11Jul 20, 2026Updated 3 months ago
- ☆15Aug 21, 2021Updated 5 years ago
- CVE-2022-37122 Path Traversal Scanner☆12Oct 12, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A simple, LFI vulnerable PHP application☆20Sep 27, 2018Updated 8 years ago
- A bunch of payloads for my own usage☆15Oct 1, 2026Updated last month
- A fast and efficient subdomain hijacking scanner that checks for takeover vulnerabilities by matching HTTP response bodies against predef…☆43Apr 12, 2026Updated 6 months ago
- Sending file through ICMP packet using PING☆23Jul 18, 2024Updated 2 years ago
- CVE-2026-0075 — Android ContactsProvider information disclosure via JSON error side-channel, including PoC, root-cause analysis, and patc…☆13Aug 12, 2026Updated 2 months ago
- WayAI — Wayback & Common Crawl Recon (CLI + Web GUI)☆13Dec 28, 2025Updated 10 months ago
- 🛡️ A curated list of commonly used tools for cybersecurity☆20Jul 27, 2026Updated 3 months ago
- Open-source stealer logs parser and visualization dashboard that structures and presents log data to facilitate analysis.☆100Jun 18, 2026Updated 4 months ago
- ☆12Feb 28, 2026Updated 8 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆24Oct 17, 2024Updated 2 years ago
- LLM-driven reverse engineering knowledge base custodian — ingests blogs, pentest findings, and malware write-ups into a structured, anti-…☆15Updated this week
- aplikasi surat menyurat☆11Jan 3, 2023Updated 3 years ago
- A growing collection of tools around email idenfitication, creation, & verification☆11Oct 15, 2024Updated 2 years ago
- ☆16May 14, 2025Updated last year
- ☆87Aug 25, 2022Updated 4 years ago
- AI-Powered Static Application Security Testing (SAST) — written in Go.☆40Oct 27, 2026Updated last week