Welcome to the 403 and 401 Bypass Techniques and Bug Bounty Tips repository! This repo is a collection of methods and strategies to bypass 403 and 401 HTTP response codes, along with various tips and tricks for bug bounty hunting. If you're passionate about finding vulnerabilities and improving security, this is the right place for you!
☆38Dec 26, 2024Updated last year
Alternatives and similar repositories for BugBountyTips
Users that are interested in BugBountyTips are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆24Mar 16, 2026Updated 6 months ago
- URILoot is a browser extension designed for Bug Bounty Hunters and Pentesters. Makes fetching uris easy from various sources.☆64Feb 15, 2026Updated 7 months ago
- An obsessive, expert-tier knowledge base + AI skill system for professional bug bounty hunting, security research, and penetration testin…☆63Apr 25, 2026Updated 5 months ago
- Get acquisitions by scraping titles of crunchbase.☆16Dec 18, 2024Updated last year
- ☆38Oct 16, 2025Updated 11 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ♥☆222Sep 7, 2025Updated last year
- Collection of documentation, tools, and tips related to vulnerability research.☆276Sep 24, 2026Updated 2 weeks ago
- A lightweight, fast kernel exploit suggester written in C++ that automatically detects if your Linux kernel is vulnerable to known privil…☆24Jun 27, 2026Updated 3 months ago
- Firebase_Checker is Python tool to analyze APK files and web applications for Firebase-related vulnerabilities. This tool identifies secu…☆63Nov 6, 2025Updated 11 months ago
- ☆13Mar 6, 2025Updated last year
- IDOR Scanner is a Burp Suite extension that automates the detection and enumeration of potentially vulnerable numeric fields to identify …☆45Feb 24, 2025Updated last year
- I-Espresso is a tool that enables users to generate Portable Executable (PE) files from batch scripts. Leveraging IExpress, it demonstrat…☆84Oct 17, 2024Updated last year
- CoupDeWeb is an automated web vulnerability scanner designed for security researchers and developers. It scans for potential vulnerable …☆34Oct 17, 2024Updated last year
- all round pentest skill☆442Sep 16, 2026Updated 3 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆50Feb 27, 2026Updated 7 months ago
- Stealth hybrid URL mapper☆38May 1, 2026Updated 5 months ago
- This script automates SQL injection testing using SQLMap with AI-powered decision making.☆31Jun 13, 2025Updated last year
- Burp Suite extension for cross-identity & cross-tenant access-control testing — BAC, IDOR, BOLA, and privilege escalation.☆61Jul 12, 2026Updated 2 months ago
- A Fuzzing skill based on purely what i know.☆43Jun 3, 2026Updated 4 months ago
- anveshan is a completed script that helps to automate your recon process, It finds subdomains, urls, js files, parameters, screenshots, a…☆29Oct 29, 2024Updated last year
- The Black Mamba — Bug bounty hunting CLI framework. 30+ scanner modules, OWASP Top 10 coverage, Kill Chain methodology and AI-assisted pe…☆16Aug 16, 2026Updated last month
- bring shodan facets into your terminal without API key.☆112Oct 21, 2025Updated 11 months ago
- Burp extension to log requests and responses to PostgreSQL☆16Jun 30, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆16Apr 17, 2025Updated last year
- 0xJS is an AI-powered JavaScript Security Tool☆69Apr 16, 2026Updated 5 months ago
- Contains nuclei templates for security testing and POCs.☆17Oct 19, 2024Updated last year
- ☆205Jan 22, 2026Updated 8 months ago
- Open-source toolkit to identify privilege escalation paths on Linux systems.☆23Feb 23, 2026Updated 7 months ago
- My Main App Hacking CheckList☆35Jun 20, 2026Updated 3 months ago
- Organize, track, and share vulnerability findings effortlessly. This Burp Suite extension integrates with Obsidian, offering a proven not…☆51Updated this week
- Fetch, download, and decompile Android/iOS/Exe assets from HackerOne bug bounty programs☆43Jun 24, 2026Updated 3 months ago
- Gouge is a simple Burp extension to extract or gouge all URLs which are seen in JS files as you visit different websites/webpages in Burp…☆30Jul 21, 2024Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Agent Browser Bridge for Firefox.☆21Apr 29, 2026Updated 5 months ago
- Xploitra is a powerful reverse shell payload generator for educational and security testing. It offers customizable payloads with advance…☆74Oct 17, 2024Updated last year
- AI-powered ffuf wrapper☆811Dec 4, 2025Updated 10 months ago
- ☆99Updated this week
- ☆266Dec 10, 2025Updated 10 months ago
- TokenTwin Checker — Dual Token BAC/IDOR Tester for Burp Suite☆98Aug 24, 2026Updated last month
- POC Pdf-exploit builder on C#☆12Mar 1, 2024Updated 2 years ago