Welcome to the 403 and 401 Bypass Techniques and Bug Bounty Tips repository! This repo is a collection of methods and strategies to bypass 403 and 401 HTTP response codes, along with various tips and tricks for bug bounty hunting. If you're passionate about finding vulnerabilities and improving security, this is the right place for you!
☆40Dec 26, 2024Updated last year
Alternatives and similar repositories for BugBountyTips
Users that are interested in BugBountyTips are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- URILoot is a browser extension designed for Bug Bounty Hunters and Pentesters. Makes fetching uris easy from various sources.☆64Feb 15, 2026Updated 8 months ago
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆24Mar 16, 2026Updated 7 months ago
- ☆35Jun 18, 2026Updated 4 months ago
- Get acquisitions by scraping titles of crunchbase.☆15Dec 18, 2024Updated last year
- ☆38Oct 16, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆11Mar 1, 2025Updated last year
- ♥☆225Sep 7, 2025Updated last year
- A simple recon pipeline☆40Sep 24, 2026Updated last month
- Collection of documentation, tools, and tips related to vulnerability research.☆278Sep 24, 2026Updated last month
- NextForge — unified Next.js exploitation framework. RCE · SSRF · middleware · authorized lab only.☆17Sep 23, 2026Updated last month
- A lightweight, fast kernel exploit suggester written in C++ that automatically detects if your Linux kernel is vulnerable to known privil…☆24Jun 27, 2026Updated 4 months ago
- DsSScan — is a tool for scanning directories contained in .DS_Store files used on websites. It extracts information about the directory s…☆10Jan 27, 2025Updated last year
- An obsessive, expert-tier knowledge base + AI skill system for professional bug bounty hunting, security research, and penetration testin…☆68Apr 25, 2026Updated 6 months ago
- I-Espresso is a tool that enables users to generate Portable Executable (PE) files from batch scripts. Leveraging IExpress, it demonstrat…☆84Oct 17, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- MetaInjector is a tool designed to test security by injecting malicious payloads (such as XSS, SQL Injection, remote code execution, etc…☆13Sep 7, 2024Updated 2 years ago
- ☆16Jun 14, 2026Updated 4 months ago
- ☆13Mar 6, 2025Updated last year
- A list of Private Nuclei Templates☆14May 22, 2023Updated 3 years ago
- CoupDeWeb is an automated web vulnerability scanner designed for security researchers and developers. It scans for potential vulnerable …☆34Oct 17, 2024Updated 2 years ago
- ☆49Feb 27, 2026Updated 8 months ago
- bring shodan facets into your terminal without API key.☆111Oct 21, 2025Updated last year
- Burp extension to log requests and responses to PostgreSQL☆15Jun 30, 2025Updated last year
- anveshan is a completed script that helps to automate your recon process, It finds subdomains, urls, js files, parameters, screenshots, a…☆29Oct 29, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Firebase_Checker is Python tool to analyze APK files and web applications for Firebase-related vulnerabilities. This tool identifies secu…☆65Nov 6, 2025Updated 11 months ago
- IDOR Scanner is a Burp Suite extension that automates the detection and enumeration of potentially vulnerable numeric fields to identify …☆45Feb 24, 2025Updated last year
- This script automates SQL injection testing using SQLMap with AI-powered decision making.☆31Jun 13, 2025Updated last year
- Fuzzing Infrastructure using afl++ for coverage guided fuzzing including triaging and live dashboard.☆50Jul 23, 2026Updated 3 months ago
- ☆204Jan 22, 2026Updated 9 months ago
- A Fuzzing skill based on purely what i know.☆43Jun 3, 2026Updated 4 months ago
- ☆16Apr 17, 2025Updated last year
- 0xJS is an AI-powered JavaScript Security Tool☆68Apr 16, 2026Updated 6 months ago
- Organize, track, and share vulnerability findings effortlessly. This Burp Suite extension integrates with Obsidian, offering a proven not…☆47Oct 7, 2026Updated 3 weeks ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- wp2shell — Pre-authentication RCE in WordPress Core (CVE-2026-60137 + CVE-2026-63030). Chains an SQL injection in author__not_in with bat…☆10Jul 18, 2026Updated 3 months ago
- GitIntel is a robust GitHub OSINT tool crafted to reveal concealed insights from GitHub repositories and user profiles. Its capabilities …☆19Jan 29, 2025Updated last year
- Contains nuclei templates for security testing and POCs.☆17Oct 19, 2024Updated 2 years ago
- Open-source toolkit to identify privilege escalation paths on Linux systems.☆23Feb 23, 2026Updated 8 months ago
- Gouge is a simple Burp extension to extract or gouge all URLs which are seen in JS files as you visit different websites/webpages in Burp…☆30Jul 21, 2024Updated 2 years ago
- BeeXSS is a specialized automated tool designed to detect Blind XSS (Cross-Site Scripting) vulnerabilities in web applications.☆39Dec 3, 2024Updated last year
- Xploitra is a powerful reverse shell payload generator for educational and security testing. It offers customizable payloads with advance…☆74Oct 17, 2024Updated 2 years ago