Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Online tips and explain the commands, for the better understanding of new hunters..
☆37Dec 8, 2023Updated 2 years ago
Alternatives and similar repositories for bug-bounty-tips
Users that are interested in bug-bounty-tips are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A curated list of available Bug Bounty & Disclosure Programs and Write-ups.☆83Dec 3, 2023Updated 2 years ago
- Generate a cross join, also known as a Cartesian product, from the lines of the specified files. This process is useful for creating fuzz…☆21Jun 29, 2023Updated 3 years ago
- This script will find some basic vulns. I made this script for my daily hunting. The best feature about this script is just run it in bac…☆21Feb 19, 2024Updated 2 years ago
- Gampung tools for find nuclei template from github☆12Sep 6, 2023Updated 3 years ago
- collection of various nuclei templates☆11Apr 18, 2023Updated 3 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Pointer is a Fast Simple Lightweight Tool for Endpoint Discovery.☆14Dec 30, 2023Updated 2 years ago
- This is a website extract all URLs scraper built using javascript(nodejs)☆12Jan 24, 2024Updated 2 years ago
- Ultimate List Of Bug Bounty Tools☆11Feb 25, 2023Updated 3 years ago
- A sensible no bullshit repo of summaries of reports on hackerone, bugcrowd and alike, that makes straight up sense and make it easy to re…☆10Oct 21, 2023Updated 3 years ago
- CRLF Bug scanner for WebPentesters and Bugbounty Hunters☆48Jun 9, 2023Updated 3 years ago
- A powerful and lightweight tool for bug bounty hunters and security researchers to identify hardcoded secrets, API keys, tokens, credenti…☆17Aug 29, 2025Updated last year
- 🕵️♂️🔍 A tool with several scanning techniques that extracts live IP addresses from a list of IP addresses or CIDR notations.☆51May 14, 2023Updated 3 years ago
- PenTest and BugBounty 🕵️☆17Sep 15, 2026Updated last month
- List of custom Nuclei templates☆16Nov 4, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- My bug bounty notes☆35Apr 10, 2021Updated 5 years ago
- BugBounty_CheatSheet☆263May 11, 2023Updated 3 years ago
- Dive into a handpicked selection of tools, guides, and tips tailored for beginners in Bug Bounty and Penetration Testing. 🐛🛡️☆41Aug 14, 2024Updated 2 years ago
- Some Tutorials and Things to Help Bug Hunter☆31Mar 17, 2021Updated 5 years ago
- Javascript file change monitoring☆23Jun 22, 2026Updated 4 months ago
- At this repo you can find any tools, tricks or templates for general penetration testing assesment☆16Apr 27, 2024Updated 2 years ago
- Good resources about web security that I have read.☆28Jul 23, 2023Updated 3 years ago
- Nuclei templates for drupal vulns... far from perfect☆18Jan 9, 2025Updated last year
- ☆16Jun 28, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆11Jun 19, 2024Updated 2 years ago
- This script is used to search for cloud certificate entities such as Amazon, Azure, and others that have been extracted by the kaeferjaeg…☆56Nov 21, 2025Updated 11 months ago
- A collaborative hub for Nuclei templates. Contribute, share, and explore powerful vulnerability detection tools!☆53Jun 22, 2026Updated 4 months ago
- PHP CGI Argument Injection (CVE-2024-4577) RCE☆25Aug 20, 2024Updated 2 years ago
- Bug Bounty Methodology-slides by Muhammad M. Awali. Pentesting and Researcher Talks.☆32Feb 17, 2023Updated 3 years ago
- Find subdomains on GitLab.☆106Apr 28, 2024Updated 2 years ago
- WayAI — Wayback & Common Crawl Recon (CLI + Web GUI)☆13Dec 28, 2025Updated 10 months ago
- An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites…☆44Jun 28, 2022Updated 4 years ago
- Bash script to automate Bug Bounty Reconnaissance☆46Jan 3, 2021Updated 5 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Course Material of CSE3111-Software Engineering, CSE3112-Software Engineering Lab, CSE3162-Software Development Lab☆10Jul 24, 2017Updated 9 years ago
- Xssor.go is a xss reflections checker for urls☆73Mar 22, 2023Updated 3 years ago
- ☆116Apr 25, 2023Updated 3 years ago
- ☆47Jan 14, 2024Updated 2 years ago
- CTF and Bug Bounty Hunting WriteUps.☆21Oct 23, 2026Updated last week
- My useful files for penetration tests, security assessments, bug bounty and other security related stuff☆246Updated this week
- ☆32Nov 3, 2024Updated last year