Collection of documentation, tools, and tips related to vulnerability research.
☆265Sep 5, 2026Updated last week
Alternatives and similar repositories for vulnerability-research
Users that are interested in vulnerability-research are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- My ATO Via Password Reset Methodology☆54May 13, 2026Updated 3 months ago
- Spec-driven bug bounty writeups and real world security failures.☆43Jul 5, 2026Updated 2 months ago
- ☆47Jun 7, 2026Updated 3 months ago
- Welcome to the 403 and 401 Bypass Techniques and Bug Bounty Tips repository! This repo is a collection of methods and strategies to bypas…☆38Dec 26, 2024Updated last year
- ☆163Jan 22, 2026Updated 7 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- BountyLens MCP server — connect Claude Code to your Hunter Tracker☆64Jun 22, 2026Updated 2 months ago
- SSRFHunter☆18Jan 17, 2026Updated 7 months ago
- A resources for who want to learn and get deep into client-side bugs☆558Dec 8, 2024Updated last year
- NextSSRF — CVE-2026-44578 Scanner & Exploit ║ ║ Next.js WebSocket Upgrade Handler SSRF☆77May 15, 2026Updated 3 months ago
- ☆1,178Jan 28, 2026Updated 7 months ago
- Bug Bounty Methodology☆335Aug 4, 2026Updated last month
- Stealth hybrid URL mapper☆31May 1, 2026Updated 4 months ago
- How To approach recon on real targets — from passive enumeration to origin IP discovery. Covers tools, automation, and the logic behind e…☆402Jul 5, 2026Updated 2 months ago
- Web2 bug bounty Agent Skill — evidence-based, no AI slop. Covers 18 vulnerability classes across HackerOne, Bugcrowd, Intigriti, and YesW…☆71Feb 21, 2026Updated 6 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- My Main App Hacking CheckList☆35Jun 20, 2026Updated 2 months ago
- List of Mine Private wordlist i use for fuzzing☆97Jun 17, 2026Updated 2 months ago
- 0xJS is an AI-powered JavaScript Security Tool☆67Apr 16, 2026Updated 4 months ago
- ♥☆221Sep 7, 2025Updated last year
- AI-powered ffuf wrapper☆806Dec 4, 2025Updated 9 months ago
- Smart contract audit findings validator based on Code4rena's official judging criteria.☆17Mar 31, 2026Updated 5 months ago
- Autonomous Bug Bounty Hunting Framework powered by Claude Code. 20 AI agents, state-machine orchestration, Burp Suite MCP, credential vau…☆72May 19, 2026Updated 3 months ago
- A tool for detecting subdomain takeover vulnerabilities by checking DNS records☆34May 28, 2026Updated 3 months ago
- ☆79May 5, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- AI-powered bug bounty hunting toolkit that works with or without subscription.☆4,750Sep 4, 2026Updated last week
- Malleable Caddy Redirector☆20Apr 24, 2026Updated 4 months ago
- Grafana scanner with all public CVEs that I collected in one script to make grafana testing easier☆244Jul 7, 2026Updated 2 months ago
- AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes☆417Apr 30, 2026Updated 4 months ago
- A Fuzzing skill based on purely what i know.☆43Jun 3, 2026Updated 3 months ago
- This repository contains Bug Bounty writeups☆111Updated this week
- web cache deception detect☆43Aug 26, 2026Updated 2 weeks ago
- Enhanced Burp Suite extension for finding links and sensitive data in JavaScript files☆26May 10, 2026Updated 4 months ago
- Open-source passive reconnaissance and exposure discovery tool that leverages VirusTotal and the Wayback Machine to uncover subdomains, U…☆147Jun 23, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆1,647Mar 7, 2026Updated 6 months ago
- ☆47Sep 25, 2025Updated 11 months ago
- ☆96May 11, 2026Updated 4 months ago
- An Automated Framework for End-to-End Blind XSS Detection and Reporting☆17Jan 23, 2026Updated 7 months ago
- Replay any request as another user to find IDOR/BOLA/BFLA, right in the browser.☆29Jun 16, 2026Updated 2 months ago
- ex-param is an automated tool designed for finding reflected parameters for XSS vulnerabilities. It crawls a target website, extracts GET…☆60Feb 22, 2025Updated last year
- Convert your HackerOne reports into reusable AI skills.☆108Mar 9, 2026Updated 6 months ago