Collection of documentation, tools, and tips related to vulnerability research.
☆284Nov 11, 2026Updated this week
Alternatives and similar repositories for vulnerability-research
Users that are interested in vulnerability-research are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes☆466Apr 30, 2026Updated 6 months ago
- Reusable prompts for a structured, evidence-first bug bounty hunting workflow☆932Oct 3, 2026Updated last month
- A proof-of-concept PDF file designed for authorized security testing of PDF upload functionality and PDF viewer behavior, including XSS a…☆80Aug 28, 2026Updated 2 months ago
- ☆16Jun 14, 2026Updated 4 months ago
- My ATO Via Password Reset Methodology☆53May 13, 2026Updated 5 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Burp Suite extension to find hardcoded secrets & hidden endpoints in JavaScript. 150+ detection patterns, active JS fetch, low-noise fals…☆98Sep 10, 2026Updated 2 months ago
- Google Gemini API key discovery and security scanning tool.☆43Nov 2, 2026Updated last week
- BountyLens MCP server — connect Claude Code to your Hunter Tracker☆65Jun 22, 2026Updated 4 months ago
- A web security workbench built for AI agents.☆393Updated this week
- ☆47Jun 7, 2026Updated 5 months ago
- all round pentest skill☆464Sep 16, 2026Updated last month
- How To approach recon on real targets — from passive enumeration to origin IP discovery. Covers tools, automation, and the logic behind e…☆442Jul 5, 2026Updated 4 months ago
- Spec-driven bug bounty writeups and real world security failures.☆43Sep 18, 2026Updated last month
- ☆205Jan 22, 2026Updated 9 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ♥☆227Sep 7, 2025Updated last year
- Welcome to the 403 and 401 Bypass Techniques and Bug Bounty Tips repository! This repo is a collection of methods and strategies to bypas…☆40Dec 26, 2024Updated last year
- A resources for who want to learn and get deep into client-side bugs☆561Dec 8, 2024Updated last year
- Designed for managing vulnerability discovery at scale with agentic AI and integrates with HackerOne.☆132Sep 2, 2026Updated 2 months ago
- AI-powered bug bounty hunting toolkit that works with or without subscription.☆5,808Oct 28, 2026Updated 2 weeks ago
- A Burp Suite extension that exposes the full Montoya API as a local REST API, with Swagger UI☆136Oct 26, 2026Updated 2 weeks ago
- My Main App Hacking CheckList☆35Jun 20, 2026Updated 4 months ago
- Agent skill for rigorous bug bounty report triage, validation, severity escalation, and submission-ready reporting.☆151Oct 9, 2026Updated last month
- A local, safety-first pre-submission reviewer for bug bounty reports.☆46Oct 3, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- find sources and sinks from js files☆17Apr 4, 2026Updated 7 months ago
- Structured practice: Mainly PortSwigger lab writeups☆23Nov 3, 2026Updated last week
- 403 Access Bypass Tester☆127Oct 13, 2026Updated 3 weeks ago
- Bug Bounty Methodology☆339Oct 5, 2026Updated last month
- A complete bug bounty workspace for HackerOne researchers. Includes scope enforcement, automated recon/vuln pipeline (400+ tools), report…☆495Oct 14, 2026Updated 3 weeks ago
- Full external application attack surface management and exposure management.☆18Aug 16, 2026Updated 2 months ago
- Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full writ…☆1,365Updated this week
- Burp Suite extension + port-based highlighter: dedupes HTTP history into a live unique-request feed and color-codes attacker/victim traff…☆15Aug 14, 2026Updated 2 months ago
- Stealth hybrid URL mapper☆60Oct 21, 2026Updated 3 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆78May 5, 2025Updated last year
- AI-powered ffuf wrapper☆814Dec 4, 2025Updated 11 months ago
- web cache deception detect☆43Aug 26, 2026Updated 2 months ago
- A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curat…☆5,607Updated this week
- The official Rifteo agent skills library - a collection of reusable instruction sets for AI agents covering security testing, audit, and …☆38Sep 16, 2026Updated last month
- ☆1,730Mar 7, 2026Updated 8 months ago
- ☆51Aug 17, 2026Updated 2 months ago
Are these results useful?