Collection of documentation, tools, and tips related to vulnerability research.
☆274Sep 24, 2026Updated 3 weeks ago
Alternatives and similar repositories for vulnerability-research
Users that are interested in vulnerability-research are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A proof-of-concept PDF file designed for authorized security testing of PDF upload functionality and PDF viewer behavior, including XSS a…☆77Aug 28, 2026Updated last month
- Reusable prompts for a structured, evidence-first bug bounty hunting workflow☆739Oct 3, 2026Updated 2 weeks ago
- Burp Suite extension to find hardcoded secrets & hidden endpoints in JavaScript. 150+ detection patterns, active JS fetch, low-noise fals…☆97Sep 10, 2026Updated last month
- ☆16Jun 14, 2026Updated 4 months ago
- AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes☆452Apr 30, 2026Updated 5 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- BountyLens MCP server — connect Claude Code to your Hunter Tracker☆65Jun 22, 2026Updated 4 months ago
- ☆47Jun 7, 2026Updated 4 months ago
- Spec-driven bug bounty writeups and real world security failures.☆43Sep 18, 2026Updated last month
- Designed for managing vulnerability discovery at scale with agentic AI and integrates with HackerOne.☆132Sep 2, 2026Updated last month
- Structured practice: Mainly PortSwigger lab writeups☆23Updated this week
- My ATO Via Password Reset Methodology☆53May 13, 2026Updated 5 months ago
- ☆204Jan 22, 2026Updated 9 months ago
- Stealth hybrid URL mapper☆52Updated this week
- A local, safety-first pre-submission reviewer for bug bounty reports.☆42Oct 3, 2026Updated 2 weeks ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- find sources and sinks from js files☆17Apr 4, 2026Updated 6 months ago
- all round pentest skill☆458Sep 16, 2026Updated last month
- How To approach recon on real targets — from passive enumeration to origin IP discovery. Covers tools, automation, and the logic behind e…☆431Jul 5, 2026Updated 3 months ago
- A simple recon pipeline☆39Sep 24, 2026Updated 3 weeks ago
- A Burp Suite extension that exposes the full Montoya API as a local REST API, with Swagger UI☆123Updated this week
- ☆1,176Jan 28, 2026Updated 8 months ago
- A complete bug bounty workspace for HackerOne researchers. Includes scope enforcement, automated recon/vuln pipeline (400+ tools), report…☆479Oct 14, 2026Updated last week
- Welcome to the 403 and 401 Bypass Techniques and Bug Bounty Tips repository! This repo is a collection of methods and strategies to bypas…☆40Dec 26, 2024Updated last year
- Bug Bounty Methodology☆335Oct 5, 2026Updated 2 weeks ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A resources for who want to learn and get deep into client-side bugs☆561Dec 8, 2024Updated last year
- AI-powered bug bounty hunting toolkit that works with or without subscription.☆5,392Oct 9, 2026Updated 2 weeks ago
- ♥☆224Sep 7, 2025Updated last year
- Pentest Coverage Tracker is a Burp Suite extension that helps penetration testers monitor testing coverage in real time. It logs discover…☆47Mar 16, 2026Updated 7 months ago
- A web security workbench built for AI agents.☆298Oct 14, 2026Updated last week
- ☆50Aug 17, 2026Updated 2 months ago
- A smart fuzzing and parameter injection tool designed to discover reflections and identify potential XSS attack vectors.☆38Oct 13, 2026Updated last week
- ☆77May 5, 2025Updated last year
- Autonomous Bug Bounty Hunting Framework powered by Claude Code. 20 AI agents, state-machine orchestration, Burp Suite MCP, credential vau…☆87May 19, 2026Updated 5 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- web cache deception detect☆43Aug 26, 2026Updated last month
- Burp Suite extension + port-based highlighter: dedupes HTTP history into a live unique-request feed and color-codes attacker/victim traff…☆14Aug 14, 2026Updated 2 months ago
- Cyberful is an open-source AI Red Team for discovering, exploiting, verifying, and remediating vulnerabilities.☆138Aug 24, 2026Updated last month
- 403 Access Bypass Tester☆125Oct 13, 2026Updated last week
- My Main App Hacking CheckList☆34Jun 20, 2026Updated 4 months ago
- A Fuzzing skill based on purely what i know.☆43Jun 3, 2026Updated 4 months ago
- AI-powered ffuf wrapper☆811Dec 4, 2025Updated 10 months ago