Collection of documentation, tools, and tips related to vulnerability research.
☆273Sep 24, 2026Updated last week
Alternatives and similar repositories for vulnerability-research
Users that are interested in vulnerability-research are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- My ATO Via Password Reset Methodology☆53May 13, 2026Updated 4 months ago
- Spec-driven bug bounty writeups and real world security failures.☆43Sep 18, 2026Updated 2 weeks ago
- ☆46Jun 7, 2026Updated 3 months ago
- Welcome to the 403 and 401 Bypass Techniques and Bug Bounty Tips repository! This repo is a collection of methods and strategies to bypas…☆38Dec 26, 2024Updated last year
- ☆203Jan 22, 2026Updated 8 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- BountyLens MCP server — connect Claude Code to your Hunter Tracker☆65Jun 22, 2026Updated 3 months ago
- NextSSRF — CVE-2026-44578 Scanner & Exploit ║ ║ Next.js WebSocket Upgrade Handler SSRF☆77May 15, 2026Updated 4 months ago
- A resources for who want to learn and get deep into client-side bugs☆560Dec 8, 2024Updated last year
- ☆1,176Jan 28, 2026Updated 8 months ago
- Bug Bounty Methodology☆337Aug 4, 2026Updated last month
- SSRFHunter☆18Jan 17, 2026Updated 8 months ago
- How To approach recon on real targets — from passive enumeration to origin IP discovery. Covers tools, automation, and the logic behind e…☆420Jul 5, 2026Updated 2 months ago
- Stealth hybrid URL mapper☆31May 1, 2026Updated 5 months ago
- Web2 bug bounty Agent Skill — evidence-based, no AI slop. Covers 18 vulnerability classes across HackerOne, Bugcrowd, Intigriti, and YesW…☆73Feb 21, 2026Updated 7 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ♥☆222Sep 7, 2025Updated last year
- List of Mine Private wordlist i use for fuzzing☆98Jun 17, 2026Updated 3 months ago
- Smart contract audit findings validator based on Code4rena's official judging criteria.☆17Mar 31, 2026Updated 6 months ago
- AI-powered ffuf wrapper☆808Dec 4, 2025Updated 9 months ago
- My Main App Hacking CheckList☆35Jun 20, 2026Updated 3 months ago
- 0xJS is an AI-powered JavaScript Security Tool☆67Apr 16, 2026Updated 5 months ago
- AI-powered bug bounty hunting toolkit that works with or without subscription.☆5,231Updated this week
- Grafana scanner with all public CVEs that I collected in one script to make grafana testing easier☆244Sep 11, 2026Updated 3 weeks ago
- ☆79May 5, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Autonomous Bug Bounty Hunting Framework powered by Claude Code. 20 AI agents, state-machine orchestration, Burp Suite MCP, credential vau…☆79May 19, 2026Updated 4 months ago
- A tool for detecting subdomain takeover vulnerabilities by checking DNS records☆34May 28, 2026Updated 4 months ago
- A Fuzzing skill based on purely what i know.☆43Jun 3, 2026Updated 4 months ago
- This repository contains Bug Bounty writeups☆112Updated this week
- web cache deception detect☆43Aug 26, 2026Updated last month
- AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes☆434Apr 30, 2026Updated 5 months ago
- ☆1,676Mar 7, 2026Updated 6 months ago
- ☆47Sep 25, 2025Updated last year
- Malleable Caddy Redirector☆20Apr 24, 2026Updated 5 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- An Automated Framework for End-to-End Blind XSS Detection and Reporting☆17Jan 23, 2026Updated 8 months ago
- ex-param is an automated tool designed for finding reflected parameters for XSS vulnerabilities. It crawls a target website, extracts GET…☆61Feb 22, 2025Updated last year
- Open-source passive reconnaissance and exposure discovery tool that leverages VirusTotal and the Wayback Machine to uncover subdomains, U…☆145Sep 20, 2026Updated last week
- ☆31Jun 19, 2026Updated 3 months ago
- ☆99May 11, 2026Updated 4 months ago
- Enhanced Burp Suite extension for finding links and sensitive data in JavaScript files☆26May 10, 2026Updated 4 months ago
- Top disclosed reports from HackerOne☆6,579Sep 12, 2026Updated 3 weeks ago