A list of interesting payloads, tips and tricks for bug bounty hunters.
☆31Oct 4, 2017Updated 9 years ago
Alternatives and similar repositories for bugbounty-cheatsheet
Users that are interested in bugbounty-cheatsheet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Small snippets and scripts which I use☆36Sep 17, 2020Updated 6 years ago
- SSRF (Server Side Request Forgery) testing resources☆13Sep 7, 2017Updated 9 years ago
- The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.☆15Nov 23, 2018Updated 7 years ago
- Traverse JS files for APIs/Endpoints☆15May 12, 2015Updated 11 years ago
- ☆16Nov 23, 2019Updated 6 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆13Sep 8, 2024Updated 2 years ago
- Basic USB passthrough from a host PC to a Beaglebone Black (or any device capable of using GadgetFs)☆17Oct 9, 2016Updated 10 years ago
- PHP tool to test XSS☆22Nov 5, 2019Updated 6 years ago
- A collection of custom built scripts to exploit known vulnerability chains☆26Jul 23, 2021Updated 5 years ago
- A Collection of Wordlists for Penetration Testing☆44Mar 13, 2026Updated 7 months ago
- A tool for sorting blocks of lines☆36Oct 4, 2022Updated 4 years ago
- command-line tool designed to rapidly scan decompiled Android applications for hardcoded secrets. It moves beyond simple keyword searchi…☆47Aug 5, 2025Updated last year
- It is a script written in Python that performs brute force on workers' payroll files through the use of their DNI (National Identity Docu…☆13Oct 6, 2020Updated 6 years ago
- ☆162Dec 7, 2017Updated 8 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Pastebin-scraper tool leverages the API of https://psbdmp.ws/ to find emails/domains dumped in pastebin.☆138Apr 3, 2024Updated 2 years ago
- ☆126Mar 27, 2017Updated 9 years ago
- Example code for testing using Echidna explained during the Spearbit presentation☆40Jul 6, 2022Updated 4 years ago
- Collection of PoCs and exploits for DeFi and other Ethereum projects☆83Aug 5, 2022Updated 4 years ago
- Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.☆6,365Aug 7, 2026Updated 2 months ago
- Common Bugs from low to critical Level☆19May 9, 2021Updated 5 years ago
- Identify flashloan bots in multiple chains☆34Oct 26, 2022Updated 4 years ago
- Oracle Manipulation Attack on Inverse Finance☆12Aug 12, 2022Updated 4 years ago
- ☆11May 28, 2020Updated 6 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Bug bounty bot for channel☆15Dec 10, 2022Updated 3 years ago
- Scan Onion Services for Security Issues☆11Jun 12, 2016Updated 10 years ago
- A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms ti…☆97Jun 5, 2021Updated 5 years ago
- ☆23Nov 24, 2024Updated last year
- Xss payload for bypassing waf☆20Apr 18, 2020Updated 6 years ago
- Run ffuf with the appropriate options to brute-force the directories using the awesome different wordlists.☆25Apr 19, 2023Updated 3 years ago
- PhishX - The Complete Spear Phishing Tool☆14Sep 13, 2018Updated 8 years ago
- HTML form parser for humans.☆81May 15, 2020Updated 6 years ago
- Make concurrent requests with the curl command-line tool☆76Oct 9, 2019Updated 7 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆45Oct 16, 2024Updated 2 years ago
- ☆45Apr 30, 2021Updated 5 years ago
- An adaptive, intelligent XSS fuzzer that learns how the response is reflected and carefully crafts an XSS payload to match☆43Sep 24, 2012Updated 14 years ago
- Foundry is a blazing fast, portable and modular toolkit for Ethereum application development written in Rust.☆15Oct 25, 2023Updated 3 years ago
- WebDigger is a python based tool, specially created to get a company's unknown domain for pentestor.☆17Aug 6, 2016Updated 10 years ago
- private pools for caviar☆12Aug 24, 2023Updated 3 years ago
- A collection of payloads for different vulnerabilities, best payload lists in one repository☆19Jul 28, 2021Updated 5 years ago