sudosuraj / Awesome-Bug-BountyView external linksLinks
This is my personal repo, which includes bug bounty tips, a collection of tools, one-liners, and other resources I personally prefer while hunting. It is still under development, so feel free to contribute.
☆64Apr 25, 2025Updated 9 months ago
Alternatives and similar repositories for Awesome-Bug-Bounty
Users that are interested in Awesome-Bug-Bounty are comparing it to the libraries listed below
Sorting:
- A curated list of resources, tools, and wordlists for bug bounty hunters.☆17Jul 1, 2024Updated last year
- undust is a URL pattern generator that helps uncover archived, backup, and temporary files left behind on web servers. Given a URL, it ge…☆52Jul 17, 2025Updated 7 months ago
- Penstaller: A Python tool to automate the installation of essential bug bounty and pentesting tools. With one command, it sets up tools f…☆17Mar 14, 2025Updated 11 months ago
- Awesome Bug bounty tools☆13Jun 28, 2024Updated last year
- NativePayload_TiACBT (Remote Thread Injection + C# Async Method + CallBack Functions Technique)☆13Jun 6, 2023Updated 2 years ago
- OpenRedirector is a powerful automation tool for detecting Open Redirect vulnerabilities in web applications☆17Oct 30, 2025Updated 3 months ago
- This tools used for Automating finding of subdomain, and checking for alive subdomain, and gathering js files from all the subdomain and …☆22Jun 28, 2024Updated last year
- CVE-2024-57727☆14Jan 17, 2025Updated last year
- a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security researchers to extract sensi…☆25Dec 27, 2025Updated last month
- Dump paths & pages from Next.js Manifest☆15Mar 19, 2024Updated last year
- A simple to use single-include Windows API resolver☆23Jul 9, 2024Updated last year
- The Primate Pack is a suite of extensions for Caido.☆13Sep 29, 2024Updated last year
- Fast subdomains enumeration tool for penetration testers and bug bounty hunters☆42Dec 19, 2024Updated last year
- Collection of templates from various resources☆42Dec 5, 2025Updated 2 months ago
- Very Vulnerable Management API (VVMA) is a deliberately insecure RESTful API built with Node.js for educational and testing purposes. It …☆69Jun 5, 2025Updated 8 months ago
- API fuzzer that exposes security flaws by sending malformed inputs☆16Sep 4, 2024Updated last year
- XSS PoCs to elevate your alert()☆22May 18, 2023Updated 2 years ago
- A Burp Suite extension for GraphQL security testing.☆50Feb 7, 2026Updated last week
- Dive into a handpicked selection of tools, guides, and tips tailored for beginners in Bug Bounty and Penetration Testing. 🐛🛡️☆38Aug 14, 2024Updated last year
- An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites…☆43Jun 28, 2022Updated 3 years ago
- the POC of package.json RCE☆26Jun 24, 2025Updated 7 months ago
- ☆47Mar 7, 2025Updated 11 months ago
- A simple website to act as a store for havoc modules and extensions☆28Jan 20, 2025Updated last year
- 🥰 List of awesome GitHub organizations☆25Apr 9, 2024Updated last year
- Bypass AMSI By Dividing files into multiple smaller files☆46Dec 12, 2022Updated 3 years ago
- This exploit use PEB walk technique to resolve API calls dynamically, obfuscate all API calls to perform process injection.☆25Jul 26, 2024Updated last year
- C++ Encrypted SSL/TLS REVERSE SHELL, designed to provide secure, encrypted communication between a compromised client and an attacker, wh…☆117Oct 9, 2025Updated 4 months ago
- A cross-platform tool to find and decrypt Group Policy Preferences passwords from the SYSVOL share using low-privileged domain accounts☆167Jun 29, 2025Updated 7 months ago
- Robofinder retrieves historical #robots.txt files from #Archive.org, allowing you to collect old directories and paths for any domain whi…☆230Nov 21, 2025Updated 2 months ago
- ☆23Mar 9, 2022Updated 3 years ago
- ☆30Jun 30, 2025Updated 7 months ago
- From Zero To Hero☆34Jul 17, 2025Updated 7 months ago
- PowerShell script to automate enabling RDP, local admin user creation, and configuring firewall rules for RDP access.☆42Jan 22, 2025Updated last year
- Detect SSRF within Caido☆43Dec 23, 2025Updated last month
- A Python Library designed to facilitate interaction with Synack's undocumented API endpoints☆26Mar 4, 2025Updated 11 months ago
- ☆30Nov 1, 2022Updated 3 years ago
- A tool offering templates for streamlined bug bounty reporting☆60Jan 11, 2024Updated 2 years ago
- ☆12Mar 8, 2025Updated 11 months ago
- ☆82Jun 17, 2025Updated 8 months ago