This is my personal repo, which includes bug bounty tips, a collection of tools, one-liners, and other resources I personally prefer while hunting. It is still under development, so feel free to contribute.
☆69Apr 25, 2025Updated last year
Alternatives and similar repositories for Awesome-Bug-Bounty
Users that are interested in Awesome-Bug-Bounty are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Elevate your bug bounty game with our treasure trove of FREE resources! 🚀 Dive into a world of expert guides, cheat sheets, and tools to…☆28Oct 19, 2024Updated last year
- ☆25Jan 20, 2026Updated 8 months ago
- An advanced XSS vulnerability scanner.☆10Feb 24, 2025Updated last year
- A curated list of resources, tools, and wordlists for bug bounty hunters.☆22Jul 24, 2026Updated 2 months ago
- A Burp Suite extension for GraphQL security testing.☆69Sep 30, 2026Updated 2 weeks ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- This repo collects nuclei template from 600+ github repos, updates every 6 hours.☆39Feb 17, 2026Updated 7 months ago
- A powerful Go tool for finding origin IPs of domains by querying multiple security APIs and validating results with built-in HTTP client.☆51Dec 4, 2025Updated 10 months ago
- Here Are Some Bug Bounty Resource From Twitter☆138Aug 12, 2026Updated 2 months ago
- ☆17Jan 18, 2026Updated 8 months ago
- here is the largest collection of hacking and pentesting books, for all my dudes who cant afford to buy them! feel free to join my Telegr…☆17Nov 18, 2022Updated 3 years ago
- OpenRedirector is a powerful automation tool for detecting Open Redirect vulnerabilities in web applications☆21Oct 30, 2025Updated 11 months ago
- Reversing Citrix Gateway for XSS☆17Jul 3, 2023Updated 3 years ago
- this files only for bug bounty tools AtoZ☆20Apr 4, 2025Updated last year
- Template Nuclei SSTI☆34Nov 18, 2025Updated 10 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 🔥 React2Shell Toolkit - CVE-2025-55182 & CVE-2025-66478☆24Dec 8, 2025Updated 10 months ago
- Collection of templates from various resources☆48Jun 17, 2026Updated 3 months ago
- this repo contains all nuclei templates for particular vulnerability that i used mosty while hunting..☆14Aug 15, 2024Updated 2 years ago
- ☆26Sep 5, 2025Updated last year
- Easier way to use advanced search syntax on common search engines like Google, Yandex, DuckDuckGo and more.☆32Dec 1, 2025Updated 10 months ago
- Oneliner Bug Bounty Collection collected from GitHub to all bug bounty hunters☆39Dec 12, 2023Updated 2 years ago
- GarudRecon automates domain recon with top open-source tools to discover assets, enumerate subdomains, and detect XSS, SQLi, LFI, RCE & m…☆273Mar 28, 2026Updated 6 months ago
- Fast subdomains enumeration tool for penetration testers and bug bounty hunters☆44Dec 19, 2024Updated last year
- Bug bounty monitoring tool☆52Sep 15, 2026Updated 3 weeks ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- This repository is for the Testing ASP.NET ViewState with YSoNet (YSoSerial.NET) workshop.☆25Dec 17, 2025Updated 9 months ago
- ☆55Oct 11, 2025Updated last year
- ParamX is a tool designed to extract and categorize interesting subdomains and parameters from URLs.☆35Oct 7, 2025Updated last year
- ☆205Jan 22, 2026Updated 8 months ago
- Repository containing sample apps and Frida scripts for bypassing in-app-protections in iOS☆16Apr 6, 2025Updated last year
- A simple to use single-include Windows API resolver☆22Jul 9, 2024Updated 2 years ago
- Dive into a handpicked selection of tools, guides, and tips tailored for beginners in Bug Bounty and Penetration Testing. 🐛🛡️☆41Aug 14, 2024Updated 2 years ago
- Penstaller: A Python tool to automate the installation of essential bug bounty and pentesting tools. With one command, it sets up tools f…☆20Mar 14, 2025Updated last year
- Get 10k subdomains in securitytrails using cookie without apikey.☆43Oct 23, 2025Updated 11 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Dig through the Wayback Machine and find sensitive or forgotten files exposed by web servers over time.☆31Mar 27, 2025Updated last year
- Very Vulnerable Management API (VVMA) is a deliberately insecure RESTful API built with Node.js for educational and testing purposes. It …☆70Jun 5, 2025Updated last year
- Auth Mutator is a Burp Suite extension that helps you experiment with mutated authentication requests while keeping the original traffic …☆16Oct 7, 2026Updated last week
- RepoToStoreBugBountyInfo☆11Mar 11, 2020Updated 6 years ago
- the POC of package.json RCE☆27Jun 24, 2025Updated last year
- Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing☆167Mar 13, 2025Updated last year
- Gampung tools for find nuclei template from github☆12Sep 6, 2023Updated 3 years ago