This is my personal repo, which includes bug bounty tips, a collection of tools, one-liners, and other resources I personally prefer while hunting. It is still under development, so feel free to contribute.
☆69Apr 25, 2025Updated last year
Alternatives and similar repositories for Awesome-Bug-Bounty
Users that are interested in Awesome-Bug-Bounty are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Find input and textarea hidden parameters in html.☆11Jan 20, 2026Updated 9 months ago
- Reversing Citrix Gateway for XSS☆17Jul 3, 2023Updated 3 years ago
- Useful "Match and Replace" & "TLS Pass Through" in Burpsuite Rules☆11Sep 26, 2025Updated last year
- nuclei-templates-cutomer☆10Apr 6, 2026Updated 6 months ago
- here is the largest collection of hacking and pentesting books, for all my dudes who cant afford to buy them! feel free to join my Telegr…☆17Nov 18, 2022Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Gampung tools for find nuclei template from github☆12Sep 6, 2023Updated 3 years ago
- An advanced XSS vulnerability scanner.☆10Feb 24, 2025Updated last year
- A Burp Suite extension for GraphQL security testing.☆70Sep 30, 2026Updated last month
- Hermes is an automated security tool written in Python designed to discover Cross-Site Scripting (XSS) vulnerabilities in web application…☆10Aug 22, 2025Updated last year
- Template Nuclei SSTI☆34Nov 18, 2025Updated 11 months ago
- Here we are gather all Nuclei Templates that are Publically available.☆15Apr 28, 2024Updated 2 years ago
- OpenRedirector is a powerful automation tool for detecting Open Redirect vulnerabilities in web applications☆21Oct 30, 2025Updated last year
- ☆26Jan 20, 2026Updated 9 months ago
- This repo collects nuclei template from 600+ github repos, updates every 6 hours.☆39Feb 17, 2026Updated 8 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A powerful Go tool for finding origin IPs of domains by querying multiple security APIs and validating results with built-in HTTP client.☆52Dec 4, 2025Updated 10 months ago
- Bash Script to download all Nuclei Templates from different awesome sources☆12Aug 7, 2021Updated 5 years ago
- This repository contains a collection of custom Nuclei Templates designed to automate and streamline security vulnerability scanning usin…☆14Oct 12, 2024Updated 2 years ago
- Elevate your bug bounty game with our treasure trove of FREE resources! 🚀 Dive into a world of expert guides, cheat sheets, and tools to…☆28Oct 19, 2024Updated 2 years ago
- my nuclei templates #new☆10Jun 24, 2024Updated 2 years ago
- ☆18Jan 18, 2026Updated 9 months ago
- Collection of templates from various resources☆48Jun 17, 2026Updated 4 months ago
- A curated list of resources, tools, and wordlists for bug bounty hunters.☆23Oct 16, 2026Updated 2 weeks ago
- Here Are Some Bug Bounty Resource From Twitter☆139Aug 12, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- your bestfried for finding URLs of a target☆10Apr 5, 2023Updated 3 years ago
- this files only for bug bounty tools AtoZ☆20Apr 4, 2025Updated last year
- categorized into various types:☆10Nov 20, 2023Updated 2 years ago
- 🔥 React2Shell Toolkit - CVE-2025-55182 & CVE-2025-66478☆24Dec 8, 2025Updated 10 months ago
- ☆179Nov 20, 2025Updated 11 months ago
- ☆27Mar 12, 2026Updated 7 months ago
- ☆46Mar 7, 2025Updated last year
- collection of various nuclei templates☆11Apr 18, 2023Updated 3 years ago
- JaelesFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications☆22May 1, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Easier way to use advanced search syntax on common search engines like Google, Yandex, DuckDuckGo and more.☆32Dec 1, 2025Updated 11 months ago
- A list of Private Nuclei Templates☆14May 22, 2023Updated 3 years ago
- ☆26Sep 5, 2025Updated last year
- LSPosed module for disabling SSL certificate pinning on Android. Covers Java-layer pinning (OkHttp, TrustManager, Conscrypt, WebView, Cor…☆45Aug 20, 2026Updated 2 months ago
- Oneliner Bug Bounty Collection collected from GitHub to all bug bounty hunters☆39Dec 12, 2023Updated 2 years ago
- Bug bounty monitoring tool☆54Sep 15, 2026Updated last month
- Markdown Notes for Caido☆16Aug 27, 2026Updated 2 months ago