This is my personal repo, which includes bug bounty tips, a collection of tools, one-liners, and other resources I personally prefer while hunting. It is still under development, so feel free to contribute.
☆69Apr 25, 2025Updated last year
Alternatives and similar repositories for Awesome-Bug-Bounty
Users that are interested in Awesome-Bug-Bounty are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Elevate your bug bounty game with our treasure trove of FREE resources! 🚀 Dive into a world of expert guides, cheat sheets, and tools to…☆23Oct 19, 2024Updated last year
- Penstaller: A Python tool to automate the installation of essential bug bounty and pentesting tools. With one command, it sets up tools f…☆18Mar 14, 2025Updated last year
- A curated list of resources, tools, and wordlists for bug bounty hunters.☆19Jun 23, 2026Updated last week
- a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security researchers to extract sensi…☆31Dec 27, 2025Updated 6 months ago
- Fast subdomains enumeration tool for penetration testers and bug bounty hunters☆44Dec 19, 2024Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A Burp Suite extension for GraphQL security testing.☆64Mar 29, 2026Updated 3 months ago
- A simple to use single-include Windows API resolver☆22Jul 9, 2024Updated last year
- Very Vulnerable Management API (VVMA) is a deliberately insecure RESTful API built with Node.js for educational and testing purposes. It …☆72Jun 5, 2025Updated last year
- undust is a URL pattern generator that helps uncover archived, backup, and temporary files left behind on web servers. Given a URL, it ge…☆54Jul 17, 2025Updated 11 months ago
- Dive into a handpicked selection of tools, guides, and tips tailored for beginners in Bug Bounty and Penetration Testing. 🐛🛡️☆40Aug 14, 2024Updated last year
- Collection of templates from various resources☆46Jun 17, 2026Updated 2 weeks ago
- the POC of package.json RCE☆27Jun 24, 2025Updated last year
- bug bounty☆11Aug 13, 2023Updated 2 years ago
- At this repo you can find any tools, tricks or templates for general penetration testing assesment☆16Apr 27, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- This tools used for Automating finding of subdomain, and checking for alive subdomain, and gathering js files from all the subdomain and …☆23Jun 28, 2024Updated 2 years ago
- NativePayload_TiACBT (Remote Thread Injection + C# Async Method + CallBack Functions Technique)☆12Jun 6, 2023Updated 3 years ago
- Reflective shellcode runners using obfuscated Win32 APIs in C# and C++ (GetProcAddress & GetModuleHandle). For penetration testing.☆16Jul 17, 2025Updated 11 months ago
- ☆48Mar 7, 2025Updated last year
- Dump paths & pages from Next.js Manifest☆16Mar 19, 2024Updated 2 years ago
- Dig through the Wayback Machine and find sensitive or forgotten files exposed by web servers over time.☆31Mar 27, 2025Updated last year
- Standardised setup for researching WordPress plugin- and theme vulnerabilities.☆33Jun 19, 2026Updated 2 weeks ago
- This repository contains fully disclosed accepted reports for the null Ahmedabad's Bug Bounty CTF.☆10Oct 31, 2023Updated 2 years ago
- API fuzzer that exposes security flaws by sending malformed inputs☆16Sep 4, 2024Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- OpenRedirector is a powerful automation tool for detecting Open Redirect vulnerabilities in web applications☆19Oct 30, 2025Updated 8 months ago
- CVE-2024-57727☆15Jan 17, 2025Updated last year
- Robofinder fetches historical robots.txt files from Archive.org to uncover old directories, hidden paths, and valuable OSINT data for rec…☆264Jun 13, 2026Updated 3 weeks ago
- XSS PoCs to elevate your alert()☆24May 18, 2023Updated 3 years ago
- Awesome Bug bounty tools☆14Jun 28, 2024Updated 2 years ago
- CVE-2022-22978 Spring-Security bypass Demo☆15Jun 2, 2022Updated 4 years ago
- An AI-powered assistant for hackers and security professionals built for Caido☆36Jan 24, 2026Updated 5 months ago
- poc for CVE-2025-14847☆25Dec 26, 2025Updated 6 months ago
- ZeusLeak is a browser extension that automatically detects leaked secrets and credentials in code while browsing.☆47Mar 8, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆12Mar 8, 2025Updated last year
- A cross-platform tool to find and decrypt Group Policy Preferences passwords from the SYSVOL share using low-privileged domain accounts☆173Jun 18, 2026Updated 2 weeks ago
- Many script that can be modified according to your needs for Information Gathering and Asset discovery in Bug Bounty Hunting (Pull reques…☆61Feb 26, 2024Updated 2 years ago
- C++ Encrypted SSL/TLS REVERSE SHELL, designed to provide secure, encrypted communication between a compromised client and an attacker, wh…☆120Oct 9, 2025Updated 8 months ago
- Deploy reverse shells and perform stealthy process injection with EchoStrike – a Go-based tool for ethical hacking and Red Team operation…☆192Sep 8, 2024Updated last year
- Windows / Linux Local Privilege Escalation Workshop☆11Jan 15, 2019Updated 7 years ago
- free5GC official site☆15Jun 22, 2026Updated last week