This is my personal repo, which includes bug bounty tips, a collection of tools, one-liners, and other resources I personally prefer while hunting. It is still under development, so feel free to contribute.
☆70Apr 25, 2025Updated last year
Alternatives and similar repositories for Awesome-Bug-Bounty
Users that are interested in Awesome-Bug-Bounty are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Elevate your bug bounty game with our treasure trove of FREE resources! 🚀 Dive into a world of expert guides, cheat sheets, and tools to…☆24Oct 19, 2024Updated last year
- ☆22Jan 20, 2026Updated 6 months ago
- An advanced XSS vulnerability scanner.☆11Feb 24, 2025Updated last year
- A curated list of resources, tools, and wordlists for bug bounty hunters.☆19Jul 10, 2026Updated 2 weeks ago
- A Burp Suite extension for GraphQL security testing.☆65Mar 29, 2026Updated 3 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- This repo collects nuclei template from 600+ github repos, updates every 6 hours.☆38Feb 17, 2026Updated 5 months ago
- A powerful Go tool for finding origin IPs of domains by querying multiple security APIs and validating results with built-in HTTP client.☆48Dec 4, 2025Updated 7 months ago
- Here Are Some Bug Bounty Resource From Twitter☆133Feb 18, 2026Updated 5 months ago
- ☆15Jan 18, 2026Updated 6 months ago
- here is the largest collection of hacking and pentesting books, for all my dudes who cant afford to buy them! feel free to join my Telegr…☆14Nov 18, 2022Updated 3 years ago
- OpenRedirector is a powerful automation tool for detecting Open Redirect vulnerabilities in web applications☆21Oct 30, 2025Updated 8 months ago
- Reversing Citrix Gateway for XSS☆17Jul 3, 2023Updated 3 years ago
- this files only for bug bounty tools AtoZ☆19Apr 4, 2025Updated last year
- Template Nuclei SSTI☆34Nov 18, 2025Updated 8 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 🔥 React2Shell Toolkit - CVE-2025-55182 & CVE-2025-66478☆24Dec 8, 2025Updated 7 months ago
- Collection of templates from various resources☆46Jun 17, 2026Updated last month
- Easier way to use advanced search syntax on common search engines like Google, Yandex, DuckDuckGo and more.☆30Dec 1, 2025Updated 7 months ago
- this repo contains all nuclei templates for particular vulnerability that i used mosty while hunting..☆13Aug 15, 2024Updated last year
- ☆26Sep 5, 2025Updated 10 months ago
- Oneliner Bug Bounty Collection collected from GitHub to all bug bounty hunters☆39Dec 12, 2023Updated 2 years ago
- GarudRecon automates domain recon with top open-source tools to discover assets, enumerate subdomains, and detect XSS, SQLi, LFI, RCE & m…☆264Mar 28, 2026Updated 3 months ago
- Fast subdomains enumeration tool for penetration testers and bug bounty hunters☆45Dec 19, 2024Updated last year
- Active monitoring bug bounty programs tool☆49Jan 21, 2026Updated 6 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This repository is for the Testing ASP.NET ViewState with YSoNet (YSoSerial.NET) workshop.☆25Dec 17, 2025Updated 7 months ago
- ☆52Oct 11, 2025Updated 9 months ago
- ParamX is a tool designed to extract and categorize interesting subdomains and parameters from URLs.☆33Oct 7, 2025Updated 9 months ago
- Repository containing sample apps and Frida scripts for bypassing in-app-protections in iOS☆16Apr 6, 2025Updated last year
- A simple to use single-include Windows API resolver☆22Jul 9, 2024Updated 2 years ago
- Dive into a handpicked selection of tools, guides, and tips tailored for beginners in Bug Bounty and Penetration Testing. 🐛🛡️☆40Aug 14, 2024Updated last year
- Penstaller: A Python tool to automate the installation of essential bug bounty and pentesting tools. With one command, it sets up tools f…☆18Mar 14, 2025Updated last year
- Get 10k subdomains in securitytrails using cookie without apikey.☆41Oct 23, 2025Updated 9 months ago
- Dig through the Wayback Machine and find sensitive or forgotten files exposed by web servers over time.☆31Mar 27, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Very Vulnerable Management API (VVMA) is a deliberately insecure RESTful API built with Node.js for educational and testing purposes. It …☆72Jun 5, 2025Updated last year
- RepoToStoreBugBountyInfo☆11Mar 11, 2020Updated 6 years ago
- the POC of package.json RCE☆27Jun 24, 2025Updated last year
- Auth Mutator is a Burp Suite extension that helps you experiment with mutated authentication requests while keeping the original traffic …☆16Jul 1, 2026Updated 3 weeks ago
- Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing☆169Mar 13, 2025Updated last year
- Gampung tools for find nuclei template from github☆12Sep 6, 2023Updated 2 years ago
- Custom wordlist, updated regularly☆151Jun 26, 2026Updated 3 weeks ago