This repo contains different variants of Bug Bounty & Security & Pentest & Tech related Articles
☆61Jan 7, 2025Updated last year
Alternatives and similar repositories for bug-bounty-writeup
Users that are interested in bug-bounty-writeup are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆17Jul 21, 2025Updated last year
- A collection of slides and presentations from BSides Ahmedabad 2024, held on October 12th and 13th. This repository features key insights…☆38Oct 17, 2024Updated 2 years ago
- Bypass Reset Password Code Lead to Account Takeover☆26Sep 16, 2024Updated 2 years ago
- A CLI tool to extract, analyze, and filter JavaScript links from web pages or URLs, with regex matching and structured JSON output.☆19Jan 6, 2025Updated last year
- All About XSS☆16Oct 23, 2022Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- All About Dependency Confusion Attack, (Detecting, Finding, Mitigating)☆305Mar 12, 2024Updated 2 years ago
- Zzl is a reconnaissance tool that collects subdomains from SSL certificates in IP ranges☆43Oct 27, 2024Updated last year
- Firebase_Checker is Python tool to analyze APK files and web applications for Firebase-related vulnerabilities. This tool identifies secu…☆65Nov 6, 2025Updated 11 months ago
- Collection of Facebook Bug Bounty Writeups☆31Sep 16, 2023Updated 3 years ago
- Modern real world bug bounty payloads and exploitation techniques with may earn you some $$$.☆30Nov 7, 2023Updated 2 years ago
- Python tool for detecting subdomain takeover vulnerabilities by resolving CNAME records and checking for known error messages. It support…☆15Feb 2, 2025Updated last year
- ☆116Apr 25, 2023Updated 3 years ago
- ♥☆224Sep 7, 2025Updated last year
- Convert your HackerOne reports into reusable AI skills.☆113Mar 9, 2026Updated 7 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- This script can be used to find html forms in the list of endpoints/urls.☆49Mar 24, 2024Updated 2 years ago
- Tools and methods that I personally use for Recon and Exploitations☆56May 1, 2025Updated last year
- A subdomain fuzzing tool☆175Jun 1, 2024Updated 2 years ago
- ☆22Aug 9, 2025Updated last year
- Burp suite extension to find sensitive information by checking incoming text OR binary websocket messages☆59Jul 17, 2026Updated 3 months ago
- A proof of concept program that pulls and parses security.txt files at mass.☆30May 31, 2023Updated 3 years ago
- jsluice++ is a Burp Suite extension designed for passive and active scanning of JavaScript traffic using the CLI tool jsluice☆305Apr 9, 2024Updated 2 years ago
- Gouge is a simple Burp extension to extract or gouge all URLs which are seen in JS files as you visit different websites/webpages in Burp…☆30Jul 21, 2024Updated 2 years ago
- Scrape files for sensitive information, and generate an interactive HTML report. Based on Rabin2.☆19Feb 25, 2026Updated 7 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Blind XSS SVG☆10Mar 27, 2023Updated 3 years ago
- Contains nuclei templates for security testing and POCs.☆17Oct 19, 2024Updated last year
- ☆208Feb 5, 2025Updated last year
- Legitimate bug bounty programs value ethical practices and provide clear rewards to researchers for identifying security flaws☆49Sep 22, 2024Updated 2 years ago
- A resources for who want to learn and get deep into client-side bugs☆560Dec 8, 2024Updated last year
- ☆135Aug 19, 2025Updated last year
- All-in Fuzzer. Burp suite extension for auto fuzzing params, headers, body☆36Apr 9, 2026Updated 6 months ago
- Url scrapper or extractor from alienvault☆40Mar 1, 2025Updated last year
- Automated JavaScript Debugging Tool using CDP - Automatically sets breakpoints for specified strings/patterns in JavaScript code☆95Dec 22, 2024Updated last year
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- ☆29May 22, 2024Updated 2 years ago
- This Tool To Test Machine Keys In View State☆88Oct 11, 2024Updated 2 years ago
- Find The Admin Panel & SQL Injection Endpoints, Using Google Dorks !!!☆31Nov 15, 2024Updated last year
- ☆959Dec 26, 2025Updated 9 months ago
- Collect ips from shodan using or without using shodan apikey.☆20Apr 20, 2026Updated 5 months ago
- Attempt zone transfers on domains☆19Jul 12, 2021Updated 5 years ago
- Repo containing walkthroughs to possibly pwn Admin Panels and Exposed Consoles☆17Sep 20, 2024Updated 2 years ago