This repo contains different variants of Bug Bounty & Security & Pentest & Tech related Articles
☆60Jan 7, 2025Updated last year
Alternatives and similar repositories for bug-bounty-writeup
Users that are interested in bug-bounty-writeup are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆17Jul 21, 2025Updated last year
- A collection of slides and presentations from BSides Ahmedabad 2024, held on October 12th and 13th. This repository features key insights…☆38Oct 17, 2024Updated last year
- Bypass Reset Password Code Lead to Account Takeover☆26Sep 16, 2024Updated 2 years ago
- A CLI tool to extract, analyze, and filter JavaScript links from web pages or URLs, with regex matching and structured JSON output.☆19Jan 6, 2025Updated last year
- All About XSS☆16Oct 23, 2022Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- All About Dependency Confusion Attack, (Detecting, Finding, Mitigating)☆303Mar 12, 2024Updated 2 years ago
- Zzl is a reconnaissance tool that collects subdomains from SSL certificates in IP ranges☆43Oct 27, 2024Updated last year
- Firebase_Checker is Python tool to analyze APK files and web applications for Firebase-related vulnerabilities. This tool identifies secu…☆59Nov 6, 2025Updated 10 months ago
- Collection of Facebook Bug Bounty Writeups☆31Sep 16, 2023Updated 3 years ago
- Modern real world bug bounty payloads and exploitation techniques with may earn you some $$$.☆30Nov 7, 2023Updated 2 years ago
- ☆116Apr 25, 2023Updated 3 years ago
- Python tool for detecting subdomain takeover vulnerabilities by resolving CNAME records and checking for known error messages. It support…☆14Feb 2, 2025Updated last year
- ♥☆221Sep 7, 2025Updated last year
- This script can be used to find html forms in the list of endpoints/urls.☆49Mar 24, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Tools and methods that I personally use for Recon and Exploitations☆55May 1, 2025Updated last year
- A subdomain fuzzing tool☆175Jun 1, 2024Updated 2 years ago
- ☆22Aug 9, 2025Updated last year
- Burp suite extension to find sensitive information by checking incoming text OR binary websocket messages☆59Jul 17, 2026Updated 2 months ago
- A proof of concept program that pulls and parses security.txt files at mass.☆30May 31, 2023Updated 3 years ago
- jsluice++ is a Burp Suite extension designed for passive and active scanning of JavaScript traffic using the CLI tool jsluice☆305Apr 9, 2024Updated 2 years ago
- Gouge is a simple Burp extension to extract or gouge all URLs which are seen in JS files as you visit different websites/webpages in Burp…☆30Jul 21, 2024Updated 2 years ago
- Scrape files for sensitive information, and generate an interactive HTML report. Based on Rabin2.☆19Feb 25, 2026Updated 7 months ago
- Blind XSS SVG☆10Mar 27, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Url scrapper or extractor from alienvault☆39Mar 1, 2025Updated last year
- ☆207Feb 5, 2025Updated last year
- Contains nuclei templates for security testing and POCs.☆17Oct 19, 2024Updated last year
- Legitimate bug bounty programs value ethical practices and provide clear rewards to researchers for identifying security flaws☆49Sep 22, 2024Updated 2 years ago
- A resources for who want to learn and get deep into client-side bugs☆560Dec 8, 2024Updated last year
- ☆134Aug 19, 2025Updated last year
- Automated JavaScript Debugging Tool using CDP - Automatically sets breakpoints for specified strings/patterns in JavaScript code☆93Dec 22, 2024Updated last year
- All-in Fuzzer. Burp suite extension for auto fuzzing params, headers, body☆36Apr 9, 2026Updated 5 months ago
- ☆29May 22, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- This Tool To Test Machine Keys In View State☆88Oct 11, 2024Updated last year
- Find The Admin Panel & SQL Injection Endpoints, Using Google Dorks !!!☆31Nov 15, 2024Updated last year
- ☆954Dec 26, 2025Updated 9 months ago
- Collect ips from shodan using or without using shodan apikey.☆20Apr 20, 2026Updated 5 months ago
- Attempt zone transfers on domains☆19Jul 12, 2021Updated 5 years ago
- Repo containing walkthroughs to possibly pwn Admin Panels and Exposed Consoles☆17Sep 20, 2024Updated 2 years ago
- X9 a tool to create URLs with many parameter☆33Feb 8, 2026Updated 7 months ago