Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature
☆38Nov 8, 2017Updated 8 years ago
Alternatives and similar repositories for bug-bounty-reference
Users that are interested in bug-bounty-reference are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Cheat Sheets, Metodologies etc.☆19Apr 12, 2019Updated 7 years ago
- A collection of awesome penetration testing resources, tools and other shiny things☆17Jul 25, 2026Updated 3 months ago
- Collection of misc IT Security related whitepapers, presentations, slides - hacking, bug bounty, web application security, XSS, CSRF, SQL…☆62May 4, 2017Updated 9 years ago
- Nothing special --- Some resources to save my time☆20Aug 14, 2020Updated 6 years ago
- Extract (links/possible endpoints) from responses & filter them via decoding/sorting☆93Aug 27, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A tool to generate OpenXML XXE Payloads written in Python3.☆16Aug 21, 2019Updated 7 years ago
- A BurpSuite extension for beautifying .NET message parameters and hiding some of the extra clutter that comes with .NET web apps (i.e. __…☆12Jun 29, 2015Updated 11 years ago
- ☆10Oct 13, 2020Updated 6 years ago
- Pulse SSL VPN Arbitrary File Read burp extension☆25Sep 24, 2019Updated 7 years ago
- psychoPATH - hunting file uploads & LFI in the dark. This tool is a customisable payload generator designed for blindly detecting LFI & w…☆19Jun 28, 2018Updated 8 years ago
- A bash script that fetches and maintains thousands of DNS resolvers☆64Aug 24, 2020Updated 6 years ago
- A lightweight type converter python library.☆13Oct 1, 2020Updated 6 years ago
- Bug Bounty Clipboard☆17Nov 6, 2019Updated 6 years ago
- BestRecon is a browser-based recon tool to gather information about your target and analyze their security on browser.☆11Jan 1, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆14Jul 13, 2020Updated 6 years ago
- Collection of content discovery wordlists in one wordlist.☆37Jan 18, 2022Updated 4 years ago
- Intro To CTF In Arabic☆18Aug 3, 2020Updated 6 years ago
- A Burp Suite content discovery plugin that add the smart into the Buster!☆32Jan 22, 2018Updated 8 years ago
- Bash script to extract data from the Waybackmachine☆11Mar 15, 2021Updated 5 years ago
- A lightweight HTTP Server that exploits XSS victim's session automatically☆11Mar 12, 2014Updated 12 years ago
- Penetration Testing Methodology - short notes☆11May 30, 2015Updated 11 years ago
- Archive - Repository contains old publicly released presentations, tools, pocs, skills and other junk.☆26Oct 24, 2026Updated last week
- List of periodically validated public DNS resolvers☆32Updated this week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A Burp Suite extension that automatically marks similar requests as 'out-of-scope'.☆43May 1, 2020Updated 6 years ago
- a CMD shell in masm that listens on port 8080☆12Dec 19, 2020Updated 5 years ago
- Alpha version code of Recon UI☆15Feb 26, 2018Updated 8 years ago
- A collection of slides, videos, and proof-of-concept scripts from various Rhino presentations.☆37Aug 13, 2018Updated 8 years ago
- CTF Write-ups☆27Apr 7, 2019Updated 7 years ago
- A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for…☆193Sep 6, 2020Updated 6 years ago
- URLess is a simple but powerful tool that removes paths from URLs, generating multiple variations of the base domain. This is useful for …☆17Apr 1, 2025Updated last year
- A Mozilla Firefox extension which allows quick access to your google-dorking result☆19Jun 18, 2020Updated 6 years ago
- Docker Pentest Lists are collection of Dockerfiles or Links to Dockerfiles for containers used in Penetration Tests☆21May 1, 2017Updated 9 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A shell script to grab subdomains from https://crt.sh, and probe for working http and https servers with @tomnomnom's tool https://github…☆42Jun 19, 2021Updated 5 years ago
- ☆53Aug 10, 2018Updated 8 years ago
- Subdomain Enumeration Wordlist. 8956437 unique words. Updated.☆77May 23, 2020Updated 6 years ago
- ☆15Sep 7, 2026Updated last month
- a JS tool that let you take screenshot of many hosts.☆16Oct 24, 2026Updated last week
- XSSor is a semi-automatic reflected and persistent XSS detector extension for Burp Suite. The tool was written in Python by Barak Tawily,…☆63Feb 22, 2021Updated 5 years ago
- Links to malware-related YARA rules☆15Sep 29, 2022Updated 4 years ago