bug-bounty
There are 548 repositories under bug-bounty topic.
Hack-with-Github/Awesome-Hacking
A collection of various awesome lists for hackers, pentesters and security researchers
maurosoria/dirsearch
Web path scanner
nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters
A list of resources for those interested in getting started in bug bounties
yogeshojha/rengine
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
LasCC/HackTools
The all-in-one browser extension for offensive security professionals 🛠
six2dez/reconftw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
j3ssie/osmedeus
A Workflow Engine for Offensive Security
pry0cc/axiom
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
skerkour/black-hat-rust
Applied offensive security with Rust - https://kerkour.com/black-hat-rust
zan8in/afrog
A Security Tool for Bug Bounty, Pentest and Red Teaming.
dwisiswant0/awesome-oneliner-bugbounty
A collection of awesome one-liner scripts especially for bug bounty tips.
inonshk/31-days-of-API-Security-Tips
This challenge is Inon Shkedy's 31 days API Security Tips.
kpcyrd/sn0int
Semi-automatic OSINT framework and package manager
tom0li/collection-document
Collection of quality safety articles. Awesome articles.
haccer/subjack
Subdomain Takeover tool written in Go
danieldurnea/FBI-tools
🕵️ OSINT Tools for gathering information and actions forensics 🕵️
nsonaniya2010/SubDomainizer
A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
wagiro/BurpBounty
Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
0xHJK/dumpall
一款信息泄漏利用工具，适用于.git/.svn/.DS_Store泄漏和目录列出
Cyber-Guy1/API-SecurityEmpire
API Security Project aims to present unique attack & defense methods in API Security field
xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes
A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying and exploiting vulnerabilities.
trickest/inventory
Asset inventory of over 800 public bug bounty programs.
j3ssie/metabigor
OSINT tools and more but without API key
0xPugal/One-Liners
A collection of one-liners for bug bounty hunting.
Uniswap/v3-periphery
🦄 🦄 🦄 Peripheral smart contracts for interacting with Uniswap v3
payloadbox/xxe-injection-payload-list
🎯 XML External Entity (XXE) Injection Payload List
nikitastupin/clairvoyance
Obtain GraphQL API schema even if the introspection is disabled
h4r5h1t/webcopilot
An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.
taielab/awesome-hacking-lists
平常看到好的渗透hacking工具和多领域效率工具的集合
yassineaboukir/sublert
Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.
disclose/diodb
Open-source vulnerability disclosure and bug bounty program database
Ice3man543/SubOver
A Powerful Subdomain Takeover Tool
ehrishirajsharma/SwiftnessX
A cross-platform note-taking & target-tracking app for penetration testers.
bl4de/security-tools
My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.
alexbieber/Bug_Bounty_writeups
BUG BOUNTY WRITEUPS - OWASP TOP 10 🔴🔴🔴🔴✔
Drew-Alleman/DataSurgeon
Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Security Numbers and a lot More From Text