#bugbounty (30 Repositories)
Ranked open-source repositories tagged with #bugbounty, scored by pull request acceptance likelihood and maintainer engagement velocity.
75.5%
267.6h
30 repositories tagged #bugbounty
OWASP/wstg
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
hahwul/dalfox
🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.
hahwul/jwt-hack
JSON Web Token Hack Toolkit
htrgouvea/spellbook
Framework for rapid development of offensive security tools
elementalsouls/Claude-BugHunter
A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.
projectdiscovery/nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
halilkirazkaya/arsenal-ng
The classic launcher, evolved. Fast, Go-based command library equipped with 200+ cybersecurity cheat-sheets. Just install and start hacking.
lissy93/bug-bounties
⚔️ Community maintained directory, MCP and API of 3,000+ active bug bounty programs and VDPs
projectdiscovery/subfinder
Fast passive subdomain enumeration tool.
doyensec/inql
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
firefart/hijagger
Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration
j3ssie/osmedeus
A Modern Orchestration Engine for Security
RAJANAGORI/Nightingale
Nightingale Docker for Pentesters is a comprehensive Dockerized environment tailored for penetration testing and vulnerability assessment. It comes preconfigured with all essential tools and utilities required for efficient Vulnerability Assessment and Penetration Testing (VAPT), streamlining the setup process for security professionals.
edoardottt/csprecon
Discover new target domains using Content Security Policy
InfosecHouse/InfosecHouse
Tools & Resources for Cyber Security Operations
003random/getJS
A tool to fastly get all javascript sources/files
edoardottt/favirecon
Use favicons to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.
Encod3d-Sec/ClaudeBrain
Karpathy LLM based claude harness for PenetrationTesting / Bugbounty using obsidian
Findomain/Findomain
The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.
six2dez/burp-ai-agent
Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more
projectdiscovery/urlfinder
A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.
owl234/ARL-Next
现代化资产测绘与漏洞监控平台 (ARL-Next)。经典 ARL 架构重构，聚焦企业资产关联、异步解耦并发调度与原生 MCP 协议集成，容器化开箱部署。
caido/caido
🚀 Caido releases, wiki and roadmap
DevCop95/bugbounty-lab101
A complete bug bounty workspace for HackerOne researchers. Includes scope enforcement, automated recon/vuln pipeline (400+ tools), report templates, CVE/CWE watchlists, and a local VM practice lab. Built for disciplined, ethical hunting.
vflame6/leaker
Passive leak enumeration tool.
ghostvectoracademy/DLLHijackHunter
Automated DLL Hijacking Discovery, Validation, and Confirmation. Turning local misconfigurations into weaponized, confirmed attack paths.
pikpikcu/airecon
AIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox and a Textual TUI. It is designed to automate security assessments, penetration testing, and bug bounty reconnaissance — without any API keys or cloud dependency.
wallarm/gotestwaf
An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
reddelexc/hackerone-reports
Top disclosed reports from HackerOne
TheArqsz/JSRecon-Buddy
A simple browser extension to quickly find interesting security-related information on a webpage.