Top #bugbounty Tools & Software

Explore 23 hand-picked tools and software tagged with bugbounty — ranked by popularity and community signals.

Popular Trending Recent Name A-Z

PayloadsAllTheThings

github

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Security Python
★ 76,912

dirsearch

github

Web path scanner

Security Python
★ 14,236

nuclei-templates

github

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Security JavaScript
★ 12,297

awesome-hacker-search-engines

github

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

Security Shell
★ 10,579

Sn1per

github

Attack Surface Management Platform

Security Shell
★ 9,727

bbot

github

The recursive internet scanner for hackers. 🧡

Database Python
★ 9,607

wstg

github

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

Security
★ 9,179

reconftw

github

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

Security Shell
★ 7,496

AllAboutBugBounty

github

All about bug bounty (bypasses, payloads, and etc)

Security
★ 6,719

bugbounty-cheatsheet

github

A list of interesting payloads, tips and tricks for bug bounty hunters.

Security
★ 6,467

osmedeus

github

A Modern Orchestration Engine for Security

Security Go
★ 6,221

hackerone-reports

github

Top disclosed reports from HackerOne

Security Python
★ 5,962

can-i-take-over-xyz

github

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

Security Python
★ 5,644

dalfox

github

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

Security Go
★ 4,961

WebHackersWeapons

github

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

Security Ruby
★ 4,594

interactsh

github

An OOB interaction gathering server and client library

Security Go
★ 4,303

knockpy

github

Knock Subdomain Scan

Security Python
★ 4,162

Fuzzing101

github

An step by step fuzzing tutorial. A GitHub Security Lab initiative

Testing
★ 3,769

vulnerability-Checklist

github

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

Security
★ 3,469

cariddi

github

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

Security Go
★ 3,359

pentest-tools

github

A collection of custom security tools for quick needs.

Security Python
★ 3,293

caido

github

🚀 Caido releases, wiki and roadmap

Security Shell
★ 2,320

31-days-of-API-Security-Tips

github

This challenge is Inon Shkedy's 31 days API Security Tips.

Security
★ 2,236