#

Bug Bounty

A bug bounty program is a deal offered by many websites, organizations and software developers by which individuals can receive recognition and compensation for reporting bugs, especially those pertaining to security exploits and vulnerabilities.

Here are 35 public repositories matching this topic...

dnny-13 / kuroneko

Payload Delivery Server for Web Exploits

http security web pentesting bugbounty

Updated Mar 30, 2025
Java

dhunt12 / Android-InsecureBankv2

Vulnerable Android application for developers and security researchers to learn about Android penetration testing/ bug bounty hunting. Updated to run with Python 3.

android python3 pentesting bugbounty vulnerable-application

Updated Jan 2, 2022
Java

Ibrahem-Antar / WebPwn

🔍 Discover and exploit web vulnerabilities with WebPwn, your go-to tool for enhancing web security testing and vulnerability assessments.

osint sql authentication network xss penetration-testing password-strength pentesting sqli-vulnerability-scanner bugbounty pentest xss-exploitation lfi xst pentest-tool pentesting-tools penetration-testing-tools sqli-pentester

Updated Nov 8, 2025
Java

devopscoder331 / Burp-PwnFox-Chrome

PwnFox is an extension for Burp Suite

bugbounty burp burp-plugin burpsuite burp-extensions bughunter

Updated Aug 1, 2025
Java

1in9e / Apache-Log4j2-RCE

Apache Log4j2 RCE( CVE-2021-44228)验证环境

java security apache rce bugbounty log4j2 cve-2021-44228

Updated Dec 10, 2021
Java

frankheat / deeplink-impersonation-poc

PoC of Android deep link abuse for app impersonation

android cybersecurity bugbounty deep-links penetration-test

Updated Jul 11, 2025
Java

incogbyte / baiwogen

Baiwogen is a Burp Suite extension that leverages AI to generate targeted wordlists for security testing. It traverses your target’s sitemap, filters relevant endpoints, and produces variations of paths, file names, and parameters.

security ai infosec bugbounty

Updated Apr 18, 2025
Java

incogbyte / BSMAPREC

BSMAPREC is a Burp Suite extension that automatically detects and extracts source maps from JavaScript files. It helps security researchers and developers identify and analyze the original source code of minified JavaScript files.

hacking infosec bugbounty bup portswigger

Updated Apr 21, 2025
Java

devopscoder331 / Burp-Sitemap-Exporter

Sitemap Exporter is an extension for Burp Suite that lets you export items from the Site Map to files on your disk.

bugbounty burp burp-plugin burpsuite burp-extensions bughunter

Updated Jul 22, 2025
Java

campbellcharlie / Belch

Add a local REST API to Burp Suite Pro for instant, scriptable control of proxy, scanning, and scope.

extension rest-api websocket http-proxy penetration-testing application-security web-security bugbounty appsec burp-plugin burpsuite security-tools burp-suite burp-extender

Updated Aug 24, 2025
Java

alanEG / Sock

extract social media accounts and check if possible to hijacking

social-media osint bug-bounty bugbounty burp burpsuite burp-extensions soical

Updated Dec 19, 2022
Java

pbarucco / Wayback-Recon

🔍 Discover and analyze historical URLs from the Wayback Machine in Burp Suite to enhance your bug bounty and penetration testing efforts.

security penetration-testing recon bugbounty wayback-machine cyber-security hacking-tool secure-coding reconnaissance pentest-tools pentesting-tool bugbounty-tool bugbou trabbit narrow-recon narrowrecon-tool narrow-recon-tool bhunty

Updated Nov 8, 2025
Java

rodnt / bffuf

Burp bridge to FFUF

fuzzing bugs bugbounty burp pentest ffuf portswigger

Updated Jul 23, 2024
Java

k2haxor / HACK-THEM-ALL

Hack like a pro

hacking penetration-testing exploits pentesting bugbounty

Updated May 12, 2022
Java

mathis2001 / Files-upload

Some useful files for upload features pentesting

svg php file-upload pentesting bugbounty pentest webshell

Updated Sep 19, 2025
Java

rahulkadavil / Buggyapp

Buggyapp is an vulnerable android application. This app can be used by pentesters, security researchers to practice Android application pentesting. This is build for beginners to learn basics about Android application pentesting

android pentesting bugbounty

Updated Jun 4, 2022
Java

llamaonsecurity / rio

A handy plugin for copying requests/responses directly from Burp, some extra magic included.

reporting bug-bounty bugbounty security-tools reporting-tool bug-bounty-hunters bugbounty-tool

Updated Oct 15, 2021
Java

richeeta / AIAuditor

Lightweight BApp that seamlessly integrates powerful LLM-scanning capabilities into Burp's built-in Scanner with improved accuracy. Supports the latest LLMs from OpenAI (gpt-4o, o1), Anthropic (Claude 3.5, Claude 3), and Google (Gemini 1.5). Requires valid API key(s) and an active Burp Suite Pro or Enterprise license.

ai gemini openai bug-bounty bugbounty burp-plugin burpsuite burp-extensions claude gemini-api burp-suite bugbounty-tool openai-api claude-ai claude-api burp-pro burp-extension

Updated Aug 4, 2025
Java

BFAC-Burp-Extension

sec-it / BFAC-Burp-Extension

Burp Extension for BFAC (Advanced Backup-File Artifacts Testing for Web-Applications)

backup-files recon bugbounty pentest burpsuite burp-extensions

Updated Aug 9, 2021
Java

cosad3s / salsa

SALSA 💃⚡ - SALesforce Scanner for Aura (and beyond). Enumeration of vulnerabilities and misconfigurations against Salesforce endpoint.

security hacking salesforce bugbounty

Updated Jan 26, 2025
Java

Followers: 616 followers
Website: github.com/topics/bugbounty
Wikipedia: Wikipedia

Related topics

penetration-testing pentest pentesting security