Bug Bounty
A bug bounty program is a deal offered by many websites, organizations and software developers by which individuals can receive recognition and compensation for reporting bugs, especially those pertaining to security exploits and vulnerabilities.
Here are 364 public repositories matching this topic...
confedential open redirect vlun scanner tool
-
Updated
Jul 29, 2022 - Shell
Recursive Certificate_Subject_Alternative_Name Scan
-
Updated
Nov 15, 2024 - Shell
Denum is a tool designed for the reconnaissance phase of penetration testing and is especially valuable for bug bounty hunters. It helps in gathering and cleaning domain names from URLs to extend the scope of their search by efficiently extracting and standardizing core domain names and subdomains.
-
Updated
Sep 8, 2024 - Shell
A lightweight and minimal recon automation tool to extract subdomains, endpoints, and parameters using common bug bounty utilities.
-
Updated
May 21, 2025 - Shell
A Bash Script For Finding Subdomains Using Different Tools ( SubFinder, AssetFinder, Sublist3r, Github_subdomains, Subdomain Center And AlienVault, Findomain, crt.sh )
-
Updated
Oct 31, 2025 - Shell
🔧 Automate Burp CA installation on Android with this Bash script, converting certificates and ensuring network interception works seamlessly.
-
Updated
Nov 11, 2025 - Shell
I made this for my personal use to automate things like enumeration and all other stuffs to reduce time in recon and helps to claim first blood. ⛳ 😀
-
Updated
Nov 14, 2022 - Shell
Robust Subdomain Takeover Tool
-
Updated
Sep 13, 2021 - Shell
A powerful Google dork generator designed to enhance your OSINT and target enumeration during bug bounty hunting.
-
Updated
May 21, 2025 - Shell
DomainSpotter is a simple bash script designed to query the Certspotter Certificate Transparency (CT) log for domain and subdomain discovery.
-
Updated
Jul 9, 2025 - Shell
This script automates the process of installing tools used on bug bounty recon.
-
Updated
Mar 16, 2023 - Shell
Bash script to install essential tools for bughunting
-
Updated
Aug 10, 2021 - Shell
Simple bash script to convert bulk domain lists to ip addresses, recon tool for bug bounty.
-
Updated
Feb 3, 2024 - Shell
bugarsenal 🔹 Description: A modular bug bounty recon and automation framework built in Bash by Inayat Hussain — designed to run efficiently on low-spec systems.
-
Updated
May 21, 2025 - Shell
Collection of iOS App Pen-testing tools and notes.
-
Updated
Apr 23, 2025 - Shell
JavaScript Sniper is a helper script designed for web applications, with a focus on uncovering potential vulnerabilities, it excels in finding hardcoded secret keys, detecting DOM-based Cross-Site Scripting (DOM-XSS), and extracting endpoints.
-
Updated
Jan 18, 2024 - Shell
Find Admin Pages is a simple and efficient Bash script for bug bounty, and security researchers. Its been written to search through source code for potential admin pages.
-
Updated
May 18, 2024 - Shell
html injection scanner .. Automates HTML injection
-
Updated
Jun 12, 2025 - Shell
- Followers
- 616 followers
- Website
- github.com/topics/bugbounty
- Wikipedia
- Wikipedia