bug-bounty-hunting

BUG BOUNTY WRITEUPS - OWASP TOP 10 🔴🔴🔴🔴✔

Reusable prompts for a structured, evidence-first bug bounty hunting workflow

Bug Bounty ~ Awesomes | Books | Cheatsheets | Checklists | Tools | Wordlists | More

Complete collection of bug bounty reports from Hackerone.

Apache commons text - CVE-2022-42889 Text4Shell proof of concept exploit.

Juniper Firewalls CVE-2023-36845 - RCE

⚡ AI-powered cybersecurity CLI tool for Kali Linux | Ethical hacking | Penetration testing | Bug bounty

A Bug Bounty Platform that allows hunters to issue commands over a geo-distributed cluster. The ideal user is someone who is attempting to scan multiple bug bounty programs simultaneously, on a recurring basis.

A simple reconnaissance framework for bug bounty hunting

nuclei framework scripts

bug bounty

A personal documentation repo focused on mastering web application security through hands-on ethical hacking, tools, and vulnerability analysis. It’s a great reference for developers and aspiring bug bounty hunters diving into web pen testing.

🕵️‍♂️ | A Chrome extension that collects all JavaScript (.js) links, form endpoints, and all other links from a webpage with a single click!

this a ssrf scripts

I use this repo as a backup of my notes. knowledge is free and meant to be shared. feel free to use it at your own wish :)

This repository contains my personal notes and methodologies related to Bug Bounty and Web Security, including: Recon methodologies (general + personal workflows) Techniques to find hidden assets Various attack vectors

this is some wordlist for bugbounty

A curated list of Public Bug Bounty, Responsible Disclosure, Vulnerability Disclosure Programs sourced from Community & Internet.

CORS exploitation and impact analysis engine focused on CSRF, OAuth abuse, cache poisoning, and cross-origin trust failures.

Find subdomains and urls in Javascript files