A collection of various awesome lists for hackers, pentesters and security researchers
android security awesome reverse-engineering pentesting-windows hacking penetration-testing bug-bounty fuzzing
-
Updated
Jan 18, 2025
#
bug-bounty
A bug bounty program is a deal offered by many websites, organizations and software developers by which individuals can receive recognition and compensation for reporting bugs, especially those pertaining to security exploits and vulnerabilities.
Here are 836 public repositories matching this topic...
Language: All
Filter by language
Sort: Most stars
Sort options
Web path scanner
python security scanner hacking wordlist enumeration penetration-testing bug-bounty fuzzing infosec pentesting bugbounty fuzzer brute appsec hacking-tool dirsearch pentest-tool redteam red-teaming
-
Updated
Sep 22, 2025 - Python
A list of resources for those interested in getting started in bug bounties
education hackers hacking xss bug-bounty web-security bugbounty pentest ssrf bug-bounty-hunters learn2hack
-
Updated
Jul 23, 2024
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with...
osint scanner hacking penetration-testing bug-bounty infosec pentesting recon bugbounty scanning information-gathering rengine security-tools reconnaissance scanner-web recon-engine
-
Updated
Feb 24, 2025 - HTML
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
dns security osint scanner hacking subdomain penetration-testing bug-bounty fuzzing pentesting recon nuclei vulnerabilities bugbounty pentest security-tools reconnaissance pentest-tool
-
Updated
Sep 3, 2025 - Shell
The all-in-one browser extension for offensive security professionals 🛠
chrome-extension hack reverse-shell firefox-addon hacking cheatsheet bug-bounty msfvenom payloads metasploit redteam hacktools hackbar purpleteam xss-payloads hackingtools hack-tools web-pentesters
-
Updated
Jan 5, 2025 - TypeScript
A Workflow Engine for Offensive Security
go golang security osint hacking penetration-testing bug-bounty pentesting bugbounty scanning hacking-tool information-gathering security-tools reconnaissance pentest-tool attack-surface attack-surface-management
-
Updated
Aug 8, 2025 - Go
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
tmux meg nmap bug-bounty nuclei masscan axiom massdns subfinder httprobe httpx gau hacking-vps gowitness ffuf shuffledns dnsx dnsgen
-
Updated
Sep 30, 2024 - Shell
Applied offensive security with Rust - https://kerkour.com/black-hat-rust
rust security virus scanner phishing wasm hacking audit trojan bug-bounty infosec pentesting beacon pentest offensive-security red-team security-tools c2 bug-hunting shellcodes
-
Updated
Oct 1, 2025 - Rust
A Security Tool for Bug Bounty, Pentest and Red Teaming.
penetration-testing poc bug-bounty pentest vulnerability-scanner red-teaming vulnerability-scanning-tools afrog
-
Updated
Oct 15, 2025 - HTML
A collection of awesome one-liner scripts especially for bug bounty tips.
-
Updated
Jul 29, 2024
Semi-automatic OSINT framework and package manager
rust security intelligence security-audit osint lua location certificate-transparency bug-bounty pentesting recon security-scanner investigation reconnaissance osint-framework
-
Updated
Jan 31, 2025 - Rust
🕵️ OSINT Tools for gathering information and actions forensics 🕵️
security awesome osint incident-response hacking forensics cybersecurity penetration-testing bug-bounty infosec awesome-list pentesting security-automation security-tools reconnaissance
-
Updated
Mar 12, 2025
This challenge is Inon Shkedy's 31 days API Security Tips.
-
Updated
Apr 20, 2022
Subdomain Takeover tool written in Go
go golang security subdomain bug-bounty infosec pentesting bugbounty takeover hostile subdomain-takeover
-
Updated
Aug 13, 2023 - Go
A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
security secrets s3-bucket python3 bug-bounty bugbounty s3-buckets security-automation security-tools cloud-storage-services subdomain-scanner subdomain-enumeration find-subdomains external-javascripts secretfinder find-secrets madeinindia
-
Updated
May 20, 2024 - Python
Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
-
Updated
Apr 26, 2024 - Java
A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying and exploiting vulnerabilities.
collection hacking resources owasp bug-bounty bugbounty ethical-hacking owasp-top-10 bugbountytips xalgord
-
Updated
Sep 11, 2025
- Followers
- 608 followers
- Website
- github.com/topics/bugbounty
- Wikipedia
- Wikipedia