nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters

• Silver III

A curated list of various bug bounty tools

• 1,475+3 Elo, change today
• 6.4k stars
• 1k forks
• 14d ago

git clone https://github.com/vavkamil/awesome-bugbounty-tools.git

• awesome
• awesome-list
• bugbounty
• security-tools

• Silver II

Top disclosed reports from HackerOne

• 1,498+37 Elo, change today
• 6.7k stars
• 1.1k forks
• 8d ago

git clone https://github.com/reddelexc/hackerone-reports.git

• bugbounty
• csrf
• hackerone
• idor

• Gold III

Source code for Hacker101.com - a free online web and mobile security class.

• 1,565−11 Elo, change today
• 14.6k stars
• 2.6k forks
• 1y ago

git clone https://github.com/Hacker0x01/hacker101.git

• clickjacking
• csrf
• education
• hacker101

• Gold III

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

• 1,560+4 Elo, change today
• 8.3k stars
• 1.2k forks
• 13d ago

git clone https://github.com/six2dez/reconftw.git

• bug-bounty
• bugbounty
• bugbounty-tool
• dns

• Emerald IV

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

• 1,798−7 Elo, change today
• 23.2k stars
• 1.6k forks
• 108 watchers
• 4d ago

git clone https://github.com/chaitin/SafeLine && cd SafeLine && docker compose up -d

• api-gateway
• application-security
• appsec
• blueteam

• Bronze V

A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.

• 1,364±0 Elo, change today
• 6.3k stars
• 966 forks
• 11h ago

git clone https://github.com/elementalsouls/Claude-BugHunter.git

• ai-security
• anthropic
• application-security
• bug-bounty