reddelexc/hackerone-reports
Open on GitHubPythonTop disclosed reports from HackerOne
- 1,496+37 Elo, change today
- 6.7k stars
- 1.1k forks
git clone https://github.com/reddelexc/hackerone-reports.gitTop Bugbounty repositories
Repositories with the GitHub topic “bugbounty”: 22 repositories with 282k stars between them, mostly written in Python, Go and Shell. The highest-rated is swisskyrepo/PayloadsAllTheThings, #305 on the bestofgithub Elo ladder.
Biggest movers this week
six2dez/reconftw
Open on GitHubShellreconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
- 1,560+4 Elo, change today
- 8.3k stars
- 1.2k forks
git clone https://github.com/six2dez/reconftw.gitmaurosoria/dirsearch
Open on GitHubPythonWeb path scanner
- 1,627+8 Elo, change today
- 15k stars
- 2.4k forks
git clone https://github.com/maurosoria/dirsearch.gitdwisiswant0/apkleaks
Open on GitHubPythonScanning APK file for URIs, endpoints & secrets.
- 1,398+8 Elo, change today
- 6.3k stars
- 605 forks
git clone https://github.com/dwisiswant0/apkleaks.gitblacklanternsecurity/bbot
Open on GitHubPythonThe recursive internet scanner for hackers. 🧡
- 1,722−2 Elo, change today
- 11.1k stars
- 995 forks
- 62 watchers
brew install bbotOWASP/wstg
Open on GitHubCSSThe Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
- 1,671+7 Elo, change today
- 10.2k stars
- 1.7k forks
git clone https://github.com/OWASP/wstg.gitTop 22 on the Elo ladder
- #305swisskyrepo/PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
- #2,052blacklanternsecurity/bbot
The recursive internet scanner for hackers. 🧡
- #2,126projectdiscovery/subfinder
Fast passive subdomain enumeration tool.
- #2,244projectdiscovery/nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
- #2,552OWASP/wstg
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web…
- #3,145maurosoria/dirsearch
Web path scanner
- #3,248edoardottt/awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team…
- #3,889nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters
A list of resources for those interested in getting started in bug bounties
- #4,116projectdiscovery/httpx
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
- #4,233six2dez/reconftw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform…
- #5,067yogeshojha/rengine
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined…
- #5,506reddelexc/hackerone-reports
Top disclosed reports from HackerOne
- #5,572dstotijn/hetty
An HTTP toolkit for security research.
- #5,959shmilylty/OneForAll
OneForAll是一款功能强大的子域收集工具
- #5,969vavkamil/awesome-bugbounty-tools
A curated list of various bug bounty tools
- #6,630KathanP19/HowToHunt
Collection of methodology and test case for various web vulnerabilities.
- #6,705daffainfo/AllAboutBugBounty
All about bug bounty (bypasses, payloads, and etc)
- #7,239j3ssie/osmedeus
A Modern Orchestration Engine for Security
- #7,763ihebski/DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️
- #7,871EdOverflow/bugbounty-cheatsheet
A list of interesting payloads, tips and tricks for bug bounty hunters.
- #7,947dwisiswant0/apkleaks
Scanning APK file for URIs, endpoints & secrets.
- #8,757elementalsouls/Claude-BugHunter
A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681…