bug-bounty

A collection of various awesome lists for hackers, pentesters and security researchers

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

Web path scanner

A list of resources for those interested in getting started in bug bounties

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

The all-in-one browser extension for offensive security professionals 🛠

AI-powered bug bounty hunting toolkit that works with or without subscription.

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

A Security Tool for Bug Bounty, Pentest and Red Teaming.

📡 Comprehensive collection of OSINT tools for cybersecurity professionals, researchers, and bug bounty hunters. Topics: information gathering, reverse search, red team, trust & safety, AI.

A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.

A collection of awesome one-liner scripts especially for bug bounty tips.

🕵️ OSINT Tools for gathering information and actions forensics 🕵️

Semi-automatic OSINT framework and package manager

Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go, Claude API, and 7+ native security tools.

ChatGPT Plus/Team/Pro 订阅协议端到端重放工具集 · hCaptcha 视觉求解器 · 反欺诈机制实证研究 / End-to-end protocol replay toolkit for ChatGPT Plus/Team/Pro subscription with from-scratch hCaptcha solver and empirical anti-fraud research

Open-source AI-powered offensive security harness for automated penetration testing.

Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.

Collection of quality safety articles. Awesome articles.

DNS Takeover tool written in Go

Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.

A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.

A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying and exploiting vulnerabilities.

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.

OSINT power without API key hassle

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.

A collection of one-liners for bug bounty hunting.

Asset inventory of over 800 public bug bounty programs.