Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

Projects in Awesome Lists tagged with bugcrowd

A curated list of projects in awesome lists tagged with bugcrowd .

https://github.com/arkadiyt/bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

bounty bug bugcrowd federacy hackenproof hackerone intigriti vrp yeswehack

Last synced: 27 Jan 2026

https://github.com/screetsec/sudomy

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

bash bugbounty bugcrowd collected-subdomains enumeration framework hackerone httprobe kali kali-linux pentesting recon-subdomain reconnaissance scanner subdomain-enumeration subdomain-finder subdomain-scanner subfinder sublist3r

Last synced: 03 Oct 2025

https://github.com/screetsec/Sudomy

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

bash bugbounty bugcrowd collected-subdomains enumeration framework hackerone httprobe kali kali-linux pentesting recon-subdomain reconnaissance scanner subdomain-enumeration subdomain-finder subdomain-scanner subfinder sublist3r

Last synced: 14 Apr 2025

https://github.com/Screetsec/Sudomy

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

bash bugbounty bugcrowd collected-subdomains enumeration framework hackerone httprobe kali kali-linux pentesting recon-subdomain reconnaissance scanner subdomain-enumeration subdomain-finder subdomain-scanner subfinder sublist3r

Last synced: 13 Mar 2025

https://github.com/elementalsouls/Claude-BugHunter

A Claude Code skill bundle for bug hunting and external red-team work — 71 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.

ai-security anthropic application-security bug-bounty bugbounty bugcrowd claude claude-code claude-skills ethical-hacking hackerone offensive-security pentesting red-team security-tools web-security

Last synced: 19 Jun 2026

https://github.com/shuvonsec/claude-bug-bounty

AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude Code.

ai-security bug-bounty bugcrowd claude-ai claude-code ethical-hacking hackerone penetration-testing recon vulnerability-scanner

Last synced: 02 Apr 2026

https://github.com/Zarcolio/sitedorks

Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.

baidu bing bugbounty bugcrowd duckduckgo google google-dorks googledork hackerone hacking infosec intigriti osint python3 recon reconnaissance search search-engines yahoo yandex

Last synced: 11 Jul 2025

https://github.com/appsecco/bugcrowd-levelup-subdomain-enumeration

This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference

bugcrowd censys certificate-transparency crtsh dns dnssec domains enumeration levelup nsec nsec3 osint pentesting subdomain

Last synced: 02 Apr 2025

https://github.com/arkadiyt/bounty-targets

This project crawls bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) hourly and dumps them into the bounty-targets-data repo

bounty bug bugcrowd federacy hackenproof hackerone intigriti vrp yeswehack

Last synced: 07 Apr 2025

https://github.com/yhy0/Jie

Jie stands out as a comprehensive security assessment and exploitation tool meticulously crafted for web applications. Its robust suite of features encompasses vulnerability scanning, information gathering, and exploitation, elevating it to an indispensable toolkit for both security professionals and penetration testers. 挖洞辅助工具(漏洞扫描、信息收集)

apollo-exp bugcrowd crawler hackerone jie scan scanner security-copilot shiro-exp src vul vulnerability vulnerability-detection vulnerability-exploitation vulnerability-scanners

Last synced: 07 Sep 2025

https://github.com/M4DM0e/DirDar

DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it

bug-bounty bugcrowd bypass dir-listing forbiddens golang hackerone hacking pentest

Last synced: 10 May 2025

https://github.com/bugcrowd/vulnerability-rating-taxonomy

Bugcrowd’s baseline priority ratings for common security vulnerabilities

bugcrowd rating taxonomy vrt vulnerabilities

Last synced: 06 Mar 2026

https://github.com/sdushantha/dora

Find exposed API keys based on RegEx and get exploitation methods for some of keys that are found

apikeys bugbounty bugcrowd ethical-hacking exploits hackerone infosec python regex

Last synced: 06 Apr 2025

https://github.com/pdelteil/BugBountyReportTemplates

List of reporting templates I have used since I started doing BBH.

bugbounty bugcrowd hackerone intigriti reports templates

Last synced: 11 Jul 2025

https://github.com/BitTheByte/Monitorizer

Monitoring framework to detect and report newly found subdomains on a specific target using various scanning tools

bugbounty bugcrowd hackerone subdomain-enumeration subfinder

Last synced: 11 Jul 2025

https://github.com/SKVNDR/FastDork

⚡Chrome extension allows you to create lists of Google and Github dork to open multiple tabs with one click, import "scope/out of scope" from #HackerOne #Bugcrowd #Intigriti ...

bugbounty bugcrowd chrome cybersecurity dork extension fastdork google hackerone intigriti pentest-tool

Last synced: 11 Jul 2025

https://github.com/BitTheByte/Eagle

Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities

bugbounty bugcrowd cve ftp hackerone hacking python ssrf takeover xss

Last synced: 02 Apr 2025

https://github.com/samogod/bugradar

Advanced external automation on bug bounty programs by running the best set of tools to perform scanning and finding out vulnerabilities.

automation bounty bug bug-bounty bugbounty bugbounty-tool bugcrowd hackerone osint recon recontool security security-automation security-tools

Last synced: 11 Jul 2025

https://github.com/rix4uni/scope

An automated GitHub Actions-based crawler that fetches and updates public scopes from popular bug bounty platforms (like Hackerone/Bugcrowd/Intigriti/etc) (updates every 10 minutes)

bug-bounty bugbounty bugbountytips bugcrowd hackenproof hackerone hacking infosec intigriti osint osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools vrp yeswehack

Last synced: 06 Mar 2026

https://github.com/itsignacioportal/hacker-scoper

CLI tool for filtering URLs/IPs with automatically-updated Bug Bounty program scope rules.

bugbounty bugcrowd enumeration filter go golang hackerone infosec pentesting recon scopes security security-tools shell tool websec websecurity

Last synced: 15 Jun 2026

https://github.com/dwisiswant0/bounty-targets-alert

It's an watcher for new scopes added to bounty-targets-data and send you alert to Slack.

bugbounty bugbountytips bugcrowd federacy hackenproof hackerone intigriti vdp vrp yeswehack

Last synced: 24 Mar 2025

https://github.com/andripwn/PayloadsAll

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

allpayload bugbounty bugcrowd bughunter hackerone payloads pentest python rce researchers securityresearchers sql vulnerability vulnerabilityanalysis xsss

Last synced: 10 Mar 2025

https://github.com/BitTheByte/Orkestra

Web-based Android debugger with inspection capabilities using Frida and Jadx as a backbone

android bugbounty bugcrowd debugger decompiler frida hackerone jadx java java-decompiler orkestra

Last synced: 12 Jul 2025

https://github.com/ItsIgnacioPortal/hacker-scoper

Automagically filter URLs with Bug Bounty program scope rules scraped from the internet.

bugbounty bugcrowd enumeration filter go golang hackerone infosec pentesting recon scopes security security-tools websec websecurity

Last synced: 11 Jul 2025

https://github.com/humblelad/Needle

Instant access to you bug bounty submission dashboard on various platforms + publicly disclosed reports + #bugbountytip

bugbounty bugcrowd chrome-extension hackerone intigriti yeswehack

Last synced: 11 Jul 2025

https://github.com/bugcrowd/vrt-ruby

Ruby library for interacting with Bugcrowd's VRT

bugcrowd gem taxonomy vrt vulnerability

Last synced: 25 Sep 2025

https://github.com/asecurityteam/bug_crowd_client

Python implementation of a Bugcrowd api client.

bugcrowd bugcrowd-api bugcrowd-client python

Last synced: 31 Jan 2026

https://github.com/noraj/vrt-cli

A simple tool to visualize VRT (Vulnerability Rating Taxonomy) from the CLI.

bugcrowd cli hacktoberfest taxonomy vrt vulnerability

Last synced: 03 Jan 2026

https://github.com/0xtavian/get_acquisitions.py

Supply a domain to retrieve acquisitions details.

bugbounty bugcrowd hackerone hacking recon reconnaissance

Last synced: 10 Oct 2025

https://github.com/hackermondev/bugcrowd-tracker

Track Hall of Fame and disclosed reports on Bugcrowd engagements

bugcrowd discord tracker webhook

Last synced: 10 Aug 2025

https://github.com/shreyaschavhan/bugbountywriteups

This Repository will contain Bug Bounty Write-Up that I read on daily basis!

bounty bounty-hunters bug-bounty bugbounty bugcrowd hackerone hackers payloads synack tools writeups

Last synced: 10 Mar 2025

https://github.com/eagleEggs/bugBounties

Authorized dislosures of bugbounties that have been resolved

bugbounty bugcrowd fitbit penetration-testing security

Last synced: 10 Mar 2025

https://github.com/eagleeggs/bugbounties

Authorized dislosures of bugbounties that have been resolved

bugbounty bugcrowd fitbit penetration-testing security

Last synced: 19 Mar 2026

https://github.com/muhammadwaseem29/backupfinder

BackupFinder discovers backup files on web servers by generating intelligent patterns.

backupfinder bug bugbounty bugcrowd ffuf hackerone wordlist-generator yeswehack

Last synced: 03 Sep 2025

https://github.com/cbrnrd/lacewing

🦗Your neighborhood bug bounty assistant

bug bugbounty bugcrowd hackerone ruby rubygems

Last synced: 29 Jul 2025

https://github.com/adamjsturge/bugcrowd-webhook-manager

Rust based webhook manager for slack

bugcrowd rust slack

Last synced: 04 May 2026