github.com/Vanshal/Bug-Hunting

Nearly 300 selected and high quality articles on web application vulnerability detection and exploitation.

This repository can be called one of the most comprehensive encyclopedias for bughunters.

#hacking #pentest #bugbounty

Today in my Dorks collections list there is a new section — "Bug Bounty Dorks".

#cybersecurity #pentest #bugbounty

BBT (#BugBounty Tools) repo.

36 basic #python and bash scripts for finding vulnerabilities on websites and apps.

https://github.com/m4ll0k/BBTz

Creator
@m4ll0k

Utica College Cyber Security Club Resources List

502 links, 47 categories (view pic)

Tools, webapps, articles, manuals, cheatsheets etc.

https://github.com/UticaCollegeCyberSecurityClub/Resources

#cybersecurity #bugbounty #osint

http://inventory.raw.pm

Search by best #cybersecurity tools, resources, #ctf and #bugbounty platforms.

AllAboutBugBounty

Collection of notes about on the most important BugBounty-related topics. Written concisely and succinctly. It can be read in one evening.

https://github.com/daffainfo/AllAboutBugBounty

Contributor twitter.com/daffainfo


#cybersecurity #bugbounty

BugBounty Cheat Sheet from twitter.com/EdOverflow


BugBounty platforms
Practice (training) platforms
Special tools
Tips

https://github.com/EdOverflow/bugbounty-cheatsheet

#bugbounty #cybersecurity

Galaxy Bugbounty Checklist

Tutorials and tips for #BugBounty/#Pentest:

API Security
Log4Shell
SQL Injection
XSS payloads
Account Takeover
2FA bypass
SSRF

and more

https://github.com/0xmaximus/Galaxy-Bugbounty-Checklist

AWESOME BUGBOUNTY TOOLS

Subdomain Enumeration
Port Scanning
Fuzzing
GraphQL/CRLF/CSRF/SQL/XSS/XXE Injections
Directory Traversal
Open Redirect
Subdomain Takeover

and more.

https://github.com/vavkamil/awesome-bugbounty-tools


#pentest #bugbounty

HackerOne Reports

Dozens of rankings of the vulnerability reports on the HackerOne platform. Top by bug type, top by program, top 100 paid, top 100 upvoted.

https://github.com/reddelexc/hackerone-reports

#pentest #bugbounty

Bug Bounty Standards

List of situations that occur in #bugbounty programs and how they should be handled.

https://github.com/hakluke/bug-bounty-standards

Contributor twitter.com/hakluke

Web Hackers Weapons

List of cross-platform #pentest/#bugbounty tools:

Swiss Army Knifes
Proxies
Recons
Fuzzers
Scanners
Exploits
Utils

https://github.com/hahwul/WebHackersWeapons


Contributor twitter.com/hahwul

Chaos (beta)

Search across 763 #bugbounty programs from Hackerone , BugCrowd, Intigriti and Yeswehack.

https://chaos.projectdiscovery.io/

Creator twitter.com/pdiscoveryio

HACKYX

#Cybersecurity search engine. There are already more than 23k #CTF writeup and #bugbounty reports indexed.

https://hackyx.io/

Creators twitter.com/aituglo twitter.com/Wlayzz Tip by twitter.com/IamRenganathan