bug-bounty-recon

BUG BOUNTY WRITEUPS - OWASP TOP 10 🔴🔴🔴🔴✔

Bug Bounty ~ Awesomes | Books | Cheatsheets | Checklists | Tools | Wordlists | More

📦 An independent package manager that every hacker deserves.

Little Bug Bounty & Hacking Tools⚔️

Python library and CLI for the Bug Bounty Recon API

Domains belonging to the most reputed public bug bounty programs. [NOT FOR NON-MONETARY OR PRIVATE PROGRAMS]

A Bug Bounty Platform that allows hunters to issue commands over a geo-distributed cluster. The ideal user is someone who is attempting to scan multiple bug bounty programs simultaneously, on a recurring basis.

My bug bounty notes

AI/LLM-assisted JS Recon and vulnerability triage for authorized bug bounty testing & pentesting — scope-gated, passive-by-default, human-verified

JSpider is a smart crawler for hidden endpoints. It crawls and extracts hidden API endpoints and URLs from JavaScript files and HTML source code - all directly in your browser.

A structured recon-only framework for bug bounty hunters, from DNS basics to JS mining, API discovery, and automation pipelines.

Autonomous security agent on Kali Linux using Qwen 2.5-14b with LM Studio

500+ Google Dork Operators for Security Research & Bug Bounty

DorkScan is a web app that helps bug bounty hunters and students generate Google Dork queries. Choose a role to get tailored dorks for vulnerabilities or educational resources. The tool allows custom searches, displaying clickable dorks in real-time with a clean, responsive design for easy use across devices.

This repository contains my personal notes and methodologies related to Bug Bounty and Web Security, including: Recon methodologies (general + personal workflows) Techniques to find hidden assets Various attack vectors

This is a notification pipeline written in python, which uses a common base `notification.txt` file to connect any script to an standardized discord notification system.

Advanced AI-Powered Security Framework | 30+ Modules | SQLi, XSS, WAF Detection, Subdomain Enum, Port Scan, CMS Detect, API Audit, C2 & More | Free & Open Source

domainghost by b0dj0x

Maximize your bounty hunting with 6qlzHunter – a powerful vulnerability scanner

A lightweight Firefox extension designed for Bug Bounty Hunters and Penetration Testers to automatically harvest, filter, and export domain names and subdomains from web pages during the reconnaissance phase.