Solve password-riddles on a website without logins or ads.
#bug-bounty tools
33 results
A company that helps organizations create security-aware teams and produce bug-free software.
A repository containing hourly-updated data dumps of bug bounty platform scopes
Comprehensive reference guide for bug bounty hunters with detailed information on various vulnerabilities, platforms, tools, and best practices.
A categorized collection of bug bounty write-ups for various vulnerabilities.
Bug bounty hunting platform and methodology.
A repository containing material from a talk on sub-domain enumeration techniques
A free and open-source deliberately insecure web application for security enthusiasts, developers, and students to discover and prevent web vulnerabilities.
A tool for discovering company infrastructure and apps on major cloud providers, beneficial for bug bounty hunters and penetration testers.
A collection of real-world scenarios to evaluate command injection detection and exploitation abilities
A deliberately weak and insecure implementation of GraphQL for testing and practicing GraphQL security
A deliberately vulnerable modern day app with lots of DOM related bugs
A tool for testing Cross Site Scripting vulnerabilities
GHH is a honeypot tool to defend against search engine hackers using Google as a hacking tool.
A tool for scanning websites with open .git repositories and dumping their content for Bug Hunting/Pentesting Purposes.
Platform for users to test cybersecurity skills by exploiting vulnerabilities.
Comprehensive security training platform for web developers, offering hands-on experience with real, vulnerable applications and concrete advice for securing code.
A platform offering hacking missions to test and enhance skills.
HonnyPotter is a WordPress plugin that logs all failed login attempts, with a caution to use it at your own risk.
A fast and reliable port scanner for attack surface discovery
The Node.js Bug Bounty Program is a program aimed at identifying and fixing security vulnerabilities in the Node.js ecosystem.
A tool for mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
A comprehensive toolkit for web application security testing, offering a range of products and solutions for identifying vulnerabilities and improving security posture.
Repository of tools for testing iPhone messaging by Project Zero
Load more tools
Showing 24 of 33