bug-bounty-hunters 开源项目推荐（25 个）

nahamsec /Resources-for-Beginner-Bug-Bounty-Hunters

为那些有兴趣开始使用错误赏金的人提供的资源列表

disclose /diodb

开源漏洞泄露和错误赏金程序数据库

alexbieber /Bug_Bounty_writeups

漏洞赏金文章 - OWASP TOP 10

Mehdi0x90 /Web_Hacking

Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.

ImAyrix /fallparams

Find All Parameters - Tool to crawl pages, find potential parameters and generate a custom target parameter wordlist

codingo /bbr

An open source tool to aid in command line driven generation of bug bounty reports based on user provided templates.

IamLucif3r /Bug-Hunting

A Collection of Notes, Methodologies, POCs and everything else related to Bug Hunting.

kljunowsky /XXElixir

This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.

llamaonsecurity /rio

A handy plugin for copying requests/responses directly from Burp, some extra magic included.

ali-kaptanoglu /bug-bounty

bug bounty

Cloufish /Awesome-Worldwide-ITSecurity-Specialists

This repo is for people that are searching for IT Security Specialists in their native language, or for people that are language learners and just want to immerse more!

codie-shiv /URL-Responder

A handy tool for bug bounty hunters/pentesters to check the http status codes of all the links/URLs collectively

b0dj0x /domainghost

domainghost by b0dj0x

nn0z /IDOR-Scanner

Automated web security testing tool designed to detect Insecure Direct Object References (IDOR) vulnerabilities in web applications

Kalyan-Deva /Bounty-Hawk

A local-first AppSec and bug bounty workspace that combines reconnaissance, endpoint discovery, vulnerability scanning, screenshots, evidence tracking, and reporting through a unified dashboard.

Con2010 /Bug-Bounty-Hunter

A highly automated and modular bug bounty reconnaissance toolkit integrating over 15 industry-standard tools for streamlined subdomain enumeration, vulnerability detection, and OSINT gathering. Designed for efficiency, scalability, and precision in real-world security assessments.

shyam-achuthan /domain-recon-suite

All-in-one Dockerized recon toolkit for security researchers — combines Subfinder, Sublist3r, MassDNS, dnsx, Assetfinder, and Nmap for comprehensive domain and subdomain intelligence gathering.

mrdineshpathro-dot /DNScope

DNScope is an advanced DNS attack-surface intelligence toolkit for security research and authorized bug bounty testing. Analyze DNS records, DNSSEC, email security, subdomains, certificates, RDAP, IP/ASN, cloud infrastructure, threat intelligence, historical changes, monitoring, and reports.

grassmann-it /librebugbounty

Self-hosted bug bounty workspace for reflected XSS: URL intake, automated rechecks, Playwright screenshot evidence, manual triage, statistics, and disclosure-ready exports. Local-first, PHP/Symfony + SQLite.

Security-Talent /GitHunter

Offline, Local-First Security Research Version Control CLI