responsible-disclosure 开源项目推荐（185 个）

disclose /diodb

开源漏洞泄露和错误赏金程序数据库

mdpsec /bug-bounty-hunting-prompts

Reusable prompts for a structured, evidence-first bug bounty hunting workflow

lissy93 /bug-bounties

⚔️ Community maintained directory, MCP and API of 3,000+ active bug bounty programs and VDPs

e2sy /jailbreak-archives

A structured, versioned archive of adversarial prompt engineering techniques against Large Language Models — for AI safety research, red-teaming, and defensive hardening.

disclose /dioterms

Open-source vulnerability disclosure policy templates.

angusdevgo /Seep-Tool

CWE-602 客户端鉴权脆弱性白盒审计方法论与纵深防御加固研究框架

ByamB4 /find-cve-agent

CVE hunting harness for Claude Code - 20 skills, 5-agent team, systematic vulnerability research with false positive elimination

trickest /safe-harbour

security.txt collection of most popular world-wide domains

sebastianspicker /tiz0wn

Evidence-first Samsung Tizen TV security research: reversible debloating, firmware analysis, validated Remote PC/CIFS UID-0 injection, and hardening.

zakky8 /llm-jailbreak-taxonomy

Mechanism-grounded taxonomy of 40 LLM jailbreak patterns across 10 categories. 8,000-trial bootstrap evaluation for the June 2026 frontier (Claude Opus 4-8, GPT-5.5, Gemini 3.5, DeepSeek V4). Every citation direct-WebFetch verified; refuted claims documented.

Perkins-Fund /OnlyVulns

A nonprofit, open-source vulnerability disclosure platform built for security researchers.

Kiyogitpy /wardogs-data-docs

Defensive-research reference docs for Wardogs (UE5) game data. Static RE + responsible disclosure.

nerrorsec /Git_Over

Find sites vulnerable to github subdomain takeover

tongriyaotxt /bitcoin-weak-rng-scanner

Exact-model scanners for publicly known weak-RNG Bitcoin wallet vulnerabilities (Milk Sad, Trust Wallet, COLDCARD Mk2/3) plus HNP lattice attack PoC.

MOSTRE /discord-exploit-research

⚠️ Active 0-day exploit allowing any Discord server to be permanently terminated via automated pipeline abuse. Research, attack analysis, and protection guide for server owners. Unpatched as of April 2026.

arduino /arduino-cvd-policy

Coordinated Vulnerability Disclosure Policy

ParraX123 /meta-ai-bug-bounty

🛡️ Discover and analyze critical vulnerabilities in Meta AI's Instagram Group Chat, ensuring robust security through comprehensive testing and reporting.

EverettIsNotDead /wp-security-poc

Automated Bash script to verify WordPress XML-RPC system.multicall vulnerabilities. Designed for responsible disclosure processes to demonstrate bypasses of traditional rate-limiting.

edoardottt /openhands-disclosure

Multiple Command Injection vulnerabilities in openhands <0.62.0 allow an attacker to run arbitrary system commands.

JM00NJ /HPE-Aruba-AOS8-Vulnerabilities

ArubaOS 8.13.2.0 pre-auth attack surface research. XXE+SSRF, ICMP reflection, buffer over-read, hardcoded credentials — all submitted to HPE Bugcrowd, marked N/A. No fixes issued.