Awesome

GitHub projects from awesome lists

Search awesome repositories

Search names, descriptions, topics, tags, and stacks, then tune results by ecosystem, freshness, health, and cross-list signal.

Continue with GitHub Browse awesome lists Request a list

Repos indexed: 17,373
Awesome lists tracked: 125
Current results: 18

Find repositories

Start broad, then narrow by ecosystem, freshness, health, and growth.

Clear 1 refinement

Search repositories

Search mode

Keyword Semantic

Tune results

The controls most people need first.

Awesome list

Language

Freshness

Sort

Direction

More filters Topics, generated tags, stack, files, age, archive status, and growth.

Ecosystem

GitHub topic

Generated tag

Framework or stack

Package manager

Files

Has file

Choose a suggestion or use commas to require multiple files.

Health

Minimum stars

Repository age

Uses known first-commit dates.

Archive status

AI development signals

Momentum

Unmaintained for

Commit velocity

Star growth

Reset filters

18 repos shown

Topic: bugbounty

Browse

Highlighted

Open highlighted repo slot

Put your repository first

Promote a GitHub repo at the top of Awesome repository list views for 7 days.

swisskyrepo/PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Stack

Python

GitHub topics

#bounty #bugbounty #bypass #cheatsheet #enumeration #hacking

Updated: 2026-06-19
Lists: 3 list mentions
First commit: 2016-10-18
History: 3 history points
License: MIT
Issues: Disabled

79,048

stars

Forks: 17,161
Commits: 2,191 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

projectdiscovery/subfinder

Fast passive subdomain enumeration tool.

Stack

Go gRPC Go Go modules

GitHub topics

#bugbounty #hacking #hacktoberfest #osint #reconnaissance #subdomain-enumeration

Updated: 2026-07-08
Lists: 3 list mentions
First commit: 2018-03-31
History: 4 history points
License: MIT
Issues: 8 open

13,985

stars

Forks: 1,572
Commits: 2,216 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

OWASP/wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

GitHub topics

#application-security #appsec #best-practices #bugbounty #guide #hacking

Updated: 2026-06-30
Lists: 1 list mention
First commit: 2017-05-14
History: 2 history points
License: CC-BY-SA-4.0
Issues: 41 open

9,554

stars

Forks: 1,641
Commits: 1,241 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

six2dez/reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

AI dev

Stack

Shell

GitHub topics

#bug-bounty #bugbounty #bugbounty-tool #dns #hacking #nuclei

Updated: 2026-06-29
Lists: 2 list mentions
First commit: 2020-12-30
History: 2 history points
License: MIT
Issues: 2 open

7,755

stars

Forks: 1,197
Commits: 2,363 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

EdOverflow/bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

GitHub topics

#bugbounty #infosec #payloads #security

Updated: 2023-09-14
Lists: 1 list mention
First commit: 2017-07-13
History: 2 history points
License: CC-BY-SA-4.0
Issues: 11 open

6,505

stars

Forks: 1,615
Commits: 230 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

j3ssie/osmedeus

A Modern Orchestration Engine for Security

AI dev

Stack

Go Cobra gRPC Go Go modules

GitHub topics

#agentic-ai #attack-surface-management #bugbounty #go #hacking #hacking-tool

Updated: 2026-06-01
Lists: 1 list mention
First commit: 2026-01-18
History: 2 history points
License: MIT
Issues: 8 open

6,465

stars

Forks: 1,015
Commits: 121 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

devanshbatham/Awesome-Bugbounty-Writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

Stack

Python

GitHub topics

#bugbounty #bugbounty-blogs #bugbounty-facebook #bugbounty-writeups #bugbounty-yahoo #bugbountytips

Updated: 2023-08-06
Lists: 1 list mention
First commit: 2020-05-04
History: 2 history points
License: Unknown
Issues: 12 open

6,018

stars

Forks: 1,207
Commits: 59 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

guelfoweb/knockpy

Knock Subdomain Scan

Stack

Python pip

GitHub topics

#bugbounty #knockpy #penetration-testing #security #subdomain #subdomain-enumeration

Updated: 2026-02-19
Lists: 1 list mention
First commit: 2014-02-11
History: 2 history points
License: GPL-3.0
Issues: 71 open

4,169

stars

Forks: 882
Commits: 116 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

codingo/NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.

Stack

Python pip

GitHub topics

#bugbounty #couchdb #databases #enumeration #hacking #hacking-tool

Updated: 2026-02-20
Lists: 1 list mention
First commit: 2013-09-24
History: 2 history points
License: GPL-3.0
Issues: 0 open

3,311

stars

Forks: 625
Commits: 304 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

HolyBugx/HolyTips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

GitHub topics

#api #api-security #bugbounty #bugbounty-writeups #bugbountytips #checklist

Updated: 2021-09-05
Lists: 1 list mention
First commit: 2021-03-21
History: 2 history points
License: GPL-3.0
Issues: 0 open

2,014

stars

Forks: 335
Commits: 46 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

ptswarm/reFlutter

Flutter Reverse Engineering Framework

Archived

Stack

Python pip

GitHub topics

#bugbounty #mobile-security #reverse-engineering #ssl-pinning

Updated: 2022-04-11
Lists: 1 list mention
First commit: 2021-09-29
History: 2 history points
License: GPL-3.0
Issues: 80 open

1,462

stars

Forks: 188
Commits: 282 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

codingo/VHostScan

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

Stack

Python pytest PEP 517 pip

GitHub topics

#bugbounty #ctf-tools #discovery-service #hacking #hacking-tool #hackthebox

Updated: 2025-08-18
Lists: 1 list mention
First commit: 2017-09-03
History: 2 history points
License: GPL-3.0
Issues: 1 open

1,306

stars

Forks: 239
Commits: 347 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

khast3x/Redcloud

Automated Red Team Infrastructure deployement using Docker

Stack

Python pip

GitHub topics

#bugbounty #docker #hacking #kali #metasploit #offensive

Updated: 2022-08-24
Lists: 1 list mention
First commit: 2019-03-10
History: 2 history points
License: MIT
Issues: 7 open

1,278

stars

Forks: 205
Commits: 79 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

bl4de/security-tools

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

Stack

Python

GitHub topics

#bug-bounties #bug-bounty #bugbounty #ctf #ctf-tools #hacking

Updated: 2026-04-22
Lists: 1 list mention
First commit: 2014-08-19
History: 2 history points
License: MIT
Issues: 2 open

922

stars

Forks: 182
Commits: 857 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

aaaguirrep/offensive-docker

Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.

Stack

Dockerfile

GitHub topics

#bug-bounty #bugbounty #ctf-tools #hacking #hacking-tools #htb

Updated: 2022-03-11
Lists: 1 list mention
First commit: 2020-02-25
History: 2 history points
License: MIT
Issues: 2 open

768

stars

Forks: 160
Commits: 106 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

Cgboal/SonarSearch

A rapid API for the Project Sonar dataset

Stack

Go Gin gRPC Go Go modules

GitHub topics

#bugbounty #dns #enumeration #osint #osint-tool #penetration-testing

Updated: 2023-05-05
Lists: 1 list mention
First commit: 2020-03-10
History: 4 history points
License: MIT
Issues: 28 open

655

stars

Forks: 95
Commits: 83 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

appsecco/vulnerable-mcp-servers-lab

A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers.

Stack

JavaScript Express npm

GitHub topics

#ai-red-teaming #ai-research #appsecco #bugbounty #hacking #learning-pentesting

Updated: 2025-12-18
Lists: 1 list mention
First commit: 2025-12-18
History: 2 history points
License: MIT
Issues: 1 open

264

stars

Forks: 52
Commits: 12 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

bl4de/research

Bug Bounty writeups, Vulnerability Research, Tutorials, Tips&Tricks

Stack

JavaScript

GitHub topics

#bugbounty #burp #burpsuite #hacking #itsecurity #javascript

Updated: 2024-08-07
Lists: 1 list mention
First commit: 2015-12-12
History: 2 history points
License: Unknown
Issues: Disabled

211

stars

Forks: 46
Commits: 300 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

Search awesome repositories

Find repositories

Put your repository first

How it works

Pricing

How it works

Pricing