Bugbounty GitHub Repositories (2026) · Open Source Tools

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Fast passive subdomain enumeration tool.

An OOB interaction gathering server and client library

AKCA Advanced Web Security Scanner

Flutter Reverse Engineering Framework

⚔️ Community maintained directory, MCP and API of 3,000+ active bug bounty programs and VDPs

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

The recursive internet scanner for hackers. 🧡

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

Quickly discover exposed hosts on the internet using multiple search engines.

Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more

80k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒

A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.

Community curated list of search queries for various products across multiple search engines.

ScanT3r - Module based Bug Bounty Automation Tool ( use Lotus instead github.com/bugBlocker/lotus )

Passive leak enumeration tool.

Little Bug Bounty & Hacking Tools⚔️

Autonomous AI-powered security scanner — multi-agent vulnerability detection, exploitation, and validation engine