vavkamil/awesome-bugbounty-tools

This repository is a curated collection of links to open-source tools used in bug bounty hunting, which is the practice of finding security flaws in websites and software for a reward. It is organized as a reference list rather than a project with its own code. Bug bounty hunters use it to find the right tool for a given task without having to search the internet from scratch. The list is split into three broad areas. The first covers reconnaissance, which is the process of mapping out a target before looking for weaknesses. Tools here handle tasks like finding subdomains (other parts of a website), scanning for open ports, taking screenshots of web pages, discovering hidden directories, and identifying what software a site runs on. There are also tools for fuzzing, which means sending unexpected or random input to see how a system reacts. The second area covers exploitation, which is the step where a hunter tries to confirm that a suspected weakness is real. Each subsection corresponds to a known category of web security flaw: SQL injection, cross-site scripting, server-side request forgery, request smuggling, open redirects, and others. The tools listed under each category automate or assist with testing for that specific type of issue. The third area is miscellaneous and contains tools for tasks that do not fit neatly into the other two groups: searching for exposed secrets or passwords in source code, finding misconfigured cloud storage buckets, testing JSON web tokens, looking for subdomain takeovers, scanning for known vulnerabilities, and intercepting web traffic. The README does not explain how bug bounty hunting works in depth, nor does it compare the listed tools to one another. It is a starting point for people who already know what they are looking for. The full README is longer than what was shown.