Convert Figma logo to code with AI

djadmin logoawesome-bug-bounty

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

4,540
906
4,540
14

Top Related Projects

A list of resources for those interested in getting started in bug bounties

A list of interesting payloads, tips and tricks for bug bounty hunters.

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

A collection of various awesome lists for hackers, pentesters and security researchers

Quick Overview

The "awesome-bug-bounty" repository is a curated list of bug bounty programs and resources for security researchers and ethical hackers. It provides a comprehensive collection of platforms, tools, and educational materials related to bug bounty hunting and vulnerability disclosure.

Pros

  • Extensive collection of bug bounty programs and platforms
  • Regularly updated with new resources and information
  • Well-organized and categorized for easy navigation
  • Includes educational materials and learning resources for beginners

Cons

  • May be overwhelming for newcomers due to the large amount of information
  • Some listed resources or programs may become outdated over time
  • Lacks detailed explanations or reviews of individual resources
  • Does not provide step-by-step guides for participating in bug bounty programs

Note: As this is not a code library, the code examples and getting started instructions sections have been omitted.

Competitor Comparisons

A list of resources for those interested in getting started in bug bounties

Pros of Resources-for-Beginner-Bug-Bounty-Hunters

  • More beginner-friendly with structured learning paths
  • Includes practice labs and CTF resources
  • Offers a curated list of YouTube channels and streamers

Cons of Resources-for-Beginner-Bug-Bounty-Hunters

  • Less comprehensive in terms of tools and platforms
  • Fewer links to specific vulnerability types and techniques
  • Not as frequently updated as awesome-bug-bounty

Code Comparison

While both repositories primarily consist of markdown files with lists of resources, Resources-for-Beginner-Bug-Bounty-Hunters includes some basic HTML for better organization:

Resources-for-Beginner-Bug-Bounty-Hunters:

<details>
  <summary>Mobile Hacking</summary>

- [Android App Reverse Engineering 101](https://www.evilsocket.net/2017/04/27/Android-Applications-Reversing-101/)
- [iOS Application Security Review Methodology](http://www.sans.org/reading-room/whitepapers/testing/ios-application-security-review-methodology-34577)
</details>

awesome-bug-bounty:

## Mobile Hacking
* [Android App Reverse Engineering 101](https://www.evilsocket.net/2017/04/27/Android-Applications-Reversing-101/)
* [iOS Application Security Review Methodology](http://www.sans.org/reading-room/whitepapers/testing/ios-application-security-review-methodology-34577)

Both repositories serve as valuable resources for bug bounty hunters, with awesome-bug-bounty offering a more comprehensive list of tools and platforms, while Resources-for-Beginner-Bug-Bounty-Hunters provides a more structured approach for newcomers to the field.

A list of interesting payloads, tips and tricks for bug bounty hunters.

Pros of bugbounty-cheatsheet

  • More focused and concise content, specifically tailored for bug bounty hunters
  • Includes practical cheat sheets and payloads for various vulnerability types
  • Regularly updated with community contributions

Cons of bugbounty-cheatsheet

  • Less comprehensive in terms of overall resources and tools
  • Lacks categorization of platforms, programs, and write-ups found in awesome-bug-bounty
  • May be more challenging for beginners due to its technical nature

Code Comparison

bugbounty-cheatsheet:

## Cross-Site Scripting (XSS)

```javascript
<script>alert('XSS')</script>
<scr<script>ipt>alert('XSS')</scr<script>ipt>
"><script>alert('XSS')</script>

awesome-bug-bounty:

## Platforms

- [HackerOne](https://hackerone.com/)
- [Bugcrowd](https://www.bugcrowd.com/)
- [Intigriti](https://www.intigriti.com/)

The code comparison shows that bugbounty-cheatsheet focuses on providing specific payloads and examples, while awesome-bug-bounty offers a more comprehensive list of resources and platforms. Both repositories serve different purposes within the bug bounty ecosystem, with bugbounty-cheatsheet being more hands-on and awesome-bug-bounty offering a broader overview of the field.

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

Pros of bug-bounty-reference

  • More detailed and categorized information on specific vulnerabilities
  • Includes write-ups and case studies for real-world examples
  • Provides a comprehensive list of tools for bug bounty hunting

Cons of bug-bounty-reference

  • Less frequently updated compared to awesome-bug-bounty
  • Focuses more on technical details, which may be overwhelming for beginners
  • Lacks some broader resources like bug bounty platforms and general guides

Code comparison

While both repositories are primarily curated lists of resources, they don't contain significant code. However, here's a comparison of their README structures:

awesome-bug-bounty:

# awesome-bug-bounty
A comprehensive curated list of Bug Bounty Programs and write-ups.

## Table of Contents
- [Bug Bounty Platforms](#bug-bounty-platforms)
- [List of Programs](#list-of-programs)

bug-bounty-reference:

# Bug Bounty Reference

A list of bug bounty write-up that is categorized by the bug nature, this is inspired by https://github.com/djadmin/awesome-bug-bounty

## Introduction

Both repositories use similar Markdown structures, but bug-bounty-reference focuses more on categorizing vulnerabilities, while awesome-bug-bounty provides a broader overview of bug bounty resources.

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

Pros of Awesome-Bugbounty-Writeups

  • Focuses specifically on detailed bug bounty writeups, providing in-depth case studies
  • Organized by vulnerability types, making it easier to find relevant examples
  • Includes a section on mobile app security, which is not present in awesome-bug-bounty

Cons of Awesome-Bugbounty-Writeups

  • Less comprehensive in terms of general bug bounty resources and tools
  • Fewer categories and subcategories compared to awesome-bug-bounty
  • May not be updated as frequently as awesome-bug-bounty

Code Comparison

While both repositories are primarily curated lists of resources, they don't contain significant code. However, the structure of their README files differs:

Awesome-Bugbounty-Writeups:

## SQL Injection
- [SQL Injection on API Parameter](link)
- [Blind SQL Injection on Forgot Password Function](link)

awesome-bug-bounty:

### Tools
* [SubFinder](https://github.com/subfinder/subfinder) - SubFinder is a subdomain discovery tool that discovers valid subdomains for websites.
* [Amass](https://github.com/OWASP/Amass) - In-depth Attack Surface Mapping and Asset Discovery

The main difference is that Awesome-Bugbounty-Writeups focuses on categorizing writeups, while awesome-bug-bounty organizes various resources including tools, platforms, and learning materials.

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

Pros of KingOfBugBountyTips

  • More focused on practical tips and techniques for bug bounty hunting
  • Includes specific tools and commands for various vulnerability types
  • Regularly updated with new content and resources

Cons of KingOfBugBountyTips

  • Less structured organization compared to awesome-bug-bounty
  • May be overwhelming for beginners due to the abundance of technical information
  • Lacks comprehensive categorization of resources

Code Comparison

KingOfBugBountyTips often includes specific command examples:

subfinder -d target.com -silent | httpx -silent | nuclei -t nuclei-templates -o result.txt

awesome-bug-bounty typically provides links to resources rather than code snippets:

- [The Bug Hunters Methodology](https://github.com/jhaddix/tbhm) - A community-driven guide to finding bugs

Summary

KingOfBugBountyTips is a more hands-on resource with practical tips and tools for active bug bounty hunters. It offers specific commands and techniques but may be less organized. awesome-bug-bounty provides a well-structured collection of resources, making it more suitable for beginners and as a reference guide. The choice between the two depends on the user's experience level and specific needs in bug bounty hunting.

A collection of various awesome lists for hackers, pentesters and security researchers

Pros of Awesome-Hacking

  • Broader scope covering various hacking topics beyond bug bounties
  • More extensive list of resources and tools
  • Regularly updated with new content and contributions

Cons of Awesome-Hacking

  • Less focused on bug bounty programs specifically
  • May be overwhelming for beginners due to the vast amount of information
  • Some links may be outdated or less relevant for bug bounty hunters

Code Comparison

While both repositories are primarily curated lists of resources, they don't contain significant code samples. However, here's a comparison of their README structures:

Awesome-Bug-Bounty:

# awesome-bug-bounty
A comprehensive curated list of Bug Bounty Programs and write-ups.

## Table of Contents
- [Bug Bounty Platforms](#bug-bounty-platforms)
- [Bug Bounty Write-ups](#bug-bounty-write-ups)

Awesome-Hacking:

# Awesome-Hacking

A collection of awesome lists for hackers, pentesters & security researchers.

## Table of Contents
 - [System](#system)
 - [Reverse Engineering](#reverse-engineering)
 - [Web](#web)

Both repositories use similar Markdown structures, but Awesome-Hacking covers a wider range of topics in its table of contents.

Convert Figma logo designs to code with AI

Visual Copilot

Introducing Visual Copilot: A new AI model to turn Figma designs to high quality code using your components.

Try Visual Copilot

README

Awesome Bug Bounty Awesome

A comprehensive curated list of Bug Bounty Programs and write-ups from the Bug Bounty hunters.

Table of Contents

Getting Started

Write Ups & Authors

Platforms

Available Programs

Aggregators

License

CC0

To the extent possible under law, Dheeraj Joshi has waived all copyright and related or neighboring rights to this work.