Skip to content
#

bug-bounty

Star

A bug bounty program is a deal offered by many websites, organizations and software developers by which individuals can receive recognition and compensation for reporting bugs, especially those pertaining to security exploits and vulnerabilities.

Here are 40 public repositories matching this topic...

Language: TypeScript
Filter by language
All 1,468 Python 590 Go 166 Shell 158 JavaScript 83 HTML 55 TypeScript 40 Rust 26 Java 18 PHP 17 C 8
Sort: Most stars
Sort options
Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

CyberStrikeus / CyberStrike

Star 268

AI-powered offensive security agent with 7,300+ actionable security skills. Autonomous pentesting powered by MITRE ATT&CK (2,000+ Atomic tests), CIS Benchmarks (1,500+ controls), OWASP, NIST. Lazy-loading, zero context pollution. Your AI red team.

nist ai mcp owasp cybersecurity penetration-testing bug-bounty web-security pentest appsec offensive-security ethical-hacking red-team security-automation security-tools devsecops mitre-attack cis-benchmarks ai-agent atomic-red-team
  • Updated May 12, 2026
  • TypeScript

Pa55w0rd / google-hacking-assistant

Star 138

🔍 Chrome扩展，为安全研究和渗透测试提供Google/百度/Bing高级搜索语法快捷执行。一键Dorking、批量提取URL、智能过滤黑名单，大幅提升信息收集效率。 🔍 Chrome extension for security research and penetration testing. One-click advanced search (Dorking) on Google/Baidu/Bing, bulk URL extraction, smart blacklist filtering. Boost OSINT efficiency.

chrome-extension osint cybersecurity penetration-testing bug-bounty web-security hacking-tool google-hacking information-gathering security-automation security-tools security-research vulnerability-research dorking baidu-hacking search-hacking
  • Updated Oct 16, 2025
  • TypeScript

0xNayel / MonMon

Star 38

Monitoring Monster (MonMon) is a monitoring tool for bug bounty hunters. It tracks changes across subdomains, HTTP endpoints, shell command output, and bug bounty program scopes. When something changes, you get alerted on Telegram, Discord and others.

automation osint ai monitoring scanner secrets subdomain cheatsheet enumeration penetration-testing vision bug-bounty pentesting recon hunting ai-powered aipowered js-analysis
  • Updated Apr 7, 2026
  • TypeScript
osint-mcp-server

badchars / osint-mcp-server

Sponsor
Star 17

OSINT intelligence MCP server for AI agents — 37 tools, 12 sources. Shodan, VirusTotal, Censys, SecurityTrails, DNS reconnaissance, WHOIS, certificate transparency, BGP routing, Wayback Machine, GeoIP. Automated open source intelligence and attack surface mapping via Model Context Protocol.

dns security censys shodan osint bgp mcp whois penetration-testing certificate-transparency bug-bounty wayback-machine virustotal threat-intelligence reconnaissance attack-surface subdomain-enumeration securitytrails ai-agent model-context-protocol
  • Updated Mar 17, 2026
  • TypeScript

kOaDT / poc-cve-2025-55182

Star 12

This repository contains a POC of CVE-2025-55182, a critical (CVSS score 10.0) pre-authentication remote code execution vulnerability affecting React Server Components, also known as React2Shell.

javascript security typescript exploit reactjs nextjs hacking cybersecurity penetration-testing poc rce bug-bounty vulnerability webdevelopment vulnerability-scanners security-scanner rsc cve-2025-55182 react2shell cve-2025-66478
  • Updated Mar 22, 2026
  • TypeScript
Followers
638 followers
Website
github.com/topics/bugbounty
Wikipedia
Wikipedia

Related topics

penetration-testing pentest pentesting security