PyPI
blacklanternsecurity/bbot
The recursive internet scanner for hackers. 🧡
AGPL-3.0Sep 17, 2026 · metrics 2.10.0
All tags
Catalogue tag
#bugbounty
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
26 records
Go
projectdiscovery/httpx
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
MITAug 28, 2026 · metrics 2.10.0
Go
projectdiscovery/subfinder
Fast passive subdomain enumeration tool.
MITOct 19, 2026 · metrics 2.10.0
—
projectdiscovery/nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
MITAug 27, 2026 · metrics 2.10.0
crates.io
hahwul/dalfox
🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.
MITSep 27, 2026 · metrics 2.10.0
Go
projectdiscovery/interactsh
An OOB interaction gathering server and client library
MITSep 20, 2026 · metrics 2.10.0
PyPI · crates.io
maurosoria/dirsearch
Web path scanner
No licenseOct 19, 2026 · metrics 2.10.0
RubyGems
0dayInc/pwn
PWN is an open security automation framework that aims to stand on the shoulders of security giants, promoting trust and innovation.
MITSep 5, 2026 · metrics 2.10.0
Go
RAJANAGORI/Nightingale
Nightingale Docker for Pentesters is a comprehensive Dockerized environment tailored for penetration testing and vulnerability assessment. It comes preconfigured with all essential tools and utilities required for efficient Vulnerability Assessment and Penetration Testing (VAPT), streamlining the setup process for security professionals.
GPL-3.0Sep 16, 2026 · metrics 2.10.0
—
hahwul/gori
A fast, keyboard-driven HTTP intercepting proxy and hacking & pentesting toolkit for the terminal.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
vflame6/leaker
Passive leak enumeration tool.
MITSep 18, 2026 · metrics 2.10.0
Go · npm
Autumn-27/ScopeSentry
ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes
No licenseSep 18, 2026 · metrics 2.10.0
—
caido/caido
🚀 Caido releases, wiki and roadmap
No licenseSep 14, 2026 · metrics 2.10.0
PyPI
Ge0rg3/requests-ip-rotator
A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.
GPL-3.0Sep 16, 2026 · metrics 2.10.0
—
momenbasel/keyFinder
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
MITSep 14, 2026 · metrics 2.10.0
Go
ejfkdev/dj
dj - Dynamic JS File Extractor - intelligently detects dynamically loaded JavaScript files by statically analyzing website HTML and JS code
MPL-2.0Sep 16, 2026 · metrics 2.10.0
Go
R0X4R/shodan
A Go alternative for the Shodan Python CLI
MITSep 26, 2026 · metrics 2.10.0
Go · npm
kantilabs/kanti
A web application testing tool built for capturing and modifying http/https requests.
MITSep 19, 2026 · metrics 2.10.0
Go
Grey-Magic/kunji
Universal API key validation engine. Concurrent Go CLI that tests 350+ provider credentials with worker pools, proxy rotation, webhook sinks, and CI gating.
MITSep 10, 2026 · metrics 2.10.0
—
gwen001/vhost-brute
A PHP tool to brute force vhost configured on a server.
MITSep 18, 2026 · metrics 2.10.0
Go
rix4uni/gf
A wrapper around grep, to help you grep for things
MITSep 8, 2026 · metrics 2.10.0
—
spidersuite/SpiderSuite
SpiderSuite (web security crawler) releases, wiki and roadmap
No licenseSep 20, 2026 · metrics 2.10.0
PyPI
aaaguirrep/offensive-docker
Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.
MITSep 16, 2026 · metrics 2.10.0
Go
VictorStaflin/bountytxt-cli
Security.txt (RFC 9116) discovery & grading across domains/subdomains—contacts + bug bounty intel, structured outputs (JSON/YAML/CSV/SARIF).
MITSep 17, 2026 · metrics 2.10.0
crates.io
Sh1Yo/x8
Hidden parameters discovery suite
GPL-3.0Oct 17, 2026 · metrics 2.10.0
—
qBraid/community
Where qBraid users discuss, report bugs and submit feature requests.
MITOct 2, 2026 · metrics 2.10.0