BugBountyHunting.com is a community-curated resource that collects writeups, resources and content related to bug bounty hunting, described as a bug bounty hunting search engine. It aims to help beginners starting in web application security learn more about bug bounty hunting.
Directory
Search results
Published directory entries matching your search.
Open Bug Bounty is a developer resource for coding, documentation, communities, security research, or software tools.
3F Mutual supports crypto risk protection, bug bounties, coverage, or security review workflows.
Hats.Finance supports crypto risk protection, bug bounties, coverage, or security review workflows.
Immunefi supports crypto risk protection, bug bounties, coverage, or security review workflows.
Nexus Mutual supports crypto risk protection, bug bounties, coverage, or security review workflows.
Sherlock is a web3 security platform that combines private audits, audit contests, AI-assisted analysis and bug bounties. It describes an audit engine that coordinates AI security approaches into one validated result, and collaborative audits staffed by security researchers. The site states it has conducted over 1,000 audits and reports more than 11,000 security researchers.
byp4xx is an open source security tool written in the Go programming language, intended for bypassing 40X HTTP status responses during web testing. Its features include HTTP verb tampering, custom header modification, User-Agent switching, extension handling, and testing of default credentials, with resources relevant to bug bounty workflows.
Dorks-collections-list is a GitHub repository that compiles lists of dorks for various search engines and services. It includes categories such as Google, Shodan, Censys, VirusTotal, and many others, providing links to external repositories and articles. The collection supports cybersecurity activities including OSINT, penetration testing, and bug bounty hunting. It is maintained by the user cyb_detective.
Index Coop provides DeFi tools for automated yield and leverage, including leverage tokens and Smart Loops, which are described as high-yield tokens powered by automated looping strategies. The project states that its contracts are open source and that it runs a bug bounty program.
SiteDorks is an open-source Python tool that automates search engine dork queries across Google, Bing, Ecosia, DuckDuckGo, Yandex and Yahoo. It includes default lists of 638 categorized dorkable websites and bug bounty programs, supports custom site lists, and allows query splitting for search engines with character limits. The tool is designed for reconnaissance, penetration testing and security research tasks.