Data / Repositories / Bugbounty
Bugbounty repositories on GitHub: 13 ranked by stars
13 public repositories tagged Bugbounty are on GitHub, with 47,658 stars between them; 7 had a push in the last 30 days. Most are written in Python (2), Rust (2), Shell (1). The most starred: maurosoria/dirsearch (14,951), six2dez/reconftw (8,178), vavkamil/awesome-bugbounty-tools (6,300).
SpecStream is the live web data engine for teams and agents. It reads open-source repositories on GitHub and keeps what it reads, and this page groups that reading by topic. Ask for the repositories you track by topic, language, license or activity, and new ones and changes arrive in your sheet, CRM, Slack or agent.
Every repository, most starred first
| Repository | What it is | Language | Stars | Forks | License | Last push | Read |
|---|---|---|---|---|---|---|---|
| maurosoria/dirsearch | Web path scanner | Python | 14,951 | 2,453 | Oct 7 | Oct 14 | |
| six2dez/reconftw | reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities | Shell | 8,178 | 1,240 | MIT | Sep 26 | Oct 11 |
| vavkamil/awesome-bugbounty-tools | A curated list of various bug bounty tools | 6,300 | 1,009 | CC0-1.0 | Oct 6 | Oct 11 | |
| hahwul/dalfox | Dalfox is a powerful open-source XSS scanner and utility focused on automation. | Rust | 5,325 | 568 | MIT | Oct 14 | Oct 14 |
| hahwul/WebHackersWeapons | Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting | Ruby | 5,088 | 854 | MIT | Sep 7 | Oct 11 |
| Ge0rg3/requests-ip-rotator | A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing. | Python | 1,679 | 173 | GPL-3.0 | Jul 13 | Sep 21 |
| six2dez/burp-ai-agent | Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more | Kotlin | 1,542 | 228 | MIT | Oct 13 | Oct 14 |
| taielab/awesome-hacking-lists | A curated collection of top-tier penetration testing tools and productivity utilities across multiple domains. Join us to explore, contribute, and enhance your hacking toolkit! | 1,393 | 268 | Dec 4, 2025 | Oct 11 | ||
| hahwul/jwt-hack | JSON Web Token Hack Toolkit | Rust | 1,086 | 131 | MIT | Oct 8 | Oct 8 |
| aw-junaid/Hacking-Tools | This Repository is a collection of different ethical hacking tools and malware's for penetration testing and research purpose written in python, ruby, rust, c++, go and c. | C | 1,034 | 261 | Aug 19 | Oct 11 | |
| Puliczek/awesome-mcp-security | Awesome MCP (Model Context Protocol) Security | 743 | 274 | Mar 3 | Oct 14 | ||
| appsecco/vulnerable-mcp-servers-lab | A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers. | JavaScript | 279 | 57 | MIT | Dec 18, 2025 | Oct 14 |
| ejfkdev/dj | dj - Dynamic JS File Extractor - intelligently detects dynamically loaded JavaScript files by statically analyzing website HTML and JS code | Go | 60 | 4 | MPL-2.0 | Sep 28 | Oct 14 |
Related topics
- Security 9
- Hacking 7
- Pentesting 5
- Awesome list 4
- MCP 4
- Bug bounty 3
- Security tools 3
- Web security 3
- MCP server 3
- Penetration testing 2
- Python 2
- Osint 2
Read from GitHub by SpecStream between September 21, 2026 and October 14, 2026; each row shows the day its repository was read. Stars and pushes change every day, and the GitHub page is the current one. Forks and archived repositories are left out.