Top #bug Tools & Software

Awesome-Hacking

github

A collection of various awesome lists for hackers, pentesters and security researchers

PayloadsAllTheThings

github

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

dirsearch

github

Web path scanner

awesome-hacker-search-engines

github

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

Sn1per

github

Attack Surface Management Platform

bbot

github

The recursive internet scanner for hackers. 🧡

wstg

github

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

reconftw

github

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

AllAboutBugBounty

github

All about bug bounty (bypasses, payloads, and etc)

osmedeus

github

A Modern Orchestration Engine for Security

DeepAudit

github

DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。国内首个开源的代码漏洞挖掘多智能体系统。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。​让安全不再昂贵，让审计不再复杂。

mirrord

github

Connect your local process and your cloud environment, and run local code in cloud conditions.

dalfox

github

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

Chronos

github

Kodezi Chronos is a debugging-first language model that achieves state-of-the-art results on SWE-bench Lite (80.33%) and 67% real-world fix accuracy, over six times better than GPT-4. Built with Adaptive Graph-Guided Retrieval and Persistent Debug Memory. Model available Q1 2026 via Kodezi OS.

WebHackersWeapons

github

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

black-hat-rust

github

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

interactsh

github

An OOB interaction gathering server and client library

HyperDbg

github

State-of-the-art native debugging tools

Fuzzing101

github

An step by step fuzzing tutorial. A GitHub Security Lab initiative

pentest-tools

github

A collection of custom security tools for quick needs.

awesome-game-security

github

awesome game security [Welcome to PR]

FBI-tools

github

🕵️ OSINT Tools for gathering information and actions forensics 🕵️

31-days-of-API-Security-Tips

github

This challenge is Inon Shkedy's 31 days API Security Tips.