Open source bugbounty projects
Every project in the registry tagged bugbounty, ranked by real GitHub adoption.
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data corr
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
A Modern Orchestration Engine for Security
💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and w
Knock Subdomain Scan
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
Automated NoSQL database enumeration and web application exploitation tool.
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
403/401 bypass tool: finds HTTP access-control bypasses via path, method, header and raw-request mutations. Baseline diff, auto-calibration, replayable curl evi
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Bu
GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the
Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE,CVE,MITRE ATT&CK,PCI DSS, import Nmap/Nessus/Burp/
Related tags
Frequently asked questions
How many open source bugbounty projects are there?
This registry tracks 15 projects tagged bugbounty, with 132,348 GitHub stars between them. The most-adopted is PayloadsAllTheThings at 82,315 stars.
Are these bugbounty projects free to use?
Yes — 15 of the 15 carry an explicit open-source licence across 4 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.
Which bugbounty project should I choose?
The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.
Are these bugbounty projects still maintained?
12 of the 15 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.