SaaSHub helps you find the best software and product alternatives Learn more →
Top 23 Python Bugbounty Projects
-
PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
if you've never worked on SQL injection that's fine there is a PWNSOME REPOSITORY(get it? pwn + awesome) called[ Payload All The Things (https://github.com/swisskyrepo/PayloadsAllTheThings) it has different payloads for different web vulnerabilities.
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
-
-
-
DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️
-
-
-
Awesome-Bugbounty-Writeups
A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference
-
Project mention: Commix: Your New Secret Weapon for Command Injection Vulnerability Hunting | dev.to | 2025-08-30
View the Project on GitHub
-
can-i-take-over-xyz
"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
-
malicious-pdf
💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh
-
-
-
requests-ip-rotator
A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.
-
Interlace
Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.
-
-
-
-
-
-
-
-
Dome
Dome - Subdomain Enumeration Tool. Fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports. (by v4d1)
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Python Bugbounty discussion
Python Bugbounty related posts
-
Show HN: WP-Hunter, WP recon and SAST tool (building Agentic AI pipeline)
-
dnsvalidator VS dnsanity - a user suggested alternative
2 projects | 23 Oct 2025 -
dnsvalidator VS dnsanity - a user suggested alternative
2 projects | 30 Sep 2025 -
🐞 Comprehensive Bug Bounty Hunting Methodology
-
Script kiddie tools preferred by the hackers of this channel?
-
MobSecco: A tool for Cloning apk for bypassing code tampering detection, Google Safety Net and scanning vulnerable plugins
-
ParaForge: A BurpSuite extension to create a custom word list of endpoints and parameters for enumeration and fuzzing
-
A note from our sponsor - SaaSHub
www.saashub.com | 9 Jun 2026
Index
What are some of the best open-source Bugbounty projects in Python? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | PayloadsAllTheThings | 78,176 |
| 2 | dirsearch | 14,328 |
| 3 | bbot | 9,836 |
| 4 | OneForAll | 9,821 |
| 5 | DefaultCreds-cheat-sheet | 6,589 |
| 6 | hackerone-reports | 6,216 |
| 7 | apkleaks | 6,092 |
| 8 | Awesome-Bugbounty-Writeups | 5,775 |
| 9 | commix | 5,749 |
| 10 | can-i-take-over-xyz | 5,645 |
| 11 | malicious-pdf | 3,706 |
| 12 | pagodo | 3,343 |
| 13 | reFlutter | 2,637 |
| 14 | requests-ip-rotator | 1,658 |
| 15 | Interlace | 1,289 |
| 16 | FavFreak | 1,283 |
| 17 | Redcloud | 1,272 |
| 18 | subscraper | 939 |
| 19 | emploleaks | 774 |
| 20 | JSshell | 632 |
| 21 | CRLFsuite | 594 |
| 22 | basecrack | 584 |
| 23 | Dome | 540 |
Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com