ngalongc/bug-bounty-reference resource

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

4256 stars · 1024 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

A curated list of publicly disclosed bug bounty write-ups organized by vulnerability type such as XSS, SQLi, SSRF, and IDOR. It serves as a reference for bug bounty hunters seeking exploitation insights for specific vulnerability classes.

Use cases

• find write-ups for exploiting a specific vulnerability type like SSRF or XXE
• learn how researchers exploited OAuth flaws in real bug bounty reports
• study real-world examples of stored XSS in major companies
• research techniques for exploiting race conditions or business logic flaws
• prepare for bug bounty hunting by reading disclosed reports

When to choose

• you need real-world exploitation examples for a particular bug class
• you are a bug bounty hunter looking for reference material during hunting
• you want to learn offensive security through disclosed write-ups

When to avoid

• you need a scanning or exploitation tool rather than reading material
• you want structured courses or tutorials rather than links to blog posts

Facets

learning-resource · maturity maintenance

security documentation developer-tools security penetration-testing tutorials awesome-lists bug-bounty write-ups vulnerability-research curated-list offensive-security web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="ngalongc/bug-bounty-reference")