# 0xmaximus/Galaxy-Bugbounty-Checklist

Tips and Tutorials for Bug Bounty and also Penetration Tests.

Repository: https://github.com/0xmaximus/Galaxy-Bugbounty-Checklist
Canonical: https://ross.abutalabs.com/products/galaxy-bugbounty-checklist
License Family: other
Topics: bugbounty, bug, hackerone, bugbountytricks, bugbounty-tool, bugbountytips, bugbounty-reports, bugbounty-checklist, bugcrowd, bugs, ethical-hacking, ethical-hacker, red-team, red-teaming, vulnerabilities, vulnerability
Last push: 2025-10-07T14:03:50+00:00

## Health v2 (maintenance only)
Score: 52/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 45, release rhythm 35, longevity 100
- inputs: {"age_days": 1919, "days_push": 330, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2115, forks 449 (observed 2026-08-28T04:06:16.093134+00:00)

## What it is
A curated collection of checklists, tips, and tutorials for bug bounty hunting and penetration testing. It organizes attack techniques (e.g., account takeover, CSRF bypass, request smuggling, OAuth) with references for each checklist.

## Use cases
- find a checklist for bug bounty recon
- learn common web vulnerability exploitation techniques
- prepare a methodology for a pentest engagement
- study account takeover and OAuth attack patterns
- get references for writing bug bounty reports
- brush up on red teaming tips

## When to choose
- you need structured, reference-backed checklists for bug bounty or pentest work
- you are learning ethical hacking and want curated technique summaries

## When to avoid
- you need an executable scanning or exploitation tool rather than documentation
- you require formally licensed or audited security methodology content

## Facets
- artifact type: learning-resource
- maturity: active
- function: security, penetration-testing, osint, documentation
- domain: security, penetration-testing, awesome-lists, tutorials
- platform: -
- tags: bug-bounty, checklist, hackerone, bugcrowd, red-team, ethical-hacking, vulnerabilities, curated-list, web-server

## Member repositories
- 0xmaximus/Galaxy-Bugbounty-Checklist (main) score 52

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:16.093134+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:53:21.048636+00:00, confidence not recorded.
  - readme: https://github.com/0xmaximus/Galaxy-Bugbounty-Checklist (fetched 2026-08-28T04:06:16.093134+00:00, sha 431ebffac687)
- Data as of 2026-08-30T08:39:29.467469+00:00.