Back to rankings

KathanP19/HowToHunt

Collection of methodology and test case for various web vulnerabilities.

vulnerabilitytutorialsbughunting-methodologybugbountybugbountytips
Star Growth
Stars
7.2k
Forks
1.9k
Weekly Growth
โ€”
Issues
4
2k4k6k
Aug 2020Jul 2022Jul 2024Jul 2026
README

HowToHunt

Stars Forks Issues License Contributors

A collection of practical guides, methodologies, and resources for hunting vulnerabilities
From Hackers for Community, because Hacking is not just a skill
Itโ€™s a Mindset

๐Ÿ’ก What is HowToHunt?

HowToHunt is a collaborative repository of step-by-step guides, methodologies, and hands-on techniques for finding specific vulnerabilities. Whether you're a beginner or an experienced hunter, you'll find valuable resources to enhance your bug hunting skills.

Note: This repository aims to provide practical, actionable guides rather than theoretical knowledge. Each guide is contributed by experienced hunters who have successfully used these techniques in the field.

๐Ÿ“– How to Use

For Readers

Visit our GitBook for an organized, searchable reading experience with all the guides properly categorized.

For Contributors

  1. Fork the repository
  2. Create your feature branch (git checkout -b add-new-guide)
  3. Add your guide in the appropriate category folder
  4. Commit your changes (git commit -m 'Add guide for XSS in login forms')
  5. Push to the branch (git push origin add-new-guide)
  6. Open a Pull Request

โ˜• Support the Project

If you find this project helpful and want to show your appreciation:

Buy Me A Coffee

๐Ÿ› ๏ธ Contribution Guidelines

  • Focus on practical, actionable techniques
  • Include real-world examples when possible
  • Provide clear step-by-step instructions
  • Add references to tools, resources, or write-ups that support your guide
  • Please mention your Twitter handle at the end of your guide

๐ŸŒŸ Contributors

Thanks goes to these wonderful people who have shared their knowledge and experience:

Kathan Patel
Kathan Patel

โœ…
Mehedi Hasan Remon
Mehedi Hasan Remon

โœ…
Keshav Malik
Keshav Malik

โœ…
Vivek Kumar Yadav
Vivek Kumar Yadav

โœ…
Syed Mushfik Hasan Tahsin
Syed Mushfik Hasan Tahsin

โœ…
Deepak Dhiman
Deepak Dhiman

โœ…
maverickNerd
maverickNerd

โœ…
Harsha Vardhan
Harsha Vardhan

โœ…
Bishal Shrestha
Bishal Shrestha

โœ…
Cyber-Pirate
Cyber-Pirate

โœ…
Naman Shah
Naman Shah

โœ…
ANUGRAH S R
ANUGRAH S R

โœ…
Aishwarya Kendle
Aishwarya Kendle

โœ…
MadMaxx
MadMaxx

โœ…
Akshaykerkar
Akshaykerkar

โœ…
Shadab Ansari
Shadab Ansari

โœ…
CowlingBanana
CowlingBanana

โœ…
Meet
Meet

โœ…
Tushar
Tushar

โœ…
Chintan Gurjar
Chintan Gurjar

โœ…
praneeth1998
praneeth1998

โœ…
sumitjat
sumitjat

โœ…
Mr_p0tat0
Mr_p0tat0

โœ…
ashhadali10
ashhadali10

โœ…
Nav-Prak
Nav-Prak

โœ…
NoBodysSafe
NoBodysSafe

โœ…
Max Boll
Max Boll

โœ…
Yash K
Yash K

โœ…
febinrev
febinrev

โœ…
fatinsourav
fatinsourav

โœ…
iNoSec2
iNoSec2

โœ…
Manas Harsh
Manas Harsh

โœ…
0xsunil
0xsunil

โœ…
Rakesh
Rakesh

โœ…
Pratyaksh Singh
Pratyaksh Singh

โœ…
Tamim Hasan
Tamim Hasan

โœ…
Pratish58
Pratish58

โœ…
Kalus
Kalus

โœ…
Zero (Arif)
Zero (Arif)

โœ…
Chirag Agrawal
Chirag Agrawal

โœ…
Kushagra Sarathe
Kushagra Sarathe

โœ…
RT
RT

โœ…
Anishka Shukla
Anishka Shukla

โœ…
Ikko Ashimine
Ikko Ashimine

โœ…
Harshit Raj Singh
Harshit Raj Singh

โœ…
Sm4rty-1
Sm4rty-1

โœ…
dipakpanchal456
dipakpanchal456

โœ…
Anubhav Singh
Anubhav Singh

โœ…
Anupam Singh
Anupam Singh

โœ…
Rishi Choudhary
Rishi Choudhary

โœ…
Yasser Khan
Yasser Khan

โœ…
yasser khan
yasser khan

โœ…
Fani Malik Hack
Fani Malik Hack

โœ…
dhruvin shah
dhruvin shah

โœ…
TCode110
TCode110

โœ…
Faizee Asad
Faizee Asad

โœ…
Bikram kharal
Bikram kharal

โœ…
c0ff33b34n
c0ff33b34n

โœ…
Veshraj Ghimire
Veshraj Ghimire

โœ…
TX
TX

โœ…
Krishna Agarwal
Krishna Agarwal

โœ…
z3dc0ps
z3dc0ps

โœ…
Pugalarasan
Pugalarasan

โœ…
Purujeet Singh
Purujeet Singh

โœ…
Vedant
Vedant

โœ…
Ome Mishra
Ome Mishra

โœ…
Suprit Pandurangi
Suprit Pandurangi

โœ…
Pugalarasan
Pugalarasan

โœ…
Prince Prafull
Prince Prafull

โœ…
offensive-droid
offensive-droid

โœ…
Prakhar Porwal
Prakhar Porwal

โœ…
Anmol K Sachan
Anmol K Sachan

โœ…
Related repositories
swisskyrepo/PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PythonPyPIMIT Licensepentestpayload
swisskyrepo.github.io/PayloadsAllTheThings/
79.3k17.2k
aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

GoGo ModulesApache License 2.0securitysecurity-tools
trivy.dev
37k547
The-Art-of-Hacking/h4cker

This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. ๐Ÿ”ฅ Also check: https://hackertraining.org

Jupyter NotebookMIT Licensehackingpenetration-testing
hackerrepo.org
28.6k5.3k
chaitin/SafeLine

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

GoGo ModulesGNU General Public License v3.0firewallhttp-flood
ly.safepoint.cloud/fUxS0GW
21.9k1.4k
Hacker0x01/hacker101

Source code for Hacker101.com - a free online web and mobile security class.

SCSSOthereducationhacking
hacker101.com
14.5k2.7k
anchore/grype

A vulnerability scanner for container images and filesystems

GoGo ModulesApache License 2.0containerssecurity
12.6k832
chaitin/xray

ไธ€ๆฌพ้•ฟไบญ่‡ช็ ”็š„ๅฎŒๅ–„็š„ๅฎ‰ๅ…จ่ฏ„ไผฐๅทฅๅ…ท๏ผŒๆ”ฏๆŒๅธธ่ง web ๅฎ‰ๅ…จ้—ฎ้ข˜ๆ‰ซๆๅ’Œ่‡ชๅฎšไน‰ poc | ไฝฟ็”จไน‹ๅ‰ๅŠกๅฟ…ๅ…ˆ้˜…่ฏปๆ–‡ๆกฃ

VueOthersecurityvulnerability
docs.xray.cool
11.7k1.9k
frohoff/ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

JavaMavenMIT Licensejavadeserialization
frohoff.github.io/appseccali-marshalling-pickles/
9k1.9k
trickest/cve

Gather and update all available and newest CVEs with their PoC.

HTMLMIT Licensepoccve
trickest.com
8k981
nomi-sec/PoC-in-GitHub

๐Ÿ“ก PoC auto collect from GitHub. โš ๏ธ Be careful Malware.

securitycve
poc-in-github.motikan2010.net
7.9k1.3k
infoslack/awesome-web-hacking

A list of web application security

MIT Licensepenetration-testingweb-hacking
7.2k1.3k
daffainfo/AllAboutBugBounty

All about bug bounty (bypasses, payloads, and etc)

bugbountybugbountytips
6.8k1.3k