
Checklists and templates for bug bounty programs. MIT licensed.
Curated workflows, tools and references for bug bounty hunters and web security researchers.
BugBounty Arsenal is a practical web testing platform focused on recon workflows, endpoint discovery and security testing utilities.
The goal is to simplify repetitive web testing tasks without requiring complex local setups.
Demo scans are available without registration.
Accounts are only required for saving scan history and workflows.



See: ROADMAP.md
Contributions, suggestions and workflow improvements are welcome.
See: CONTRIBUTING.md
For authorized security testing and educational purposes only.