Bug Bounty Security Tools

Awesome Bug bounty builder Project

A collection of awesome one-liner scripts especially for bug bounty tips.

Automatic Bug finder with buprsuite

APIDetector: Efficiently scan for exposed Swagger endpoints across web domains and subdomains. Supports HTTP/HTTPS, multi-threading, and flexible input/output options. Ideal for API security testing.

A powerful and intuitive web-based search engine designed specifically for bug bounty hunters and security researchers. This tool provides quick access to various Google dorks and specialized searches to help identify potential security vulnerabilities and gather information about target domains.

My script stands out by preserving the structure of duplicate URLs and handling complex query parameters, unlike standard tools that only filter alphabetically or deduplicate.

This Python script can be used to bypass IP source restrictions using HTTP headers.

A powerful SOCKS5 proxy based network traffic interception tool for Windows that enables TLS/SSL inspection, analysis, and manipulation at the network level.

A Workflow Engine for Offensive Security

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

Tool to scan for secret files on HTTP servers

ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

The recursive internet scanner for hackers. 🧡

Knock Subdomain Scan

Small tool to Grab subdomains using Shodan api.

Scrape domain names from SSL certificates of arbitrary hosts

This project delivers a fully automated **Recon-as-Code** workflow for passive reconnaissance for web application environments. It combines GitHub Actions-based CI/CD automation, powerful recon tools, and a Flask-powered dashboard for visualized and authenticated access to the findings.

S3BucketMisconf is an advanced tool designed to scan AWS S3 buckets for misconfigurations. It identifies publicly accessible buckets, checks permissions, and detects sensitive data leaks. Ideal for bug bounty hunters and pentesters, it automates the recon process and enhances cloud storage security assessment efficiently.

Discover new target domains using Content Security Policy

Use favicons to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.

403/401 Bypass Methods + Bash Automation + Your Support ;)

This tool will check for Sensitive Data Leakage with some useful patterns/RegEx. The patterns are mostly targeted on waybackdata and filter everything accordingly.

Master script for web reconnaissance