Bug Bounty Security Tools

Knock Subdomain Scan

Small tool to Grab subdomains using Shodan api.

Scrape domain names from SSL certificates of arbitrary hosts

This project delivers a fully automated **Recon-as-Code** workflow for passive reconnaissance for web application environments. It combines GitHub Actions-based CI/CD automation, powerful recon tools, and a Flask-powered dashboard for visualized and authenticated access to the findings.

S3BucketMisconf is an advanced tool designed to scan AWS S3 buckets for misconfigurations. It identifies publicly accessible buckets, checks permissions, and detects sensitive data leaks. Ideal for bug bounty hunters and pentesters, it automates the recon process and enhances cloud storage security assessment efficiently.

Discover new target domains using Content Security Policy

Use favicons to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.

403/401 Bypass Methods + Bash Automation + Your Support ;)

This tool will check for Sensitive Data Leakage with some useful patterns/RegEx. The patterns are mostly targeted on waybackdata and filter everything accordingly.

Master script for web reconnaissance

crawls the website and finds broken social media links that can be hijacked

Automate your hacking

jxscout superpowers JavaScript analysis for security researchers

An MCP server implementation

bash script for Subdomain Enumeration

declutters url lists for crawling/pentesting

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

A python script that finds endpoints in JavaScript files

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

DNSGen is a powerful and flexible DNS name permutation tool designed for security researchers and penetration testers. It generates intelligent domain name variations to assist in subdomain discovery and security assessments.

This script is intended to automate your reconnaissance process in an organized fashion

Find domains and subdomains related to a given domain

Fast subdomains enumeration tool for penetration testers

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.