bounty-hunting-tools

CaA - Collector and Analyzer, Insight into information, exploring with intelligence in a thousand ways. 信息洞察，智探千方！

EmailAll is a powerful Email Collect tool — 一款强大的邮箱收集工具

🧿 AutorizePro是一款强大越权检测 Burp 插件，通过增加 AI 辅助分析 && 进一步优化检测逻辑，大幅降低误报率，提升越权漏洞检出效率。 [ AutorizePro is a authorization enforcement detection extension for burp suite. By adding Ai-assisted analysis, it significantly reduces the false positive rate and improves the efficiency of vulnerability detection.

A rapid HTTP downgrade smuggling scanner written in Go.

Chrome and Firefox extension that lists Amazon S3 Buckets while browsing

BountyDrive is a comprehensive tool designed for penetration testers and cybersecurity researchers. It integrates various modules for performing attacks (google dorking, sqli, xss), reporting, and managing VPN/proxy settings, making it an indispensable asset for any security professional.

At this repo you can find any tools, tricks or templates for general penetration testing assesment

RobotScraper is a simple tool written in Python to check each of the paths found in the robots.txt file and what HTTP response code they return.

A tool to check for response status codes with ease

This is a website extract all URLs scraper built using javascript(nodejs)

robust s3 security tool designed to help detect sensitive files at AWS public S3 buckets.

Hellhound is an autonomous bug bounty reconnaissance and triage assistant designed for professional security researchers and bug hunters. It automates repetitive enumeration workflows, verifies asset validity, checks for dangling DNS takeover vectors, and extracts endpoints.

Simple outbound link enumerator from web pages

Getting the latest scopes (domains that are eligible for bug bounty reports) of top bug bounty platforms such as H1, Bugcrowd, and more

Bounty Hunter Pro - Advanced Security Testing Suite . A comprehensive, one-click security testing and vulnerability assessment tool , bug bounty tool , designed for authorized penetration testing and bug bounty hunting.

This tool is a subdomain enumerator . Thanks for using!. ;)

Autonomous AI agent that earns USDC answering real support tickets. Reads an open bounty board, drafts with your own LLM, pays per attempt over x402 (HTTP 402), and gets paid 85% on human approval. Base + Solana. No account, no API key, no gas.

Docker Container Registry enumeration tool

A lightweight chrome extension for competitions, challenges and hackathons.

Hermes Agent plugin: earn USDC answering real support bounties, or run your own bounty board, over x402. No account, no API key. A human approves the winning answer and the wallet is paid 85% automatically.