cyberstars
cyberstars / purpose / bug-bounty

Tools for bug bounty

Independent disclosure programs.

80 tools indexed

Automated OSINT collection.

ReconAutomateWeb appsNetworks
PythonMIT

Autonomous AI agents that hack and fix your app's vulnerabilities.

ScanExploitWeb appsSource code
PythonApache-2.0

Passive subdomain discovery.

ReconWeb appsNetworks
GoMIT

High-volume Burp HTTP fuzzer.

FuzzExploitWeb apps
JavaApache-2.0

WordPress vulnerability scanner.

ScanWeb apps
RubyCustom

Modern browser-hooking C2 framework, a BeEF and blind-XSS successor.

ExploitReconWeb apps
JavaScriptApache-2.0

All-in-one OSINT for any website.

ReconAnalyzeWeb apps
TypeScriptMIT

Next-generation web tech fingerprinter.

ReconScanWeb apps
RubyGPL-2.0

Advanced XSS detection suite.

ScanFuzzWeb apps
PythonMIT

Cyber-security all-in-one platform.

InterceptScanWeb appsNetworks
TypeScriptAGPL-3.0

Auto-prepare APKs for HTTPS inspection.

AnalyzeInterceptMobile apps
TypeScriptMIT

Crawl domains for endpoints, secrets, API keys and tokens.

ReconScanWeb apps
GoGPL-3.0

Fast recursive content discovery in Rust.

FuzzReconWeb apps
RustMIT

ffuf

—

Fast web fuzzer written in Go.

FuzzScanWeb apps
GoMIT

Find leaked secrets via GitHub search.

ReconSource codeWeb apps
PythonMIT

gori

—

Terminal HTTP intercepting proxy and web pentest toolkit.

InterceptFuzzWeb apps
CrystalApache-2.0

Check which sites an email address is registered on

ReconWeb apps
PythonGPL-3.0

Fast HTTP toolkit.

ReconScanWeb apps
GoMIT

Test and exploit JWT vulnerabilities.

ExploitAnalyzeWeb apps
PythonCC-BY-SA-3.0

Interactive HTTPS proxy.

InterceptAnalyzeWeb appsNetworks
PythonMIT

Frida-based Android intent interception for security research

InterceptAnalyzeMobile apps
PythonGPL-3.0

Red-team prompts, agents and RAGs.

ScanFuzzWeb appsSource code
TypeScriptMIT

ptai

—

AI pentest tool that re-runs every exploit to verify it.

AutomateScanWeb apps
PythonMIT

Automated reconnaissance framework for web applications

ReconScanWeb appsNetworks
PythonGPL-3.0