Tools for bug bounty

Independent disclosure programs.

80 tools indexed

—

Burp Suite extension exposing the Montoya API as a local REST API.

AutomateScanWeb apps

KotlinMIT

—

Automated recon and web vulnerability-scanning framework.

ReconScanWeb appsNetworks

ShellMIT

—

Scan ServiceNow instances for unauthenticated data exposure

ScanReconWeb appsCloud

GoMIT

—

Automatic SQL injection and database takeover.

ExploitScanWeb apps

PythonGPL-2.0

—

E-mail and subdomain harvester.

ReconWeb appsNetworks

PythonGPL-2.0

—

WAF fingerprinting.

ReconScanWeb apps

PythonBSD-3-Clause

—

Historical URLs from the Wayback Machine.

ReconWeb apps

GoMIT

—

Java deserialization payload generator.

ExploitWeb appsBinaries

JavaMIT