reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

dns security osint scanner hacking subdomain penetration-testing bug-bounty pentesting recon nuclei vulnerabilities bugbounty pentest security-tools reconnaissance pentest-tool subdomain-enumeration bugbounty-tool

• Updated Nov 2, 2026
• Shell

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

rust security xss bugbounty xss-scanner hacktoberfest devsecops bugbounty-tool

• Updated Nov 11, 2026
• Rust

💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh

python pdf scanner penetration-testing pentesting bugbounty pdf-generation redteaming redteam penetration-test pentesting-tools bugbounty-tool penetrationtesting

• Updated Oct 17, 2026
• Python

ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes

security crawler osint scanner dirscanner bug-bounty src infosec bugbounty vulnerability-scanners security-tools subdomain-enumeration urlscan subdomain-takeovers bugbounty-tool pagemonitor scope-sentry

• Updated Oct 11, 2026
• Go

Tips and Tutorials for Bug Bounty and also Penetration Tests.

bug vulnerability vulnerabilities bugs bugbounty ethical-hacking red-team bugcrowd hackerone red-teaming bugbountytips bugbounty-tool bugbountytricks bugbounty-reports ethical-hacker bugbounty-checklist

• Updated Oct 7, 2025

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

graphql security-audit penetration-testing bugbounty security-scanner burpsuite security-tools burp-extensions graphql-security api-documentation-tool bugbounty-tool

• Updated Nov 10, 2026
• Kotlin

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

osint cybersecurity pentesting recon bugbounty offensive-security red-team reconnaissance pentest-tool blue-team red-teaming purple-team bugbountytips bugbounty-tool purple-teams

• Updated Jan 29, 2021
• C#

A curated collection of top-tier penetration testing tools and productivity utilities across multiple domains. Join us to explore, contribute, and enhance your hacking toolkit!

web ai mcp hacking bug-bounty awesome-list bugbounty agents hacker hacking-tool pentest-scripts kali-scripts bounty-hunters hacking-tools pentesting-tools bugbounty-tool llm llm-inference aiagent mcp-server

• Updated Dec 4, 2025

The fastest dork scanner written in Go.

golang security crawler infosec bugbounty vulnerability-scanners google-dorks dork-scanner google-dorking dorking shodan-dorks bugbounty-tool bing-dorks

• Updated Feb 4, 2024
• Go

An IIS short filename enumeration tool

security security-audit iis pentesting bugbounty vulnerability-detection vulnerability-scanners security-scanner security-automation security-tools redteam iis-server pentesting-tools bugbounty-tool redteam-tools iis-security

• Updated Nov 25, 2024
• Go

Automation for javascript recon in bug bounty.

bugbounty bugbounty-tool javascript-recon

• Updated Sep 9, 2023
• Shell

MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats.

tool scanner bug subdomain sql-injection xss-vulnerability infosec nuclei bugbounty bash-script vulnerability-scanners bugbounty-tool bugbountytricks subdomains-enumeration

• Updated Jul 23, 2024
• Shell

AppSec Payloads Arsenal for Pentration Tester and Bug Bounty Hunters

penetration-testing bugbounty payload payloads payloads-database bugbounty-tool

• Updated Oct 6, 2026
• PHP

An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.

golang penetration-testing vulnerability bugbounty bash-script reconnaissance vulnerability-scanner garud subdomain-takeover penetration-testing-tools bugbountytips assetfinder bugbounty-tool gf-patterns

• Updated May 11, 2026
• Shell

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.

intelligence osint credentials emails asn cidr bugbounty subdomains information-gathering intelligence-analysis reconnaissance attack-surface subdomain-enumeration reconnaissance-framework bugbounty-tool email-enumeration chiasmodon

• Updated May 10, 2025
• Python

A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀

rust security chromium bugbounty vulnerability-scanners security-tools rust-tools bugbountytips bugbounty-tool prototype-pollution

• Updated Aug 28, 2025
• Rust

A tool to check a bunch of URLs that contain reflecting params.

golang xss bugbounty xss-detection bugbounty-tool

• Updated Aug 4, 2024
• Go

Discover new target domains using Content Security Policy

golang security csp information-retrieval hacking content-security-policy web-security recon bugbounty offensive-security security-tools reconnaissance offensivesecurity bugbounty-tool redteam-tools recon-tool web-security-scanner

• Updated Nov 11, 2026
• Go

A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.

xss cybersecurity bug-bounty xss-vulnerability infosec bugbounty xss-exploitation xss-detection bugbounty-tool prototype-pollution

• Updated Jun 22, 2022
• Go

Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration tests and vulnerability assessments too.

security automation hacking penetration-testing bug-bounty pentesting nuclei bugbounty cve vulnerability-detection cve-scanning vulnerability-scanners security-tools bug-hunting bugbountytips bugbounty-tool nuclei-templates projectdiscovery nuclei-engine

• Updated Oct 26, 2026
• Shell