Bug Bounty Python Packages

dirsearch

Web path scanner

clairvoyance

Obtain GraphQL API schema even if the introspection is disabled

endpointscanner

Website endpoint recon tool and rate limit tester that can bypass simple captchas and WAFs.

ptai

Offensive-security MCP server with 205 wrapped tools, 17 specialist agents, and 60 SPA-aware probes for OWASP Top 10. CLI + MCP, BYO LLM. No API key needed on MCP path.

d0rk3r

Shodan IP scraper with auto-proxy rotation. No API key needed. Perfect for OSINT, bug bounty & pentesting.

phantomsignal

Open-source OSINT intelligence framework — nmap-powered port scanning with OS detection, rich CLI panels, DNS recon, tech fingerprinting, 30+ threat intel APIs, Shadow Profiler, and cyberpunk web UI. pip install phantomsignal

buganize

Python client for the Google Issue Tracking system (Buganizer)

h1-asset-fetcher

Fetch, download, and decompile Android/iOS/Exe assets from HackerOne bug bounty programs

ravenclaw-security

Governance-first security research runtime with policy-gated execution and public-safe proof artifacts

nuclipy

A simple template based vulnerability scanner in python (Inspired by ProjectDiscovery's Nuclei)

numasec

The AI Agent for Cyber Security.

tempor

Quick and Easy Infrastructure.

subfind3r

Subdomains enumeration tool for penetration testers

wshawk

Open source toolkit for WebSocket security testing, web application penetration testing, and stateful attack validation. It combines a CLI scanner, web dashboard, Electron desktop app, browser companion, and project-backed workflows for authorized security assessments.

apkshadow

Android APK automation tool for bug bounty hunters created to help me do some stuff faster

brs-xss

MIT license BRS-XSS is a modular Python CLI scanner for XSS vulnerabilities. Features context-aware payloads, WAF evasion, DOM analysis via Playwright, ML-based risk scoring, and export in HTML/JSON/SARIF. Designed for integration with Brabus Recon Suite (BRS).

dumpall

一款信息泄漏利用工具，适用于.git/.svn/.DS_Store泄漏和目录列出

beastcrypt

Wayback Hunter + JS Secret Scanner — by ALONE BEAST

vtx-recon

Authorized-use secret-intelligence suite: find -> verify -> capability ladder -> PROVEN/VALID/DENIED impact tiering -> court-ready evidence bundle. Built on top of TruffleHog.

bot-safe-agents

A library for fetching a list of bot-safe user agents.

noisegate

A policy-aware AI triage assistant that evaluates bug bounty report quality, scope alignment, and impact—so researchers submit better reports and triagers focus on real vulnerabilities.

cssinj

A python tool to exploit CSS injection vulnerabilities to exfiltrate sensitive information from web applications.

gitsnatcher

Professional .git repository reconstructor and extractor

brs-kb

BRS-KB is XSS Knowledge Base API