Bug Bounty Python Packages

csp-toolkit

Content Security Policy analysis, bypass detection, and CI gating. 21 weakness checks with A+ to F grading, 79 known bypass domains, SARIF output, and a GitHub Action.

dirsearch

Web path scanner

clairvoyance

Obtain GraphQL API schema even if the introspection is disabled

ptai

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.

agentic-bug-hunter

AI-powered bug bounty hunting toolkit that works with or without subscription.

bugpipe

Unofficial Python client for Buganizer; the Google Issue Tracking system.

buganize

Python client for the Google Issue Tracking system (Buganizer)

vamp-subdomain-takeover

VampSecure Labs — Subdomain Takeover Vulnerability Scanner

vamp-cloud-enum

VampSecure Labs — Enumerador de buckets cloud públicos (S3/Azure/GCP)

vamp-passive-recon

VampSecure Labs: Passive recon engine — subdomain enumeration + HTTP headers analysis

tempor

Ephemeral Infrastructure for Dummies

astrarecon

A Linux-first, plugin-based recon workflow engine with DAG execution, persistent sessions, AI-ready exports, and Rich CLI.

evil-ollama

🦙 Evil-Ollama v3.0 — Exposed Ollama Instance Hunter, Vulnerability Scanner & Proxy Tool. Find, fingerprint & exploit publicly exposed Ollama LLM instances.

endpointscanner

Website endpoint recon tool and rate limit tester that can bypass simple captchas and WAFs.

bot-safe-agents

A library for fetching a list of bot-safe user agents.

wshawk

Open source toolkit for WebSocket security testing, web application penetration testing, and stateful attack validation. It combines a CLI scanner, web dashboard, Electron desktop app, browser companion, and project-backed workflows for authorized security assessments.

forbidden

Bypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client.

apihunter-bess1lie

Professional REST API security testing CLI for OpenAPI discovery, authentication analysis, security heuristics and bug bounty reconnaissance.

nikasha

Proof, not prose. Fact-check vulnerability reports against the real code at the exact version they name: an evidence dossier and sandboxed reproduction for incoming reports.

jsrecon

🐚 Map a web app's JavaScript to its API — endpoints, GraphQL, routes and leaked keys from bundles and source maps, plus an OpenAPI skeleton. tree-sitter, not regex.

jwtlint

Offline JWT analyzer: alg:none, RS/HS confusion, kid injection, weak secrets

hunterxsec

AI-Assisted Vulnerability Discovery, Validation & Proof Engine

cryptsmith

Crypto attack primitives and analysis toolkit for CTF players and security researchers. Zero dependencies.

nova-arsenal

Autonomous AI security research platform — 240+ tools, multi-LLM, Burp/Metasploit integration, self-training RL pipeline