Bugbounty Tool Python Packages

endpointscanner

Website endpoint recon tool and rate limit tester that can bypass simple captchas and WAFs.

robofinder

Robofinder fetches historical robots.txt files from Archive.org to uncover old directories, hidden paths, and valuable OSINT data for reconnaissance.

chiasmodon

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.

jiraffe

One stop place for exploiting all Jira instances in your proximity.

elengenix

AI-assisted orchestration for bug bounty hunting. Automates security tools for reconnaissance and analysis with real-time Telegram alerts.

gitsheriff

A comprehensive .git exposure detection, dumping, recovery, and sensitive data scanning toolkit.

webstor

WebStor efficiently enumerates all websites across your organization’s networks and those in your DNS records - including cloud-hosted servers via zone transfer data - stores their responses, and lets you query for known web technologies, including those with zero-day vulnerabilities.

pnk

Produce a combination of subdomains without repetitions - generates permutations P(n,k)

varoon

A tool for checking reflected parameters in URLs

ssl-pinning-remover

An SSL Pinning Remover for Android Apps

command-injection

Simple Command Injection Scanner

hackfunc

A toolkit for basic security checks and scans