bug-bounty-recon 开源项目推荐（38 个）

alexbieber /Bug_Bounty_writeups

漏洞赏金文章 - OWASP TOP 10

AnLoMinus /Bug-Bounty

Bug Bounty ~ Awesomes | Books | Cheatsheets | Checklists | Tools | Wordlists | More

pwnwriter /hysp

📦 An independent package manager that every hacker deserves.

edoardottt /lit-bb-hack-tools

小虫子赏金与黑客工具⚔️

ARPSyndicate /bug-bounty-domains

Domains belonging to the most reputed public bug bounty programs. [NOT FOR NON-MONETARY OR PRIVATE PROGRAMS]

serain /bbrecon

Python library and CLI for the Bug Bounty Recon API

DotNetRussell /Ensemble

A Bug Bounty Platform that allows hunters to issue commands over a geo-distributed cluster. The ideal user is someone who is attempting to scan multiple bug bounty programs simultaneously, on a recurring basis.

shaikarifali /bundlebleed

AI/LLM-assisted JS Recon and vulnerability triage for authorized bug bounty testing & pentesting — scope-gated, passive-by-default, human-verified

samirettali /bounty-notes

My bug bounty notes

iamshafayat /JSpider

JSpider is a smart crawler for hidden endpoints. It crawls and extracts hidden API endpoints and URLs from JavaScript files and HTML source code - all directly in your browser.

exploitlabHQ /ReconOPS

A structured recon-only framework for bug bounty hunters, from DNS basics to JS mining, API discovery, and automation pipelines.

XenoCoreGiger31 /Local-Model

Autonomous security agent on Kali Linux using Qwen 2.5-14b with LM Studio

balwantyadav1 /DorkScan

DorkScan is a web app that helps bug bounty hunters and students generate Google Dork queries. Choose a role to get tailored dorks for vulnerabilities or educational resources. The tool allows custom searches, displaying clickable dorks in real-time with a clean, responsive design for easy use across devices.

isameersah /DorkGen-Pro

500+ Google Dork Operators for Security Research & Bug Bounty

Bugatsec /Bug-Bounty-Notes

This repository contains my personal notes and methodologies related to Bug Bounty and Web Security, including: Recon methodologies (general + personal workflows) Techniques to find hidden assets Various attack vectors

donrich99 /eclipse

Advanced AI-Powered Security Framework | 30+ Modules | SQLi, XSS, WAF Detection, Subdomain Enum, Port Scan, CMS Detect, API Audit, C2 & More | Free & Open Source

b0dj0x /domainghost

domainghost by b0dj0x

holmes-py /notification-pipeline

This is a notification pipeline written in python, which uses a common base `notification.txt` file to connect any script to an standardized discord notification system.

mhotasin24 /bountyrecon-pro

BountyRecon PRO v2.5.0 - Secure Edition | 18 Recon Tools, Secure Google OAuth + JWT, Helmet/CORS/Rate-Limit, PoC Studio HD & Vercel Analytics

6qlzz /6qlzHunter

Maximize your bounty hunting with 6qlzHunter – a powerful vulnerability scanner