A fast tool for filtering URLs and domains based on bug bounty scope.

orgfetch is a Go CLI tool for fetching and reporting organization or group members and repositories from GitHub and GitLab. It supports parallel repository downloading, making it efficient for large organizations. The tool is designed for automation and reporting tasks, providing a simple interface and flexible options for users.

Crawls the given URL and finds broken links that can be hijacked. Broken links may allow an attacker to conduct phishing attacks. It also can cost a loss of the company's reputation. Broken social media hijack issues are usually accepted on the bug bounty programs.

TraceX — Advanced Subdomain Intelligence & Threat Reconnaissance Tool

gocl is similar tool like go install command that install's go tools.

Eliminating common domain wildcard instances, by matching similar DNS answer from the corresponding parent.

Download apk files for static analysis

🔍 Extract archived URLs from the Wayback Machine efficiently with advanced filtering, automatic retries, and rate limiting for optimal performance.

cacheit 🔄 - CLI Pipeline Caching Capture, organize & reuse command outputs. Auto/manual labels, cross-platform cache management. Perfect for security workflows & repetitive tasks.

Get related domains / subdomains by looking at Google Analytics IDs

Processing a list of URLs. It allows users to modify URLs by controlling the number of path segments and optionally keeping or removing query parameters.

grep like tool for finding & filtering sensitive file paths , files , endpoints

Tool to validade dependencies in a package.json file against the npm registry

Next-generation intelligent Web Fuzzer & Directory Scanner written in Go. Features WAF detection, secret scanning, auto-calibration, and smart 403 bypass

A comprehensive internal network scanning tool that enables one-click automated, all-around vulnerability scanning.

Security.txt (RFC 9116) discovery & grading across domains/subdomains—contacts + bug bounty intel, structured outputs (JSON/YAML/CSV/SARIF).

A tool for extracting data from apk files to find api, secret, and ... that can be used in bug bounty hunting

RoboHunt is a high-performance, concurrent robots.txt scanner designed for security professionals and bug bounty hunters. It efficiently scans a list of subdomains to find accessible directories and paths listed in their robots.txt files, helping you uncover potential vulnerabilities and expand your attack surface.

⚡ A fast and elegant CLI tool for managing bug bounty targets and recon workflows.