A curated list of tools used by Bug Bounty hunters and security researchers for testing web applications, APIs, mobile apps, cloud applications, and network infrastructure. These tools assist in reconnaissance, scanning, fuzzing, exploitation, and reporting vulnerabilities.
📌 Table of Contents
🔍 Reconnaissance
Tools for gathering public information about the target.
- Amass - In-depth reconnaissance and DNS enumeration
- Assetfinder - Find related domains
- Hakrawler - Crawl web applications for endpoints
- Gauplus - Fetch URLs from various sources
- Waybackurls - Fetch URLs from the Wayback Machine
- Katana - Advanced web crawler
- Findomain - Fast domain discovery
- ParamSpider - Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
🌐 Subdomain Enumeration
Essential for mapping an application's attack surface.
- Subfinder - Passive subdomain discovery
- Sublist3r - Subdomain enumeration using multiple sources
- Knockpy - Subdomain discovery using dictionary attack
- Chaos - Find bug bounty subdomains from Chaos DB
🛠 Web Application Testing
Tools for testing security vulnerabilities in web applications.
- Burp Suite - Web security testing framework
- OWASP ZAP - Open-source web application scanner
- SQLmap - Automated SQL injection tool
- XSStrike - Advanced XSS scanner
- Nuclei - Fast vulnerability scanner using custom templates
- Kxss - Detect cross-site scripting (XSS) vulnerabilities
- CRLFuzz - Detect CRLF injection vulnerabilities
🔌 API Security Testing
Tools for testing REST, GraphQL, and SOAP APIs.
- Postman - API testing and security research
- GraphQLmap - Automated GraphQL security testing
- NoSQLMap - Detect and exploit NoSQL injection vulnerabilities
- JWT_Tool - Manipulate and test JWT tokens
- Kiterunner - Brute-force API endpoints
📱 Mobile App Security Testing
Tools for testing Android and iOS applications.
- MobSF - Mobile security testing framework
- Frida - Dynamic instrumentation toolkit for runtime manipulation
- Objection - Runtime mobile security assessment toolkit
- APKTool - Reverse engineer Android apps
- Dex2Jar - Convert Android DEX files to JAR
☁ Cloud Security Testing
Tools for testing AWS, Azure, GCP, and other cloud platforms.
🌍 Network Security Testing
Tools for assessing network security vulnerabilities.
- Nmap - Network scanning and fingerprinting
- Masscan - Fast network scanning
- Shodan - Internet-wide network reconnaissance
- RustScan - Fast network port scanning
- Zmap - Large-scale network scanner
- NetFuzzer - NetFuzzer is a comprehensive network security assessment tool
🔎 Vulnerability Scanners
Automated tools for identifying vulnerabilities.
- NucleiFuzzer - A Powerful Automation Tool for Web Vulnerability Scanning
- Nessus - Commercial vulnerability scanner
- OpenVAS - Open-source vulnerability scanner
- Nikto - Web server vulnerability scanner
- WhatWeb - Detect web technologies and vulnerabilities
Tools for fuzzing web applications and APIs.
- ffuf - Fast web fuzzing
- wfuzz - Web application fuzzing
- Dirsearch - Directory brute-forcing
- Gobuster - Directory and DNS brute-forcing
Tools for exploiting discovered vulnerabilities.
- Commix - Automated All-in-One OS Command Injection Exploitation Tool
- Dalfox - Dalfox is a powerful open-source XSS scanner and utility focused on automation
- Metasploit - Exploitation framework
- Xsploit - Exploit automation
- RouterSploit - Exploiting routers and IoT devices
📋 Reporting & Automation
Tools for automating recon and reporting vulnerabilities.
📢 Contributing
If you have any additional tools to suggest, feel free to submit a pull request!
Follow Me : @ALIF101XL
📜 License
This project is licensed under the MIT Indonesia.