AutoBugBounty
One Python script that runs a full bug bounty recon workflow, from subdomain discovery to a single merged report.
Overview#
AutoBugBounty runs a full-scope reconnaissance pipeline against a target domain and organises everything into one workspace, ready for manual exploitation. It is also developed under the name AutoScan, and was earlier referred to internally as BugRecon.
What I built#
The tool chains the stages a recon workflow goes through, end to end:
- subdomain enumeration
- status-code classification
- technology fingerprinting
- CVE checks
- directory discovery
- parameter discovery
- JavaScript secret detection
- a merged final report
Architecture#
A single Python script orchestrates established recon tools (subfinder, assetfinder, httpx, nuclei, ffuf and whatweb), then buckets and de-duplicates their output and merges the findings into one structured report.