Poor (rich?) man's bug bounty pipeline https://dubell.io
Bountystrike-sh is a collection of bash and python scripts that installs common bug bounty tools, performs recon scans and continous asset discovery.
Bountystrike-sh is opensource but belongs to the BountyStrike project, self-hosted bug bounty management system.
____ ____ _ _ _ _ _________ _______ _______ _____ _____ _ ________
| _ \ / __ \| | | | \ | |__ __\ \ / / ____|__ __| __ \|_ _| |/ / ____|
| |_) | | | | | | | \| | | | \ \_/ / (___ | | | |__) | | | | ' /| |__
| _ <| | | | | | | . ` | | | \ / \___ \ | | | _ / | | | < | __|
| |_) | |__| | |__| | |\ | | | | | ____) | | | | | \ \ _| |_| . \| |____
|____/ \____/ \____/|_| \_| |_| |_| |_____/ |_| |_| \_\_____|_|\_\______|
________________________________ WHAT THE SHELL?__________________________________
== Info
Bountystrike-sh is a simple bash pipeline script
containing a bunch tools piping data between each other.
No need for any fancy setup ^_^
Stiched together by @dubs3c.
== Usage:
bstrike.sh <action> [project] [domain]
bstrike.sh install (Install tooling)
bstrike.sh run fra fra.se (Run pipeline)
bstrike.sh [assetdiscovery|ad] fra.se (Run only asset discovery)
bstrike.sh [contentdiscovery|cd] fra.se (Run only content discovery)
bstrike.sh [networkdiscovery|nd] fra.se (Run only network discovery)
bstrike.sh [visualdiscovery|vd] fra.se (Run only visual discovery)
bstrike.sh [vulndiscovery|vvd] fra.se (Run only vulnerability discovery)
The following tools and worldlists will be installed:
Other stuff that will be installed as well:
Just run bash install.sh to get the bug hunting environment. So far only tested for Ubuntu 22.04.
You also the have the option to use vagrant with virtualbox, just runt vagrant up && vagrant ssh. Create a folder called data in the root directory, vagrant will map it to /vagrant_data inside the VM.
Simply run ./bstrike.sh <project> <domain>.
Any feedback or ideas are welcome! Want to improve something? Create a pull request!
git checkout -b my-new-featuregit commit -am 'Add some feature'git push origin my-new-featureBountystrike-sh is made with ♥ by @dubs3c and is released under the GNU General Public License v3.0.