An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

pypi.org "bug-bounty" keyword

puncia 0.42 💰
Subdomain recon, brand-impersonation/shadow-IT discovery & exploit intelligence, from the CLI
33 versions - Latest release: 5 days ago - 348 downloads last month - 664 stars on GitHub - 1 maintainer
ptai 1.4.1 💰
AI pentesting that proves its findings: machine oracles re-run each exploit, and every verified b...
33 versions - Latest release: about 2 months ago - 1.21 thousand downloads last month - 1,784 stars on GitHub - 1 maintainer
trusttrees 3.0.3
A Tool for DNS Delegation Trust Graphing
7 versions - Latest release: about 6 years ago - 1 dependent repositories - 29 downloads last month - 406 stars on GitHub - 1 maintainer
agentic-bug-hunter 6.0.2 💰
AI-powered bug bounty hunting — recon to report, in your terminal.
3 versions - Latest release: about 1 month ago - 753 downloads last month - 5,459 stars on GitHub - 1 maintainer
zerodom 0.1.3
Point an AI agent at an app as two logged-in users and it finds the broken access control (IDOR)....
13 versions - Latest release: 3 days ago - 618 downloads last month - 2 stars on GitHub - 1 maintainer
appxploit 1.0.1
Professional Android APK security analysis tool for bug bounty hunters
1 version - Latest release: 9 months ago - 36 downloads last month - 1 maintainer
dragonrepo 1.0.3
Automated penetration testing report generator with command tracking and evidence.
3 versions - Latest release: 4 days ago - 143 downloads last month - 2 stars on GitHub - 1 maintainer
strix-sandbox 0.3.0
Sandboxed security testing MCP server for Claude Code
2 versions - Latest release: 9 months ago - 10 downloads last month - 71,710 stars on GitHub - 1 maintainer
mcp-recon 0.2.0
Reconnaissance and known-issue scanner for Model Context Protocol (MCP) servers
2 versions - Latest release: 6 months ago - 38 downloads last month - 0 stars on GitHub - 1 maintainer
evilspider 2.6.0
Fast Async Attack Surface Recon Crawler & Hunter
2 versions - Latest release: about 2 months ago - 2 stars on GitHub - 1 maintainer
ctfr-reloaded 4.2.3
100% free subdomain discovery — no API keys required
4 versions - Latest release: 2 months ago - 139 downloads last month - 0 stars on GitHub - 1 maintainer
bounthunt 1.1.0
Automated recon and monitoring CLI for bug bounty programs
1 version - Latest release: 2 months ago - 1 stars on GitHub - 1 maintainer
offsec-mcp 0.1.0
MCP server that gives AI agents authorized-only offensive-security tools: recon, CVE intel, JS an...
1 version - Latest release: 3 months ago - 96 downloads last month - 0 stars on GitHub - 1 maintainer
subx-recon 2.1.4
SUBX - Subdomain Reconnaissance & Asset Management Framework
24 versions - Latest release: 2 months ago - 183 downloads last month - 1 stars on GitHub - 1 maintainer
evil-ollama 3.3.0
🦙 Exposed Ollama Instance Hunter, Proxy & API Manipulation Tool
18 versions - Latest release: 3 months ago - 131 downloads last month - 4 stars on GitHub - 1 maintainer
oamx 0.1.0
Read the OWASP Amass asset database and pipe it into everything else
1 version - Latest release: 3 months ago - 20 downloads last month - 1 stars on GitHub - 1 maintainer
aegis-devin 2.2.0 💰
Aegis-Devin: AI-driven autonomous penetration testing & network forensics platform. Autonomous re...
1 version - Latest release: 3 months ago - 33 downloads last month - 6 stars on GitHub - 1 maintainer
h1grep 0.2.1
grep disclosed HackerOne reports for recon and research
3 versions - Latest release: 14 days ago - 37 downloads last month - 2 stars on GitHub - 1 maintainer
reconx-py 0.1.0
AI-powered OSINT and security reconnaissance toolkit for Python: subdomain finder, WAF detector, ...
1 version - Latest release: 4 months ago - 21 downloads last month - 2 stars on GitHub - 1 maintainer
reconforge 1.3.0
AI-assisted recon toolkit for bug bounty hunters and security researchers
5 versions - Latest release: 3 months ago - 41 downloads last month - 36 stars on GitHub - 1 maintainer
elengenix 1.0.2
Autonomous AI Agent Framework for Security Research
3 versions - Latest release: about 1 month ago - 138 downloads last month - 2 stars on GitHub - 1 maintainer
h1-asset-fetcher 1.2.0
Fetch, download, and decompile mobile/exe assets from bug bounty programs
4 versions - Latest release: 4 months ago - 20 downloads last month - 43 stars on GitHub - 1 maintainer
fray 3.5.235 💰
Open-source WAF Security Testing Platform — 7,200+ attack payloads, 98 WAF/CDN fingerprints, AI-p...
234 versions - Latest release: 7 months ago - 4.34 thousand downloads last month - 1 maintainer
asmhunter-mcp 0.1.2
MCP server for ASMHunter — drive bug-bounty recon, monitoring, triage and reporting from an AI ag...
2 versions - Latest release: 4 months ago - 1 maintainer
gervijs 3.1.0
JS recon for pentesters. Finds secrets, endpoints, and infrastructure in JavaScript.
1 version - Latest release: 4 months ago - 0 stars on GitHub - 1 maintainer
nuclei-index 0.1.0
Map CVE IDs to your local nuclei-templates and emit runnable, rate-limited nuclei commands.
1 version - Latest release: 4 months ago - 18 downloads last month - 0 stars on GitHub - 1 maintainer
numasec 99.0.0 💰
numasec has moved to npm. Run: npm install -g numasec
10 versions - Latest release: 7 months ago - 37 downloads last month - 814 stars on GitHub - 1 maintainer
gitosintx 0.1.0
GitHub OSINT tool for finding public repository mentions of domains and URLs.
1 version - Latest release: 4 months ago - 1 maintainer
phantomsignal 1.27.0 💰
PhantomSignal :: Open-Source OSINT Intelligence Framework
10 versions - Latest release: 3 months ago - 35 downloads last month - 0 stars on GitHub - 1 maintainer
Top 3.7% on pypi.org
dirsearch 0.5.0 💰
Advanced web path scanner
4 versions - Latest release: 2 months ago - 7 dependent repositories - 18.5 thousand downloads last month - 14,976 stars on GitHub - 1 maintainer
riciplay-cli 1.7.67
Riciplay Security Platform — Autonomous AI-driven bug-bounty CLI
59 versions - Latest release: 3 months ago - 6.39 thousand downloads last month - 1 maintainer
vtx-recon 0.2.0
Authorized-use secret-intelligence suite: find -> verify -> capability ladder -> PROVEN/VALID/DEN...
3 versions - Latest release: 5 months ago - 33 downloads last month - 0 stars on GitHub - 1 maintainer
wordforge 0.4.0
Wordlists forged for your target, not for everyone's. Hyper-contextual wordlist generation for of...
2 versions - Latest release: 5 months ago - 1 maintainer
subsift 0.1.0a6
Subdomain reconnaissance with LLM-powered interestingness scoring for bug bounty hunters and pent...
2 versions - Latest release: 5 months ago - 94 downloads last month - 1 maintainer
zombie-vdp 1.0.8
🧟‍♂️ Zombie VDP – Ultimate Offensive Security Framework for VDP/Bug Bounty
2 versions - Latest release: 5 months ago - 34 downloads last month - 1 stars on GitHub - 1 maintainer
Top 8.1% on pypi.org
dumpall 0.3.2
一款信息泄漏利用工具,适用于.git/.svn/.DS_Store泄漏和目录列出漏洞利用
7 versions - Latest release: over 4 years ago - 2 dependent repositories - 138 downloads last month - 1,580 stars on GitHub - 1 maintainer
suk 3.0.0
Disposable temp-mail inbox straight from your terminal
5 versions - Latest release: 4 months ago - 25 downloads last month - 5 stars on GitHub - 1 maintainer
beastcrypt 1.2.4
Wayback Hunter + JS Secret Scanner — by ALONE BEAST
5 versions - Latest release: 6 months ago - 54 downloads last month - 0 stars on GitHub - 1 maintainer
cve-dedup-checker 0.1.1
Parallel duplicate-check across free CVE and vulnerability databases for security researchers
2 versions - Latest release: 6 months ago - 14 downloads last month - 0 stars on GitHub - 1 maintainer
scan4secrets 2.2.0 💰
DAST + SAST secret scanner with live verification, source-map parsing, and CI-native reporting
5 versions - Latest release: 4 months ago - 28 downloads last month - 122 stars on GitHub - 1 maintainer
surfmap 1.2.1
Advanced Reconnaissance & Analysis Suite for cybersecurity professionals
2 versions - Latest release: 6 months ago - 12 downloads last month - 0 stars on GitHub - 1 maintainer
myth-cli 0.1.0
An ultra-fast AI-powered reconnaissance agent for Kali Linux
5 versions - Latest release: 7 months ago - 10 downloads last month - 0 stars on GitHub - 1 maintainer
stripe-inspector 0.7.0
Security research tool to enumerate and inspect Stripe API keys
5 versions - Latest release: 7 months ago - 17 downloads last month - 5 stars on GitHub - 1 maintainer
bugbounty.sa 0.5.16
bugbounty.sa(bbsa): CLI + MCP server for bugbounty.sa — programs, reports (read, draft, submit), ...
15 versions - Latest release: about 1 month ago - 982 downloads last month - 0 stars on GitHub - 1 maintainer
csp-toolkit 0.9.0
Parse, analyze, generate, and find bypasses in Content Security Policy headers
14 versions - Latest release: about 1 month ago - 1.51 million downloads last month - 11 stars on GitHub - 1 maintainer
offseckit 0.1.0
Free offensive security toolkit for your terminal — reverse shells, encoding, hashing, and more
1 version - Latest release: 7 months ago - 16 downloads last month - 0 stars on GitHub - 1 maintainer
fastrecvsms 2.0.0
Enterprise SMS verification toolkit for security professionals
1 version - Latest release: 7 months ago - 28 downloads last month - 29 stars on GitHub - 1 maintainer
noisegate 0.1.0
AI-powered bug bounty report triage
7 versions - Latest release: 7 months ago - 29 downloads last month - 3 stars on GitHub - 1 maintainer
senshi 0.6.8
AI-powered SAST + DAST security scanner for bug bounty hunters
17 versions - Latest release: 8 months ago - 91 downloads last month - 1 stars on GitHub - 1 maintainer
Top 7.5% on pypi.org
clairvoyance 2.5.5
Obtain GraphQL API Schema even if the introspection is not enabled
6 versions - Latest release: 11 months ago - 2 dependent repositories - 3.82 thousand downloads last month - 1,544 stars on GitHub - 1 maintainer
clairvoyancenext 2.5.1
Obtain GraphQL API Schema even if the introspection is not enabled
7 versions - Latest release: over 3 years ago - 16 downloads last month - 1,544 stars on GitHub - 1 maintainer
ssl-pinning-remover 1.0.0
An SSL Pinning Remover for Android Apps
1 version - Latest release: over 6 years ago - 1 dependent repositories - 36 downloads last month - 43 stars on GitHub - 1 maintainer
originx 1.0.0
Professional WAF Origin IP Discovery Tool for Bug Bounty & Security Research
1 version - Latest release: 9 months ago - 43 downloads last month - 1 maintainer
jseye 3.0.1
JavaScript Intelligence & Attack Surface Discovery Engine
8 versions - Latest release: 8 months ago - 88 downloads last month - 1 maintainer
enumageddon 1.0.4
A powerful multi-threaded web fuzzer and OSINT tool for discovering endpoints and cloud services
2 versions - Latest release: 9 months ago - 18 downloads last month - 1 maintainer
Top 8.4% on pypi.org
forbidden 13.4 💰
Bypass 4xx HTTP response status codes and more.
38 versions - Latest release: about 1 year ago - 2 dependent repositories - 441 downloads last month - 257 stars on GitHub - 1 maintainer
enumeraite 0.1.4 💰
AI-Powered Web Attack Surface Enumeration - The future of intelligent discovery
3 versions - Latest release: 9 months ago - 13 downloads last month - 42 stars on GitHub - 1 maintainer
astrarecon 0.2.0
Linux-first, DAG-based recon orchestration engine with persistent sessions and Content-Addressed ...
2 versions - Latest release: about 1 month ago - 241 downloads last month - 0 stars on GitHub - 1 maintainer
flaghunter 0.1.0
CTF crypto autosolver and pcap hunter. Point it at a challenge file or packet capture and it runs...
1 version - Latest release: 22 days ago - 0 downloads last month - 1 stars on GitHub - 1 maintainer
idotaku 1.0.0
mitmproxy-based IDOR detection tool - intercepts traffic and analyzes parameter relationships to ...
4 versions - Latest release: 8 months ago - 23 downloads last month - 1 stars on GitHub - 1 maintainer
webcap 0.1.103 💰
An ultra-lightweight web screenshot tool written in Python
24 versions - Latest release: 7 months ago - 194 downloads last month - 47 stars on GitHub - 1 maintainer
security-mcp-server 1.0.5
Security AI MCP Server - Advanced security testing and automation framework with 70+ tools
5 versions - Latest release: 9 months ago - 73 downloads last month - 1 maintainer
sentinel-csrf 1.0.8
A verification-driven CSRF exploitation assistant for VAPT teams
9 versions - Latest release: 9 months ago - 31 downloads last month - 2 stars on GitHub - 1 maintainer
aiptx 5.2.14
AI-assisted security testing framework with SAST, DAST, business logic testing, Active Directory,...
53 versions - Latest release: 9 months ago - 597 downloads last month - 1 maintainer
langchain-rustchain 0.1.0 💰
LangChain tools for the RustChain Proof-of-Antiquity blockchain
1 version - Latest release: 6 months ago - 17 downloads last month - 289 stars on GitHub - 1 maintainer
jsmon 1.0.21
Advanced JavaScript monitoring for bug bounty hunters
20 versions - Latest release: 7 months ago - 25 downloads last month - 1 maintainer
cssinj 0.4.0
A python tool to exploit CSS injection vulnerabilities to exfiltrate sensitive information from w...
5 versions - Latest release: 3 months ago - 146 downloads last month - 3 stars on GitHub - 1 maintainer
hsignal-paramspy 0.1.0
The high-signal parameter discovery tool. Finds target-specific, production-used parameters from ...
1 version - Latest release: 11 months ago - 46 downloads last month - 0 stars on GitHub - 1 maintainer
spyhunt 4.1.0
A comprehensive network scanning and vulnerability assessment tool designed for security professi...
5 versions - Latest release: 10 months ago - 39 downloads last month - 4 stars on GitHub - 1 maintainer
crossbow-agent 2.0.2
World's first fully autonomous AI security engineer
5 versions - Latest release: 11 months ago - 82 downloads last month - 1 maintainer
sammy-web 0.1.2
Sammy is a CLI tool for web reconnaissance and security testing
6 versions - Latest release: about 1 year ago - 10 downloads last month - 2 stars on GitHub - 1 maintainer
brs-kb 4.0.2
XSS Knowledge Base — 4900+ Payloads, 169 Contexts, WAF Bypasses, Zero Dependencies
7 versions - Latest release: 10 months ago - 55 downloads last month - 0 stars on GitHub - 1 maintainer
cloudvault4 2.0.0
Multi-cloud storage bucket discovery via certificate transparency monitoring
3 versions - Latest release: 11 months ago - 21 downloads last month - 7 stars on GitHub - 1 maintainer
graphqlnomad 1.0.1
An integrated tool to detect, fingerprint, and explore GraphQL endpoints.
2 versions - Latest release: 9 months ago - 38 downloads last month - 4 stars on GitHub - 1 maintainer
endpointscanner 7.4.0
Website endpoint reconnaissance tool and rate limit tester that can bypass simple captchas and WAFs.
19 versions - Latest release: 3 months ago - 97 downloads last month - 4 stars on GitHub - 1 maintainer
brs-xss 4.0.0
Context-aware async XSS scanner powered by BRS-KB
9 versions - Latest release: 10 months ago - 111 downloads last month - 33 stars on GitHub - 1 maintainer
ghostpath 2.3.7
GhostPath - Interactive Recon Shell for Ethical Hackers
2 versions - Latest release: about 1 year ago - 20 downloads last month - 2 stars on GitHub - 2 maintainers
ywh-program-selector 0.2.0
CLI tool to help bug hunters manage and prioritize their YesWeHack (YWH) private programs
9 versions - Latest release: 9 months ago - 23 downloads last month - 10 stars on GitHub - 1 maintainer
hb-recon 1.0.4
Automated reconnaissance tool with AI report generation. Subdomain enumeration, endpoint crawling...
5 versions - Latest release: 4 months ago - 21 downloads last month - 0 stars on GitHub - 1 maintainer
revolt-rai 2.1.0
RAI is the open-source AI security operator built for professionals — autonomous, adaptive, and e...
6 versions - Latest release: 4 months ago - 37 downloads last month - 27 stars on GitHub - 1 maintainer
totalrecon 0.1.0
Passive recon extractor and AI summarizer for CTFs, red teams, and open-source recon tooling.
1 version - Latest release: over 1 year ago - 9 downloads last month - 8 stars on GitHub - 1 maintainer
helix-osint 3.3.0
Decode the digital DNA of any identity — OSINT Identity Mapper
1 version - Latest release: 5 months ago - 27 downloads last month - 26 stars on GitHub - 1 maintainer
google-chad 7.6 💰
Not another Google Dorking tool.
42 versions - Latest release: 7 months ago - 38 downloads last month - 33 stars on GitHub - 1 maintainer
nagooglesearch 8.7 💰
Not another Google searching tool.
47 versions - Latest release: 7 months ago - 1 dependent package - 53 downloads last month - 14 stars on GitHub - 1 maintainer
bot-safe-agents 1.2 💰
A library for fetching a list of bot-safe user agents.
3 versions - Latest release: 7 months ago - 427 downloads last month - 5 stars on GitHub - 1 maintainer
cloudkill 0.8.0
Advanced origin IP discovery tool for Cloudflare-protected domains
1 version - Latest release: about 1 month ago - 0 stars on GitHub - 1 maintainer
bugpipe 3.1.1
Unofficial Python client for Buganizer; the Google Issue Tracking system
4 versions - Latest release: about 1 month ago - 2 stars on GitHub - 1 maintainer
belphegor 0.1.0
Enumeración de contenido / web fuzzing para bug bounty y pentesting
1 version - Latest release: about 1 month ago - 0 stars on GitHub - 1 maintainer
bugslyce 1.3.0
A local-first evidence-led recon triage tool for authorised labs, CTFs and scoped assessments.
6 versions - Latest release: 2 months ago - 154 downloads last month - 0 stars on GitHub - 1 maintainer
reconic1 1.7.0
All-in-One Reconnaissance Tool for Penetration Testing and Bounty Hunting
5 versions - Latest release: over 2 years ago - 3 downloads last month - 108 stars on GitHub - 1 maintainer
gitsnatcher 2.0.0
Professional .git repository reconstructor, source extractor, and intelligence analyzer
2 versions - Latest release: 2 months ago - 33 downloads last month - 0 stars on GitHub - 1 maintainer
gitsheriff 2.0.0
A .git exposure detection, dumping, recovery, and sensitive data scanning toolkit
1 version - Latest release: 4 months ago - 10 downloads last month - 0 stars on GitHub - 1 maintainer
bladerecon 0.2.1
BladeRecon - Fast, lightweight reconnaissance framework for attack surface discovery, bug bounty ...
1 version - Latest release: 4 months ago - 29 downloads last month - 32 stars on GitHub - 1 maintainer
buganize 2.2.1
Python client for the Google Issue Tracking system (Buganizer)
29 versions - Latest release: about 1 month ago - 494 downloads last month - 1 stars on GitHub - 1 maintainer
jsfinder2 0.2
JSFinder2 can be used to find urls and subdomains in JS files.
2 versions - Latest release: about 3 years ago - 25 downloads last month - 3 stars on GitHub - 1 maintainer
scrapy-scraper 4.0 💰
Web crawler and scraper based on Scrapy and Playwright's headless browser.
21 versions - Latest release: 8 months ago - 21 downloads last month - 17 stars on GitHub - 1 maintainer
iprecon 1.0.0
CLI tool that retrieves WHOIS data for IP addresses
1 version - Latest release: over 3 years ago - 10 downloads last month - 4 stars on GitHub - 1 maintainer
gitghost-scanner 1.4.1
Find secrets in a GitHub account's public repos — including the ones still hiding in git history ...
3 versions - Latest release: 2 months ago - 254 downloads last month - 16 stars on GitHub - 1 maintainer
amounts 4.2
Generate a wordlist to fuzz amounts or any other numerical values.
10 versions - Latest release: almost 2 years ago - 1 dependent repositories - 32 downloads last month - 10 stars on GitHub - 1 maintainer
falsealarm 1.0.6
Async Web Reconnaissance Engine for Pentesters & Bug Bounty Hunters
7 versions - Latest release: about 1 month ago - 696 downloads last month - 1 stars on GitHub - 1 maintainer