Security Cipher
Home Blog About Us
Resources β–Ό
πŸ—ΊοΈ Penetration Testing Roadmap 🌐 Web Application Security Checklist πŸ€– OWASP Top 10 for LLM Applications 🧠 LLM AI Security Checklist πŸ› οΈ Security Tools 🎯 Penetration Testing Tricks πŸ“„ Secure Code Explain πŸ“– Vulnerability Explain ☁️ AWS Cloud Security Checklist
My Resume
Contact UsContact
← Security Tools View on GitHub

BugBountyToolkit

A multiplatform bug bounty toolkit that can be installed on Debian/Ubuntu or setup with Docker.

BugBountyToolkit

Bug Bounty Toolkit

A multiplatform bug bounty toolkit that can be installed on Debian/Ubuntu or setup with Docker.

Why should you use this toolkit?

  • The objective of this toolkit is to provide pentesters, security researchers and bug bounty hunters with a pre-configured environment that has some of the most popular tools and frameworks already installed and configured.
  • This toolkit offers a multiplatform base to work with as the script can be installed on Linux, setup with Docker or installed on Windows with WSL (Windows Subsystem For Linux).
  • The installer script can be customized to add or remove specific tools based on your requirements.
  • Tools are constantly being added, updated and fixed.
  • Pull once. Update as needed.
  • In addition to the tools that are already installed, you can use the Katoolin script to install additional tools that you may require during your engagements.

Docker Pull Instructions

Docker Hub Link: https://hub.docker.com/r/hackersploit/bugbountytoolkit

docker pull hackersploit/bugbountytoolkit

Docker Run Instructions

Run with Bash

docker run -it hackersploit/bugbountytoolkit /bin/bash

Run with ZSH

docker run -it hackersploit/bugbountytoolkit /usr/bin/zsh

asciicast

Docker Build Instructions

docker build . -t hackersploit/bugbountytoolkit

Installation Instructions - Ubuntu/Debian

git clone https://github.com/AlexisAhmed/BugBountyToolkit.git
cd BugBountyToolkit
chmod +x install.sh
./install.sh

Installing New Tools

You can install new tools from the Kali Linux repositories by utilizing the Katoolin script.

cd ~/toolkit
cd katoolin
./katoolin.py

Installed Tools

  • [x] altdns
  • [x] amass
  • [x] awscli
  • [x] bucket_finder
  • [x] CloudFlair
  • [x] commix
  • [x] dirb
  • [x] dirsearch
  • [x] dnsenum
  • [x] dnsrecon
  • [x] dotdotpwn
  • [x] droopescan
  • [x] fierce
  • [x] ffuf
  • [x] gobuster
  • [x] gitGraber
  • [x] httprobe
  • [x] joomscan
  • [x] Knockpy
  • [x] masscan
  • [x] massdns
  • [x] Nikto
  • [x] Nmap
  • [x] Recon-ng
  • [x] s3recon
  • [x] S3Scanner
  • [x] sqlmap
  • [x] subfinder
  • [x] Sublist3r
  • [x] subjack
  • [x] SubOver
  • [x] teh_s3_bucketeers
  • [x] thc-hydra
  • [x] theHarvester
  • [x] tmux
  • [x] virtual-host-discovery
  • [x] wafw00f
  • [x] waybackurls
  • [x] wfuzz
  • [x] whatweb
  • [x] wpscan
  • [x] XSStrike
  • [x] zsh

Wordlists

  • SecLists

Tools being added

  • [ ] Sn1per Framework

Contributors

  • https://github.com/rishabhdeepsingh
  • https://github.com/brutalgg
  • https://github.com/vimicasa
  • https://github.com/muokicaleb
  • https://github.com/mcnamee
Press Escape to close the search panel.

Donate

Buy me a Coffee

Penetration Testing Services - Fiverr

Buy me a Coffee

Penetration Testing Services

penetration Testing Services

Web Application Security Quiz

Web Application Security Quiz

Daily Bug Bounty Writeups - Twitter

Daily Bug Bounty Writeups

Download our Latest Android Application

Guide for Penetration Testing

Daily Bug Bounty Writeups - Telegram

Daily Bug Bounty Writeups

Author

Piyush
Senior Product Security Engineer

Ethical Hacker || Penetration Tester || Gamer || Blogger || Application Security Engineer

READ ARTICLE

Donate

Buy me a Coffee

Recent Posts

  • Secrets That Pay: Hunting Valid Credentials with TruffleHog for Bug Bounties
    Secrets That Pay: Hunting Valid Credentials with TruffleHog for Bug Bounties
    August 13, 2026/
    0 Comments
  • Software Supply Chain Security in 2026: Packages, Pipelines, and Provenance
    Software Supply Chain Security in 2026: Packages, Pipelines, and Provenance
    August 10, 2026/
    0 Comments
  • I Ran Codex Security on a Shop API Lab: 14 Bugs, $1.64, Full Playbook
    I Ran Codex Security on a Shop API Lab: 14 Bugs, $1.64, Full Playbook
    August 3, 2026/
    0 Comments

Follow Us

SecurityCipher

Practical security guides, vulnerability deep-dives, and hands-on resources for bug bounty hunters and penetration testers.

Useful Links

  • Start Here
  • Cybersecurity Jobs
  • CVE Lookup
  • Bug Bounty Programs
  • Security Conferences
  • Payload Cheatsheets
  • Interview Prep
  • Report Templates
  • Blogs
  • About
  • Contact
  • RSS Feed

Recent Post

  • Secrets That Pay: Hunting Valid Credentials with TruffleHog for Bug Bounties
  • Software Supply Chain Security in 2026: Packages, Pipelines, and Provenance
  • I Ran Codex Security on a Shop API Lab: 14 Bugs, $1.64, Full Playbook
Β© 2026 SecurityCipher. All rights reserved. Privacy Policies Β· Terms & Conditions