Bountyboy

Bug-bounty recon and vulnerability discovery is repetitive and easy to do inconsistently by hand. Running the same checks across many targets - subdomains, common web vulnerabilities, misconfigurations - eats hours and invites mistakes.

I built a modular toolkit of 25+ independent scanning modules (SSRF, IDOR, JWT, SQLi, XSS, subdomain takeover, and more) that run in parallel, with a Docker-based lab for safe validation and an automated reporting layer that aggregates findings into a single readable report.

Turned an afternoon of manual recon into a single command. The parallel design cut scan time dramatically, and the containerized lab meant every module could be tested against known-vulnerable targets before running against real scope.