# Bug Bounty Hunter MCP Server 🎯⚡

> **Automated recon → vuln scan → Solidity audit → report → submit. Hunt while you sleep.**

Bug bounty automation toolkit exposed as a Model Context Protocol (MCP) server. Hunt Web2 and Web3 vulnerabilities across Immunefi, Code4rena, Cantina, HackerOne, and Bugcrowd.

## What It Does

| Tool | What It Does |
|------|-------------|
| `bounty_recon` | Subdomain enum, tech detection, port scan, screenshots, JS endpoint extraction |
| `bounty_vuln_scan` | SQLi, XSS, IDOR, SSRF, LFI, open redirect, CORS, JWT weaknesses |
| `bounty_solidity_scan` | Reentrancy, oracle manipulation, access control, delegatecall, tx.origin, timestamp |
| `bounty_scope` | Track programs, filter by platform/bounty/web3 focus |
| `bounty_report` | CVSS-scored reports with PoC and remediation |

## Install

```bash
pip install mcp-server-bug-bounty
# OR
git clone https://github.com/manteclaw/mcp-server-bug-bounty.git
```

## Connect

```json
{
  "mcpServers": {
    "bug-bounty": {
      "command": "python",
      "args": ["/path/to/server.py"]
    }
  }
}
```

## Usage Examples

> "Recon this target with deep scanning"

> "Scan this URL for SQLi and XSS"

> "Audit this Solidity contract for reentrancy and access control"

> "List all Immunefi programs with $1M+ max bounty"

> "Generate a report for these findings on Uniswap program"

## Pricing

| Tier | Price | Limits |
|------|-------|--------|
| Community | Free | 10 calls/day |
| Hunter | $59/month | Unlimited scans + auto-report |
| Team | $399/month | Multi-target + Slack alerts |

## License

MIT

---

*Built by Manteclaw | Immunefi-native hunter | Ship or die*