Generate OSINT gathering workflows for bug bounty hunting by automating reconnaissance processes to collect intelligence on target domains for security assessments.
MIT
500,835 tools. Updated 2026-08-31 19:13
"A tool for assisting with bug bounty hunting" matching MCP tools:
- Automates reconnaissance workflows for bug bounty hunting by gathering OSINT, testing vulnerabilities, and prioritizing security assessments based on target scope and domain.MIT
- Get a curated snapshot of live audit competitions and bug-bounty programs from Code4rena, Cantina, Sherlock, and direct-protocol channels. Helps solo wardens decide which contests to enter.MIT
- Retrieve all accessible bug bounty programs on Intigriti, displaying program name, company, status, and rewards.MIT
- Retrieve complete details of a specific bug bounty by ID, including description, expected vs actual behavior, reproduction steps, and tech stack to understand and address the issue.MIT
- Retrieve the full content of a file from the bug bounty knowledge base by specifying its relative path. Use after searching to access complete details.GPL 3.0
Matching MCP Servers
- AlicenseNot gradedqualityCmaintenanceAutomates bug bounty hunting across Web2 and Web3 platforms, performing recon, vulnerability scanning, Solidity audits, and report generation.MIT
- FlicenseNot gradedqualityDmaintenanceA comprehensive MCP server for automated bug bounty hunting and security reconnaissance, featuring over 28 specialized tools for subdomain discovery, vulnerability scanning, and traffic analysis. It integrates automated scope validation and professional reporting across multiple platforms like HackerOne and Bugcrowd to streamline security testing.5
Matching MCP Connectors
AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.
Agent-to-agent bounty board: post tasks with stated rewards, fill them, first accepted wins.
- Identify GitHub repos with anomalous star velocity and fork surges before mainstream discovery. Uncover early signals for trend hunting, VC scouting, and developer tool discovery.MIT
- Find bug bounty techniques, payloads, and bypass methods by searching across multiple knowledge sources.GPL 3.0
- List all submissions for a bounty, showing developer information and fix descriptions. Provide a bounty ID to view submissions for that bounty.MIT
- Retrieve real-world bug bounty reports by type: accepted for methodology and impact examples, rejected to learn what not to submit. Filter by vulnerability class.GPL 3.0
- Aggregate statistics on the active bounty pool: total count, breakdowns by language and type (bug fix vs feature), and total dollar value.Apache 2.0
- Post a bug bounty for issues in AI-generated code. Free bounties go live immediately; paid bounties return a checkout URL to complete payment.MIT
- Access structured bug bounty testing methodologies and checklists. Get step-by-step approaches for testing vulnerability types or general web applications.GPL 3.0
- Retrieve Harrison Richardson's battle-tested bug bounty methodology from the DEFCON 32 workshop. Covers Recon, Injection, Logic, and Cloud pillars for guiding security testing.GPL 3.0
- Submit completed work for a bounty with a proof URL and description of what you built.MIT
- Evaluate the acceptance likelihood of a bug bounty finding by analyzing historical patterns. Provide vulnerability details to receive an assessment.GPL 3.0
- Retrieve detailed information about a specific bug bounty program, including scope, rewards, policy, response targets, and submission statistics.MIT
- Explore the directory structure of the bug bounty knowledge base to discover available topics and categories.GPL 3.0
- Claim a bounty to work on it by providing the bounty ID and your Ethereum wallet address.MIT
- Submit completed work for a Gib Work bounty. Provide your Solana wallet, bounty ID, and submission URL to claim payout.MIT