Tools

    Invoke-Recon #ActiveDirectory

    CORScanner #Web

    Bounty-Automation #Web

    Not released yet.
    It aims at automating the discovery of subdomains and common vulnerabilities thanks to many tools orchestrated thanks to Apache Airflow.

    A lot of bugbounty tools are existing out there, each with their specific advantages and drawbacks.
    The most important thing according to me is to select the best of them and to integrate them in a worflow.

    I aim at spending the least time as possible on reco, and being notified on my Discord channels if something interesting has been found.

    For example: