njmulsqb / bbht

Fork of nahamsec's bbht updated and enhanced with latest tools and commands

BBHT

Bug Bounty Hunting Tools is a script to install the most popular tools used while looking for vulnerabilities for a bug bounty program. This version is modified according to my preferences, I have added some additional tools and updated some of the commands.

Tools

• Amass
• Asnlookup
• Anew
• Byp4xx
• Crobat
• dirsearch
• EyeWitness
• ffuf
• Findomain
• Httpx
• JSParser
• knockpy
• lazys3
• LinkFinder
• Massdns
• Naabu
• Nuclei
• OneForAll
• PureDNS
• recon_profile
• reconFTW
• Seclists collection
• sqlmap-dev
• Subfinder
• Sublist3r
• teh_s3_bucketeers
• Unfurl
• virtual-host-discovery
• Waybackurls
• Webscreenshot.py

This script also grabs the aliases created and published here: https://github.com/njmulsqb/Recon-Aliases

Installing

• git clone https://github.com/njmulsqb/bbht.git
• cd bbht
• chmod +x install.sh
• ./install.sh

To Do

• Replace pip installation of S3Scanner tool with source installation
• Analyze https://github.com/amec0e/BBIS/blob/main/BBIS and see what additional things I can add into my bbht
• Snap is not available on WSL, so snap commands arent working there. Check its alternative

bbht's Issues

Test script on linux

This script is yet to be tested on a live linux preferably Ubuntu/Kali/Parrot
It should:

• clone all the repos in ~/tools/
• install all the tools successfully
• produce no errors
• include aliases in .bashrc

Good issue for beginners, just clone this repository and run on your system.

Findomain failure

Findomain fails to install because URL to binary is incorrect.
Ref: https://github.com/Findomain/Findomain/releases/tag/9.0.4