## https://sploitus.com/exploit?id=162F180D-9B00-5484-BB77-3E6F508C797B
# ๐ฏ Bug Bounty Recon Toolkit
Automated recon toolkit for authorized bug bounty testing on Indonesian platforms.
## โ ๏ธ Legal Disclaimer
**Only use against targets you are AUTHORIZED to test.**
Unauthorized testing is illegal under:
- Indonesian UU ITE (UU No. 11/2008) โ ancaman penjara 6-12 tahun
- Computer Misuse Act (various jurisdictions)
Always register on the bug bounty platform (HackerOne/Bugcrowd) and read the program's scope/policy BEFORE testing.
## ๐ Quick Start
```bash
cd /root/bugbounty-toolkit
source venv/bin/activate
# Interactive menu
python3 bounty.py
# Or use individual tools directly
python3 subdomains.py tokopedia.com
python3 recon.py api.gojek.com
python3 vulnscan.py "https://target.com/page?id=1"
```
## ๐ ๏ธ Tools
### 1. Subdomain Enumeration (`subdomains.py`)
```bash
python3 subdomains.py [wordlist] [--threads N]
```
- DNS bruteforce with 310+ common subdomains
- Async, multi-threaded
- Results saved to `./output/`
### 2. Quick Recon (`recon.py`)
```bash
python3 recon.py
```
- Port scanning (30+ common ports)
- Technology fingerprinting (50+ signatures)
- Security header analysis
- SSL certificate check
- Common sensitive paths
### 3. Vulnerability Scanner (`vulnscan.py`)
```bash
python3 vulnscan.py
```
- **SQLi** โ Error-based + Time-based detection
- **XSS** โ Reflected XSS + SSTI detection
- **Open Redirect** โ Parameter-based redirect testing
- **CORS** โ Misconfiguration detection
- **Sensitive Files** โ .env, .git, backups, configs
### 4. Main CLI (`bounty.py`)
```bash
python3 bounty.py
```
- Interactive menu for all tools
- Indonesian target reference list
- Full scan mode (all tools combined)
## ๐ฏ Indonesian Bug Bounty Targets
| Company | Platform | Scope | Payout |
|---------|----------|-------|--------|
| Tokopedia | HackerOne | *.tokopedia.com | $50-2,000+ |
| Gojek/GoTo | HackerOne | *.gojek.com, GoPay | $100-5,000+ |
| Traveloka | Bugcrowd | *.traveloka.com | $50-1,500+ |
| Bukalapak | HackerOne | *.bukalapak.com | $50-1,000+ |
| Shopee ID | HackerOne | *.shopee.co.id | $100-10,000+ |
| Tokocrypto | HackerOne | *.tokocrypto.com | varies |
| Grab | HackerOne | *.grab.com | $100-5,000+ |
## ๐ Output
All results saved to `./output/` as JSON:
- `subdomains__.json`
- `vulns_.json`
## ๐ง Dependencies
- Python 3.8+
- aiohttp, dnspython, rich, colorama, pyyaml
## ๐ก Tips
1. **Start with subdomains** โ find hidden dev/staging environments
2. **Check sensitive files first** โ .env, .git, backups = instant bounty
3. **Test parameters** โ append `?id=1` to URLs, then test SQLi/XSS
4. **Register on platforms first** โ HackerOne, Bugcrowd, Intigriti
5. **Read program scope** โ only test what's in scope
6. **Be polite** โ rate limiting built-in, don't DDoS
7. **Document everything** โ screenshots, HTTP requests, payloads used
8. **Report responsibly** โ follow platform disclosure guidelines
## ๐ Bounty Hunting Workflow
```
1. Register on HackerOne/Bugcrowd
2. Pick target from Indonesian programs list
3. Run subdomain enumeration
4. Run quick recon on interesting subdomains
5. Check sensitive files (.env, .git, backups)
6. Test parameters for SQLi/XSS
7. Document findings with evidence
8. Submit report via platform
9. Wait for triage (usually 1-7 days)
10. Get paid ๐ฐ
```