Practical Bug Bounty — TCM Academy | Automated Tools

1- Automated Scanners

Important Pre-cautions:

Be careful while running automated tools, because they might do some issue.Make sure the site you’re testing is in development side.Alot of bug bounty programs doesnt allow the usage of automated scanners. Read rules first.Be carefull while running scanners, focus more on manual scanners.Understand Rules Of Engagements carefully.

Some Free and Commercial Tools:

2- Scripting and Automation

tcm-sec.com:

Do we have any subdomains? subfinder, assetfinder, amassare those subdomains alive? httprobetake screenshots of alive subdomains… gowitnessnmap alive subdomains? open ports

Script:

GITHUB | I will add my bugbounty script here soon! In’Sha’ALLAH