Security testing tool · by Saqib Sarwar

Big Bounty

Big Bounty is a browser-based security testing tool developed by Saqib Sarwar. Its public interface offers Basic, Advanced and Custom scan modes, and every finding is backed by a live HTTP or DNS request, with the raw evidence and a reproduction command included. Use it only on systems you are authorized to test.

Open live project(opens in a new tab)View repository(opens in a new tab)All projects

Shield — scanning for weaknesses. Model by Quaternius via poly.pizza (CC0). A real render from this site's 3D bench — not a screenshot of the app.

01Overview

What it is

A browser-based security testing tool with Basic, Advanced and Custom scan modes. Every finding carries the raw HTTP or DNS evidence and a reproduction command. Use it only on systems you are authorized to test.

02Details

Highlights

  • Basic mode: DNS reconnaissance, subdomain discovery from certificate logs, directory discovery, security headers, CORS checks and technology fingerprinting.
  • Advanced mode adds subdomain brute-forcing, XSS reflection and error-based SQL injection probes, open-redirect checks and CVE matching against the NVD.
  • Custom mode runs the advanced checks plus your own paths.
  • An Email Exposure mode checks whether your own email appears in known breaches, verified by ownership.
  • Every finding comes with the raw HTTP/DNS evidence and a reproduction curl command.

Built with

  • JavaScript

Source code

GitHub repositorygithub.com/Saqibsarwar12/big-bounty(opens in a new tab)

Live project

big-bounty.vercel.app/(opens in a new tab)

Created by

Saqib Sarwar · source repository started August 2026. Big Bounty is one of the projects by Saqib Sarwar.

03Portfolio

More projects by Saqib Sarwar

AI infrastructureSaki GatewayAn OpenAI-compatible AI gateway with multi-provider routing, fallback, rate limiting, per-user credits, request logs and cost analytics — plus a dashboard served next to the API.GameKNOD CUPSA 2D side-view survival endless runner built with Flutter and the Flame engine — procedurally generated monsoon-soaked world, combat, vehicles, puzzles, an inventory and shop economy, NPCs and quests, with an auto-save system, targeting 60 FPS on low-end Android.

About the developer

Big Bounty was built by Saqib Sarwar, a student software developer who builds websites, AI tools and open-source projects. See the portfolio homepage or browse more source code on GitHub (Saqibsarwar12).