Security testing tool
Big Bounty
Big Bounty is a browser-based security testing tool developed by Saqib Sarwar. Its public interface offers Basic, Advanced and Custom scan modes and reports findings with evidence and a reproduction command. Use it only on systems you are authorized to test.
Overview
What it is
A browser-based security testing tool with basic and advanced scan modes. Findings include HTTP/DNS evidence and a reproduction command; use it only on systems you are authorized to test.
Details
Highlights
- Basic mode covers reconnaissance, directory discovery, headers, CORS and technology detection.
- Advanced mode adds security checks including XSS, SQL injection and CVEs.
- Findings include HTTP/DNS evidence and a reproduction curl command.
Live project
big-bounty.vercel.app/(opens in a new tab)Big Bounty is part of Saqib Sarwar's portfolio. More projects sit in the projects section.