|
| 1 | +<!DOCTYPE html> |
| 2 | +<html lang="en"> |
| 3 | +<head> |
| 4 | + <meta charset="UTF-8" /> |
| 5 | + <meta name="viewport" content="width=device-width, initial-scale=1" /> |
| 6 | + <title>Bounty VPS - Bug Bounty Easy VPS Setup</title> |
| 7 | + <!-- Bootstrap CSS --> |
| 8 | + <link href=" https://cdn.jsdelivr.net/npm/[email protected]/dist/css/bootstrap.min.css" rel=" stylesheet" /> |
| 9 | + <style> |
| 10 | + body { |
| 11 | + padding: 20px; |
| 12 | + background-color: #f8f9fa; |
| 13 | + } |
| 14 | + .header-img { |
| 15 | + display: block; |
| 16 | + margin: 0 auto; |
| 17 | + max-width: 500px; |
| 18 | + width: 100%; |
| 19 | + } |
| 20 | + .badge-img { |
| 21 | + margin: 5px; |
| 22 | + } |
| 23 | + pre { |
| 24 | + background-color: #e9ecef; |
| 25 | + padding: 15px; |
| 26 | + border-radius: 5px; |
| 27 | + } |
| 28 | + hr { |
| 29 | + margin: 40px 0; |
| 30 | + } |
| 31 | + h2, h3, h4, h5 { |
| 32 | + margin-top: 20px; |
| 33 | + } |
| 34 | + </style> |
| 35 | +</head> |
| 36 | +<body> |
| 37 | + <div class="container"> |
| 38 | + <!-- Header Section --> |
| 39 | + <div class="text-center my-4"> |
| 40 | + <a href="https://cooltext.com"> |
| 41 | + <img src="Bounty VPS.jpg" alt="Bounty-VPS" class="header-img" /> |
| 42 | + </a> |
| 43 | + <h4>Bug Bounty Easy VPS Setup</h4> |
| 44 | + <p> |
| 45 | + <a href="https://github.com/sudosuraj/Bounty-VPS" class="badge-img"> |
| 46 | + <img src="https://img.shields.io/badge/Project-Bounty--VPS-green" alt="Project Badge" /> |
| 47 | + </a> |
| 48 | + <a href="https://github.com/sudosuraj/Bounty-VPS" class="badge-img"> |
| 49 | + <img src="https://img.shields.io/static/v1?label=Update&message=V1.0&color=green" alt="Update Badge" /> |
| 50 | + </a> |
| 51 | + <a href="https://twitter.com/sudosuraj" class="badge-img"> |
| 52 | + <img src="https://img.shields.io/twitter/follow/sudosuraj?style=social" alt="Twitter Follow" /> |
| 53 | + </a> |
| 54 | + </p> |
| 55 | + </div> |
| 56 | + |
| 57 | + <!-- About Section --> |
| 58 | + <div> |
| 59 | + <h2>About</h2> |
| 60 | + <p> |
| 61 | + Bug Bounty Setup Tools On Fresh VPS. This script automatically installs top bug bounty tools and sets up the environment on a newly installed VPS or Linux Operating System. |
| 62 | + </p> |
| 63 | + <h5>This scripts:</h5> |
| 64 | + <ul> |
| 65 | + <li>Download Setup Go language</li> |
| 66 | + <li>Setup Python3 Env for pentesting</li> |
| 67 | + <li>Download most of the tools used in penetration testing and bug bounty</li> |
| 68 | + </ul> |
| 69 | + </div> |
| 70 | + |
| 71 | + <!-- Installation Section --> |
| 72 | + <div> |
| 73 | + <h2>Installation</h2> |
| 74 | + <pre><code>sudo apt-get update -y && sudo apt-get install git -y && cd /tmp && git clone https://github.com/sudosuraj/Bounty-VPS.git && cd Bounty-VPS && chmod +x bounty-vps.sh && sudo bash ./bounty-vps.sh</code></pre> |
| 75 | + </div> |
| 76 | + |
| 77 | + <!-- Tools List Section --> |
| 78 | + <div> |
| 79 | + <h2>🛠️ Tools List</h2> |
| 80 | + <p>These tools are primarily for reconnaissance, enumeration, and vulnerability scanning.</p> |
| 81 | + |
| 82 | + <h3>Reconnaissance & Enumeration</h3> |
| 83 | + <ul> |
| 84 | + <li><strong>subfinder</strong> - Subdomain discovery</li> |
| 85 | + <li><strong>assetfinder</strong> - Finds related assets (domains)</li> |
| 86 | + <li><strong>katana</strong> - Web crawler</li> |
| 87 | + <li><strong>gau</strong> - Fetches archived URLs</li> |
| 88 | + <li><strong>amass</strong> - In-depth DNS enumeration</li> |
| 89 | + <li><strong>crobat</strong> - Subdomain enumeration</li> |
| 90 | + <li><strong>chaos</strong> - Enumerates subdomains from ProjectDiscovery’s Chaos dataset</li> |
| 91 | + <li><strong>gotator</strong> - Permutation-based subdomain generator</li> |
| 92 | + <li><strong>cf-check</strong> - Cloudflare IP checker</li> |
| 93 | + <li><strong>gowitness</strong> - Web screenshot tool</li> |
| 94 | + <li><strong>httpx</strong> - HTTP probing</li> |
| 95 | + <li><strong>httprobe</strong> - Probes for HTTP servers</li> |
| 96 | + <li><strong>gospider</strong> - Web spider</li> |
| 97 | + <li><strong>subzy</strong> - Subdomain takeover scanner</li> |
| 98 | + </ul> |
| 99 | + |
| 100 | + <h3>Web & Network Scanning</h3> |
| 101 | + <ul> |
| 102 | + <li><strong>dnsx</strong> - DNS resolver and probe</li> |
| 103 | + <li><strong>puredns</strong> - Fast recursive DNS resolver</li> |
| 104 | + <li><strong>shuffledns</strong> - DNS enumeration using bruteforce and wordlist</li> |
| 105 | + <li><strong>ffuf</strong> - Fast web fuzzer</li> |
| 106 | + <li><strong>gobuster</strong> - Directory, DNS, and VHost busting tool</li> |
| 107 | + <li><strong>nuclei</strong> - Vulnerability scanner</li> |
| 108 | + <li><strong>interactsh-client</strong> - Interaction-based payloads</li> |
| 109 | + <li><strong>httpx</strong> - HTTP probing</li> |
| 110 | + </ul> |
| 111 | + |
| 112 | + <h3>OSINT & Data Gathering</h3> |
| 113 | + <ul> |
| 114 | + <li><strong>waybackurls</strong> - Fetch URLs from the Wayback Machine</li> |
| 115 | + <li><strong>socialhunter</strong> - Social media data finder</li> |
| 116 | + <li><strong>github-subdomains</strong> - Finds subdomains in GitHub repositories</li> |
| 117 | + <li><strong>bxss</strong> - Blind XSS payload generator</li> |
| 118 | + <li><strong>Jeeves</strong> - Enumeration tool</li> |
| 119 | + <li><strong>tok</strong> - Enumeration tool</li> |
| 120 | + </ul> |
| 121 | + |
| 122 | + <h3>Scripting & Miscellaneous Utilities</h3> |
| 123 | + <ul> |
| 124 | + <li><strong>anew</strong> - Appends unique lines to a file</li> |
| 125 | + <li><strong>qsreplace</strong> - Replaces query string values</li> |
| 126 | + <li><strong>gron</strong> - Converts JSON into greppable data</li> |
| 127 | + <li><strong>fff</strong> - Fast file finder</li> |
| 128 | + <li><strong>unfurl</strong> - Extracts URLs from input</li> |
| 129 | + <li><strong>mapcidr</strong> - Subnetting tool</li> |
| 130 | + <li><strong>cent</strong> - Nuclei templates manager</li> |
| 131 | + <li><strong>notify</strong> - Notification manager for vulnerabilities</li> |
| 132 | + </ul> |
| 133 | + |
| 134 | + <h3>Injection & Security Testing</h3> |
| 135 | + <ul> |
| 136 | + <li><strong>dalfox</strong> - XSS scanner</li> |
| 137 | + <li><strong>kxss</strong> - Finds potential XSS points</li> |
| 138 | + <li><strong>Gxss</strong> - XSS payload generator</li> |
| 139 | + <li><strong>error-sql</strong> - SQL injection error-based tester</li> |
| 140 | + <li><strong>time-sql</strong> - SQL injection time-based tester</li> |
| 141 | + </ul> |
| 142 | + <hr /> |
| 143 | + |
| 144 | + <!-- Python Tools Section --> |
| 145 | + <h2>🐍 Python Tools</h2> |
| 146 | + <p>These tools are primarily for web application testing and OSINT.</p> |
| 147 | + |
| 148 | + <h3>Web & Application Testing</h3> |
| 149 | + <ul> |
| 150 | + <li><strong>arjun</strong> - HTTP parameter discovery tool</li> |
| 151 | + <li><strong>GitHacker</strong> - Finds secrets in Git repositories</li> |
| 152 | + <li><strong>SecretFinder</strong> - Finds sensitive keys in JavaScript files</li> |
| 153 | + <li><strong>LinkFinder</strong> - Extracts URLs from JavaScript files</li> |
| 154 | + <li><strong>uro</strong> - URL parser</li> |
| 155 | + <li><strong>urless</strong> - URL manipulation tool</li> |
| 156 | + </ul> |
| 157 | + |
| 158 | + <h3>OSINT & Data Extraction</h3> |
| 159 | + <ul> |
| 160 | + <li><strong>crtsh</strong> - Certificate transparency log searcher</li> |
| 161 | + <li><strong>jsbeautifier</strong> - Beautifies JavaScript code</li> |
| 162 | + <li><strong>lxml</strong> - XML and HTML parsing library</li> |
| 163 | + </ul> |
| 164 | + <hr /> |
| 165 | + |
| 166 | + <!-- Kali Linux Tools Section --> |
| 167 | + <h2>🧰 Kali Linux Tools</h2> |
| 168 | + <p>These tools cover a broad spectrum of penetration testing, including network scanning, web application assessment, and wireless security.</p> |
| 169 | + |
| 170 | + <h3>Network Scanning</h3> |
| 171 | + <ul> |
| 172 | + <li><strong>nmap</strong> - Network scanner</li> |
| 173 | + <li><strong>masscan</strong> - Fast port scanner</li> |
| 174 | + <li><strong>p0f</strong> - Passive OS fingerprinting</li> |
| 175 | + <li><strong>dnsenum</strong> - DNS enumeration tool</li> |
| 176 | + <li><strong>dnsmap</strong> - DNS map generator</li> |
| 177 | + <li><strong>dnstracer</strong> - Traces DNS path</li> |
| 178 | + <li><strong>wireshark</strong> - Network packet analyzer</li> |
| 179 | + </ul> |
| 180 | + |
| 181 | + <h3>Web Application Security</h3> |
| 182 | + <ul> |
| 183 | + <li><strong>sqlmap</strong> - SQL injection tool</li> |
| 184 | + <li><strong>wpscan</strong> - WordPress vulnerability scanner</li> |
| 185 | + <li><strong>arachni</strong> - Web application vulnerability scanner</li> |
| 186 | + <li><strong>skipfish</strong> - Web application security scanner</li> |
| 187 | + <li><strong>wfuzz</strong> - Web fuzzer</li> |
| 188 | + <li><strong>w3af</strong> - Web application attack and audit framework</li> |
| 189 | + </ul> |
| 190 | + |
| 191 | + <h3>Exploitation Tools</h3> |
| 192 | + <ul> |
| 193 | + <li><strong>metasploit</strong> - Exploitation framework</li> |
| 194 | + <li><strong>beef-xss</strong> - Browser exploitation framework</li> |
| 195 | + <li><strong>backdoor-factory</strong> - Injects backdoors into binaries</li> |
| 196 | + <li><strong>weevely</strong> - Web shell generator</li> |
| 197 | + </ul> |
| 198 | + |
| 199 | + <h3>Password Cracking</h3> |
| 200 | + <ul> |
| 201 | + <li><strong>hash-identifier</strong> - Identifies hash types</li> |
| 202 | + <li><strong>john</strong> - Password cracker</li> |
| 203 | + <li><strong>rainbowcrack</strong> - Uses rainbow tables for password cracking</li> |
| 204 | + <li><strong>patator</strong> - Multi-purpose brute-forcer</li> |
| 205 | + </ul> |
| 206 | + |
| 207 | + <h3>Wireless Security</h3> |
| 208 | + <ul> |
| 209 | + <li><strong>aircrack-ng</strong> - Wireless security auditing</li> |
| 210 | + <li><strong>kismet</strong> - Wireless network detector</li> |
| 211 | + <li><strong>pixiewps</strong> - Offline WPS attack tool</li> |
| 212 | + <li><strong>reaver</strong> - WPA attack tool</li> |
| 213 | + </ul> |
| 214 | + |
| 215 | + <h3>OSINT & Reconnaissance</h3> |
| 216 | + <ul> |
| 217 | + <li><strong>theharvester</strong> - Collects emails, subdomains, hosts, and more</li> |
| 218 | + <li><strong>recon-ng</strong> - Reconnaissance framework</li> |
| 219 | + <li><strong>metagoofil</strong> - Collects public documents from Google</li> |
| 220 | + <li><strong>fierce</strong> - DNS reconnaissance tool</li> |
| 221 | + <li><strong>firewalk</strong> - Traces firewall rules</li> |
| 222 | + </ul> |
| 223 | + |
| 224 | + <!-- Final Note --> |
| 225 | + <h2>Final Note</h2> |
| 226 | + <p> |
| 227 | + Once the script completes, your VPS will be fully set up for penetration testing and reconnaissance, with a wide range of tools installed. |
| 228 | + </p> |
| 229 | + </div> |
| 230 | + </div> |
| 231 | + <!-- Bootstrap JS Bundle --> |
| 232 | + <script src=" https://cdn.jsdelivr.net/npm/[email protected]/dist/js/bootstrap.bundle.min.js" ></script> |
| 233 | +</body> |
| 234 | +</html> |
0 commit comments