Bug bounty automation: recon, BOLA, reporting
Project description
Bounty Hunter Toolkit
Production-ready Python/Solidity/TypeScript fix patterns for GitHub bounty issues
What's Inside
Python Security Fixes (27 patterns)
- SQL Injection → parameterized queries
- JWT None Algorithm → explicit algorithms list
- XXE → defusedxml
- SSTI → Jinja2 variables
- NoSQL Injection → type validation
- CSRF → per-session tokens
- Open Redirect → urlparse validation
- Log4j JNDI → input sanitization
- Unsafe YAML → safe_load
- Unsafe Pickle → restricted unpickler
- Docker Escape → seccomp profile
- WASM Memory → bounds checking
- Path Traversal → Path.resolve validation
- And 14 more...
Solidity Security Fixes (15 patterns)
- AgentRegistry batch operations
- GovernorAlpha quorum validation
- Timelock queue delay enforcement
- PaymentEscrow zero-amount check
- MultiTokenStaking emergencyWithdraw
- InterestRateModel event emission
- AMMPool indexed events
- CompoundVault nonReentrant
- RandomLottery refund mechanism
- PrizeSplit zero-share handling
- GasSponsorRelay ERC2771
- TokenBridge address validation
- AgentToken permit replay (chainId)
- SafeERC20 safe transfer
- Permit2Adapter gasless approvals
SDK Fixes (9 patterns)
- session.ts — 401 auto-refresh
- wallet.ts — EIP-712 typed data
- rpc.ts — JSON-RPC batch handling
- websocket.ts — reconnect dedup
- crypto.ts — secp256k1 recovery
- retry.ts — conditional retry
- deploy.py — contract deployment
- events.py — event subscription
- encoding.py — nested decoding
Usage
# Apply a fix pattern
python apply_fix.py --pattern sql_injection --file app.py
# List all patterns
python apply_fix.py --list
Results
- $417K+ bounty potential across 223+ GitHub issues
- 41-file PR on ClankerNation/OpenAgents
- 27 security fixes on ai-research
- 14 TentOfTrials bounty fixes
- 4 Nexussyn fixes ($40 USDC)
License
MIT
Links
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distributions
No source distribution files available for this release.See tutorial on generating distribution archives.
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file bounty_hunter_toolkit-1.0.0-py3-none-any.whl.
File metadata
- Download URL: bounty_hunter_toolkit-1.0.0-py3-none-any.whl
- Upload date:
- Size: 4.4 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.10.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
7888b23b16667e1dd2045e656de67987f98b9d3365d85380236db7292c6eb353
|
|
| MD5 |
be891a4dddb209ca6a3e90dda39752e0
|
|
| BLAKE2b-256 |
14ea202073be91c8afbaa0434d55d496ae5fffbdd6a64830018567d81a71351e
|
