.
675 |
--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
1 | # BHEH's ScopeHunter
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 | **Find Your Next Target with ScopeHunter!**
10 |
11 | ScopeHunter is written by Chris "SaintDruG" Abou-Chabke from Black Hat Ethical Hacking and is designed for Red Teams and Bug Bounty Hunters!
12 |
13 | Shout out and thanks to ShadowDevnotreal
14 |
15 |
16 |
17 | # Description
18 |
19 | ScopeHunter is a powerful and efficient tool for finding targets for bug bounty programs. It uses the latest databases from providers like HackerOne, BugCrowd, Intigriti, and YesWeHack to give you accurate and up-to-date results. The script is easy to use and can be run from the command line, making it an ideal choice for security researchers, bug bounty hunters, and penetration testers.
20 |
21 | The Tool is designed to work quickly and efficiently, allowing you to find the targets you need in no time. With ScopeHunter, you can be confident that you are using the latest databases, even if new providers are added.
22 |
23 |
24 | # Features:
25 |
26 | This tool uses a simple and intuitive flow, making it easy to understand how it works. Here are four key features of ScopeHunter.sh:
27 |
28 | • Latest Databases: ScopeHunter.sh uses the latest databases from providers like HackerOne, BugCrowd, Intigriti, and YesWeHack to give you accurate and up-to-date results.
29 |
30 | • Easy to Use: The script is easy to use and can be run from the command line, making it an ideal choice for security researchers, bug bounty hunters, and penetration testers.
31 |
32 | • Fast and Efficient: ScopeHunter.sh is designed to work quickly and efficiently, allowing you to find the targets you need in no time.
33 |
34 | • Intuitive Flow: This tool uses a simple and intuitive flow, making it easy to understand how it works.
35 |
36 | With ScopeHunter.sh, you can focus on finding the targets you need for your bug bounty programs without having to worry about outdated or incorrect data. The program is an essential tool for anyone looking to take their bug bounty hunting to the next level.
37 |
38 | Hackers be like:
39 |
40 | 
41 |
42 |
43 | # Requirements:
44 |
45 | • lolcat
46 |
47 | • cURL: This tool is commonly pre-installed on Kali Linux and Ubuntu, but can be installed by running apt-get install curl on Ubuntu or brew install curl on MacOS
48 |
49 | # Installation
50 |
51 | `git clone https://github.com/blackhatethicalhacking/ScopeHunter.git`
52 |
53 | `cd ScopeHunter`
54 |
55 | `chmod +x ScopeHunter.sh`
56 |
57 | `./ScopeHunter.sh`
58 |
59 | # Screenshot
60 |
61 | **Main Menu**
62 |
63 |
64 |
65 |
66 | # Compatibility:
67 |
68 | This tool has been tested on Kali Linux, Ubuntu and MacOS.
69 |
70 | # Disclaimer
71 |
72 | This tool is provided for educational and research purpose only. The author of this project are no way responsible for any misuse of this tool.
73 | We use it to test under NDA agreements with clients and their consents for pentesting purposes and we never encourage to misuse or take responsibility for any damage caused !
74 |
75 |
78 |
79 |
80 | Introducing our Merch Store, designed for the Offensive Security community. Explore a curated collection of apparel and drinkware, perfect for both professionals and enthusiasts. Our selection includes premium t-shirts, hoodies, and mugs, each featuring bold hacking-themed slogans and graphics that embody the spirit of red teaming and offensive security.
81 | Hack with style and showcase your dedication to hacker culture with gear that’s as dynamic and resilient as you are. 😊
82 |
83 |
84 |
85 |
86 |
87 |
88 |
--------------------------------------------------------------------------------
/ScopeHunter.sh:
--------------------------------------------------------------------------------
1 | #!/bin/bash
2 | curl --silent "https://raw.githubusercontent.com/blackhatethicalhacking/Subdomain_Bruteforce_bheh/main/ascii.sh" | lolcat
3 | echo ""
4 | # Generate a random Sun Tzu quote for offensive security
5 |
6 | # Array of Sun Tzu quotes
7 | quotes=("The supreme art of war is to subdue the enemy without fighting." "All warfare is based on deception." "He who knows when he can fight and when he cannot, will be victorious." "The whole secret lies in confusing the enemy, so that he cannot fathom our real intent." "To win one hundred victories in one hundred battles is not the acme of skill. To subdue the enemy without fighting is the acme of skill.")
8 |
9 | # Get a random quote from the array
10 | random_quote=${quotes[$RANDOM % ${#quotes[@]}]}
11 |
12 | # Check if lolcat, fortune-mod, figlet and curl are installed
13 | if ! command -v lolcat > /dev/null; then
14 | echo "lolcat not found, installing..."
15 | if command -v dnf > /dev/null; then
16 | sudo dnf install -y lolcat
17 | elif command -v yum > /dev/null; then
18 | sudo yum install -y lolcat
19 | elif command -v apt-get > /dev/null; then
20 | sudo apt-get install -y lolcat
21 | else
22 | echo "Error: package manager not found, please install lolcat manually"
23 | exit 1
24 | fi
25 | fi
26 |
27 | if ! command -v fortune > /dev/null; then
28 | echo "fortune-mod not found, installing..."
29 | if command -v dnf > /dev/null; then
30 | sudo dnf install -y fortune-mod
31 | elif command -v yum > /dev/null; then
32 | sudo yum install -y fortune-mod
33 | elif command -v apt-get > /dev/null; then
34 | sudo apt-get install -y fortune-mod
35 | else
36 | echo "Error: package manager not found, please install fortune-mod manually"
37 | exit 1
38 | fi
39 | fi
40 |
41 | if ! command -v figlet > /dev/null; then
42 | echo "figlet not found, installing..."
43 | if command -v dnf > /dev/null; then
44 | sudo dnf install -y figlet
45 | elif command -v yum > /dev/null; then
46 | sudo yum install -y figlet
47 | elif command -v apt-get > /dev/null; then
48 | sudo apt-get install -y figlet
49 | else
50 | echo "Error: package manager not found, please install figlet manually"
51 | exit 1
52 | fi
53 | fi
54 |
55 | if ! command -v curl > /dev/null; then
56 | echo "curl not found, installing..."
57 | if command -v dnf > /dev/null; then
58 | sudo dnf install -y curl
59 | elif command -v yum > /dev/null; then
60 | sudo yum install -y curl
61 | elif command -v apt-get > /dev/null; then
62 | sudo apt-get install -y curl
63 | else
64 | echo "Error: package manager not found, please install curl manually"
65 | exit 1
66 | fi
67 | fi
68 |
69 | echo "All dependencies installed successfully"
70 |
71 | # Print the quote
72 | echo "Offensive security tip: $random_quote - Sun Tzu" | lolcat
73 | sleep 1
74 | echo "MEANS, IT'S ☕ 1337 ⚡ TIME, 369 ☯ " | lolcat
75 | sleep 1
76 | curl --silent "https://raw.githubusercontent.com/blackhatethicalhacking/ScopeHunter/main/ScopeHunter_ascii.sh" | lolcat
77 | echo ""
78 | echo "[YOUR ARE USING ScopeHunter.sh] - (v1.0) CODED BY Chris 'SaintDruG' Abou-Chabké WITH ❤ FOR blackhatethicalhacking.com for Educational Purposes only!" | lolcat
79 | sleep 1
80 | #check if the user is connected to the internet
81 | tput bold;echo "CHECKING IF YOU ARE CONNECTED TO THE INTERNET!" | lolcat
82 | # Check connection
83 | wget -q --spider https://google.com
84 | if [ $? -ne 0 ];then
85 | echo "++++ CONNECT TO THE INTERNET BEFORE RUNNING ScopeHunter.sh!" | lolcat
86 | exit 1
87 | fi
88 | tput bold;echo "++++ CONNECTION FOUND, LET'S GO!" | lolcat
89 |
90 | function main_menu() {
91 | # Define arrays for providers and data urls
92 | providers=( "HackerOne" "BugCrowd" "Intigriti" "YesWeHack" )
93 | data_urls=(
94 | "https://raw.githubusercontent.com/arkadiyt/bounty-targets-data/main/data/hackerone_data.json"
95 | "https://raw.githubusercontent.com/arkadiyt/bounty-targets-data/main/data/bugcrowd_data.json"
96 | "https://raw.githubusercontent.com/arkadiyt/bounty-targets-data/main/data/intigriti_data.json"
97 | "https://raw.githubusercontent.com/arkadiyt/bounty-targets-data/main/data/yeswehack_data.json"
98 | )
99 |
100 | # Show providers
101 | echo "Available Providers:"
102 | for provider in "${providers[@]}"; do
103 | echo -e "\033[33m$provider\033[0m"
104 | done
105 |
106 | # Ask for target company name
107 | echo -e "\033[32mEnter target company name: \033[0m"
108 | read company
109 |
110 | # Loop through each provider and check for results
111 | for i in "${!providers[@]}"; do
112 | provider=${providers[i]}
113 | data_url=${data_urls[i]}
114 |
115 | filtered_targets=$(curl $data_url 2>/dev/null | grep -i $company | awk -F'"' '{print $4}')
116 |
117 | if [[ ! -z $filtered_targets ]]; then
118 | count=$(echo "$filtered_targets" | wc -l)
119 | echo -e "\033[36mFound \033[31m$count\033[0m \033[36mtarget(s) in $provider. Results saved under \033[33m$company\033[0m"
120 |
121 | mkdir -p "${company}"
122 | echo "${filtered_targets}" > "${company}/${provider}_${company}.txt"
123 | else
124 | echo -e "\033[36m${company} not found in the database on \033[36m${provider}"
125 | fi
126 | done
127 | # Ask user if they want to continue or exit
128 | echo -e "\033[32mDo you want to search again? (yes/no) \033[0m"
129 | read choice
130 |
131 | if [[ "$choice" =~ ^[Yy][EeSs]*$ ]]; then
132 | main_menu
133 | elif [[ "$choice" =~ ^[Nn][Oo]*$ ]]; then
134 | exit 0
135 | else
136 | echo -e "\033[31mInvalid input. Please enter yes or no.\033[0m"
137 | continue_or_exit
138 | fi
139 | }
140 | main_menu
141 |
142 | #written by Chris "SaintDruG" Abou-Chabke for blackhatethicalhacking.com 2023
143 |
--------------------------------------------------------------------------------
/ScopeHunter_ascii.sh:
--------------------------------------------------------------------------------
1 | [38;5;164m [38;5;164m_[38;5;164m_[38;5;164m_[38;5;164m_[38;5;164m [38;5;164m [38;5;164m [38;5;128m [38;5;129m [38;5;129m [38;5;129m [38;5;129m [38;5;129m [38;5;129m [38;5;129m [38;5;129m [38;5;129m [38;5;93m [38;5;93m [38;5;93m [38;5;93m [38;5;93m [38;5;93m [38;5;93m [38;5;93m [38;5;93m [38;5;93m [38;5;99m_[38;5;63m [38;5;63m [38;5;63m [38;5;63m_[38;5;63m [38;5;63m [38;5;63m [38;5;63m [38;5;63m [38;5;63m [38;5;69m [38;5;33m [38;5;33m [38;5;33m [38;5;33m [38;5;33m [38;5;33m [38;5;33m_
2 | [38;5;164m/[38;5;164m [38;5;164m_[38;5;164m_[38;5;164m_[38;5;128m|[38;5;129m [38;5;129m [38;5;129m_[38;5;129m_[38;5;129m_[38;5;129m [38;5;129m_[38;5;129m_[38;5;129m_[38;5;93m [38;5;93m [38;5;93m_[38;5;93m [38;5;93m_[38;5;93m_[38;5;93m [38;5;93m [38;5;93m [38;5;93m_[38;5;99m_[38;5;63m_[38;5;63m|[38;5;63m [38;5;63m|[38;5;63m [38;5;63m|[38;5;63m [38;5;63m|[38;5;63m_[38;5;63m [38;5;69m [38;5;33m [38;5;33m_[38;5;33m [38;5;33m_[38;5;33m [38;5;33m_[38;5;33m_[38;5;33m [38;5;33m|[38;5;33m [38;5;39m|[38;5;39m_[38;5;39m [38;5;39m_[38;5;39m_[38;5;39m_[38;5;39m [38;5;39m_[38;5;39m [38;5;38m_[38;5;44m_
3 | [38;5;164m\[38;5;164m_[38;5;128m_[38;5;129m_[38;5;129m [38;5;129m\[38;5;129m [38;5;129m/[38;5;129m [38;5;129m_[38;5;129m_[38;5;129m/[38;5;93m [38;5;93m_[38;5;93m [38;5;93m\[38;5;93m|[38;5;93m [38;5;93m'[38;5;93m_[38;5;93m [38;5;93m\[38;5;99m [38;5;63m/[38;5;63m [38;5;63m_[38;5;63m [38;5;63m\[38;5;63m [38;5;63m|[38;5;63m_[38;5;63m|[38;5;63m [38;5;69m|[38;5;33m [38;5;33m|[38;5;33m [38;5;33m|[38;5;33m [38;5;33m|[38;5;33m [38;5;33m'[38;5;33m_[38;5;33m [38;5;39m\[38;5;39m|[38;5;39m [38;5;39m_[38;5;39m_[38;5;39m/[38;5;39m [38;5;39m_[38;5;39m [38;5;38m\[38;5;44m [38;5;44m'[38;5;44m_[38;5;44m_[38;5;44m|
4 | [38;5;129m [38;5;129m_[38;5;129m_[38;5;129m_[38;5;129m)[38;5;129m [38;5;129m|[38;5;129m [38;5;129m([38;5;93m_[38;5;93m|[38;5;93m [38;5;93m([38;5;93m_[38;5;93m)[38;5;93m [38;5;93m|[38;5;93m [38;5;93m|[38;5;99m_[38;5;63m)[38;5;63m [38;5;63m|[38;5;63m [38;5;63m [38;5;63m_[38;5;63m_[38;5;63m/[38;5;63m [38;5;63m [38;5;69m_[38;5;33m [38;5;33m [38;5;33m|[38;5;33m [38;5;33m|[38;5;33m_[38;5;33m|[38;5;33m [38;5;33m|[38;5;33m [38;5;39m|[38;5;39m [38;5;39m|[38;5;39m [38;5;39m|[38;5;39m [38;5;39m|[38;5;39m|[38;5;39m [38;5;38m [38;5;44m_[38;5;44m_[38;5;44m/[38;5;44m [38;5;44m|
5 | [38;5;129m|[38;5;129m_[38;5;129m_[38;5;129m_[38;5;129m_[38;5;129m/[38;5;93m [38;5;93m\[38;5;93m_[38;5;93m_[38;5;93m_[38;5;93m\[38;5;93m_[38;5;93m_[38;5;93m_[38;5;93m/[38;5;99m|[38;5;63m [38;5;63m.[38;5;63m_[38;5;63m_[38;5;63m/[38;5;63m [38;5;63m\[38;5;63m_[38;5;63m_[38;5;63m_[38;5;69m|[38;5;33m_[38;5;33m|[38;5;33m [38;5;33m|[38;5;33m_[38;5;33m|[38;5;33m\[38;5;33m_[38;5;33m_[38;5;33m,[38;5;39m_[38;5;39m|[38;5;39m_[38;5;39m|[38;5;39m [38;5;39m|[38;5;39m_[38;5;39m|[38;5;39m\[38;5;38m_[38;5;44m_[38;5;44m\[38;5;44m_[38;5;44m_[38;5;44m_[38;5;44m|[38;5;44m_[38;5;44m|
6 | [38;5;129m [38;5;129m [38;5;129m [38;5;93m [38;5;93m [38;5;93m [38;5;93m [38;5;93m [38;5;93m [38;5;93m [38;5;93m [38;5;93m [38;5;93m [38;5;99m [38;5;63m [38;5;63m [38;5;63m|[38;5;63m_[38;5;63m|
7 | [0m
--------------------------------------------------------------------------------