bess1lie

detection-only · scope-aware
Security Tooling Open Source 3 tools 0
bess1lie@terminal — bash
$

The tools

Professional security tools for bug hunters and security researchers

🎯

bounthunt

Bug bounty reconnaissance & automation.

  • Subdomain enumeration
  • Endpoint discovery
  • Parameter brute‑forcing
  • Automated reporting
0 0
→ GitHub
🚀

gqlhunter

GraphQL security testing & introspection.

  • Introspection extraction
  • Field fuzzing
  • Depth & complexity analysis
  • Persisted queries support
0 0
→ GitHub
🔍

apihunter NEW

Professional REST API security testing CLI.

  • OpenAPI / Swagger discovery
  • Heuristic scanning (IDOR, CORS)
  • Authentication auditing
  • HTML / Markdown / SARIF reports
0 0
→ GitHub

Why these tools?

Detection only, never exploitation. Every tool in this suite is built to identify security issues without causing harm. We believe in empowering security researchers and developers with clear, actionable findings — not in automating attacks.

Scope‑aware by design. All tools respect configuration boundaries, so you can safely run them against production‑like environments without worrying about accidental damage.

Open source, forever. MIT licensed, community‑driven, and built with modern Python.

Screenshots

Visual overview of what each tool can do

apihunter discover
🔍 Discovery of OpenAPI endpoints
apihunter scan
🛡️ Heuristic security scanning
apihunter HTML report
📊 HTML report with severity badges

About Me

Security engineer specializing in detection‑first, scope‑aware security CLIs for bug hunters and security engineers. Creator of apihunter, bounthunt, and gqlhunter. Open source advocate.

Quick Install

Get started in seconds

# Install from source (Python ≥ 3.11)
git clone https://github.com/bess1lie/apihunter.git
cd apihunter && pip install .

git clone https://github.com/bess1lie/bounthunt.git
cd bounthunt && pip install .

git clone https://github.com/bess1lie/gqlhunter.git
cd gqlhunter && pip install .

# Run your first scan
apihunter discover https://api.example.com
bounthunt scan scope.yaml
gqlhunter discover https://example.com/graphql