A cross-platform bootstrap installer for 20+ bug bounty & recon tools.
Supports Linux (apt), macOS (brew), and Windows (Git Bash + Chocolatey).
Built for bug bounty hunters, pentesters, and researchers β with multi-threaded downloads (aria2c) enabled by default for maximum speed.
- β Cross-platform: Linux, macOS, Windows Git Bash
- β 20+ recon & bug bounty tools (Python, Ruby, Go, Bash, Make)
- β
Automatic dependency install (
apt,brew,choco) - β
Multi-threaded downloads (
aria2c, 8 connections) - β Local Ruby (3.3.x) install isolated from system
- β Skips gracefully if dependencies/repos unavailable
- β
Updates tools if already installed (
git pull)
This installer bootstraps 20+ essential bug bounty tools, including:
- Sublist3r β Subdomain enumeration
- teh_s3_bucketeers β S3 bucket recon
- virtual-host-discovery β Virtual host scanner
- wpscan β WordPress vulnerability scanner (Ruby)
- lazyrecon β Recon automation framework
- recon_profile β Recon environment configs
- ReconDevBashClient β Recon dev helper client
- massdns β Fast DNS resolver
- Asnlookup β ASN info lookup
- unfurl, waybackurls, httprobe (by tomnomnom) β URL parsing, archives, probing
- dirsearch β Directory brute-forcer
- JSParser β JavaScript analysis
- knock β Subdomain tool
- lazys3 β S3 enumeration
- sqlmap β SQL injection scanner
β¦and more (full list in script).
Clone the repo:
git clone https://github.com/websecresearch/Advanced-Bug-Bounty-Tools-Installer.git
cd advanced-bug-bounty-tools-installer
Make script executable and run:
chmod +x advanced-bug-bounty-tools-installer.sh
./advanced-bug-bounty-tools-installer.sh
Disable aria2c (fall back to normal git clone):
./advanced-bug-bounty-tools-installer.sh --no-aria