Track subdomains, ports, endpoints, and vulnerabilities for a bug bounty target in one organized workspace.
Import Nmap network scan results directly into the app instead of copying them into spreadsheets.
Export a full security assessment report as a Markdown file to share with a client or team.
Search across all targets and tabs at once to quickly find a specific finding during a CTF competition.
| parbatzone/reconvault | 0xustaz/streamgate | a-bissell/unleash-lite | |
|---|---|---|---|
| Stars | 1 | 1 | 1 |
| Language | Python | Python | Python |
| Setup difficulty | easy | hard | hard |
| Complexity | 2/5 | 4/5 | 4/5 |
| Audience | researcher | developer | researcher |
Figures from each repo's GitHub metadata at analysis time.
Requires Linux with Python 3.10 or newer, install dependencies then run with a single command.
ReconVault is a desktop application for Linux designed for security researchers, bug bounty hunters, and participants in capture the flag competitions. It provides a single place to organize the information gathered during security assessments, replacing the scattered text files and spreadsheets that people often use for this work. The app runs entirely on your own computer, with no cloud storage, no account requirement, and no internet connection needed. The app centers around the concept of targets. You create a target for each project you are working on, giving it a name, domain, and identifying the platform it is associated with, such as HackerOne, Bugcrowd, or a CTF event. Each target then gets its own workspace with five tabs: subdomains, ports and services, endpoints, vulnerabilities, and notes. The subdomains tab tracks domain names, IP addresses, whether a subdomain is live, the technology stack, and notes. The ports tab records IP, port number, protocol, service name, version, and notes. The endpoints tab logs URLs, HTTP methods, parameters, and status codes. The vulnerabilities tab tracks titles, severity, status, CVE or CWE identifiers, and descriptions. A dashboard on the home screen shows a summary of your targets, a breakdown of vulnerabilities by severity, and recently modified items. Vulnerabilities are labeled with severity badges ranging from critical down to informational. The app includes an import feature for Nmap, a popular network scanning tool, so you can bring port scan results directly into the ports tab. You can also export a target's full findings as a Markdown file saved to your desktop, and a global search bar lets you look across all targets and all tabs at once. To run ReconVault, you need a Linux system with Python 3.10 or newer. After downloading the code and installing its dependencies, you start it with a single command. On first launch, it creates a local database file in your home directory where all your data is stored. The README notes that screenshots are coming soon and does not list additional features beyond what is described above.
A desktop app for security researchers and bug bounty hunters to organize findings from security assessments. Everything stays on your own computer with no accounts or cloud storage.
Mainly Python. The stack also includes Python, Linux desktop app.
Setup difficulty is rated easy, with roughly 5min to a first successful run.
Mainly researcher.
This repo across BitVibe Labs
Verify against the repo before relying on details.