In the last 24 hours I have published 6 more powershell modules for bug bounty hunting! These are the very same custom tools I used to find my first critical bounty with Microsoft. Below I will lightly go over them and share some of their functionalities, and the power in combining them 😈 ------------------------------------------------- 1. http.server ⚛️Functions: Start-HttpServer, Stop-HttpServer 🔷Purpose: Simple PowerShell HTTP server for hosting static files or payload endpoints. ------------------------------------------------- 2. cloudflared ⚛️Functions: Start-TempTunnel, Stop-TempTunnel, start-persistentTunnel, stop-persistentTunnel 🔷Purpose: Create and tear down temporary or persistent Cloudflare Tunnels, capturing the public URL. ------------------------------------------------- 3. node ⚛️Functions: Test-NodeInstalled, Get-NodePath, Get-NodeVersion, Assert-NodeInstalled 🔷Purpose: Verify (and later manage) the presence and version of Node.js on your system. Spin up js node servers on the fly. ------------------------------------------------- 4. oob ⚛️Functions: Start-OOB, Stop-OOB 🔷Purpose: Orchestrate your Node OOB listener (oob-server.js), spin up a tunnel, and live-tail the JSON hit logs. Localized version of Burp Collaborator. ------------------------------------------------- 5. hackerOne ⚛️Functions: Get-H1Programs, Search-H1Programs 🔷Purpose: Interface with the HackerOne API. List programs, and create custom queries to navigate between them. Keep track of bounties you are interested in. ------------------------------------------------- 6. BountyHunter ⚛️Functions: Search-BugBountyHistory, Search-CVEs, Search-GitHubPages, Search-SubdomainTakeovers 🔷Purpose: Right now it is set up to use google foo to assist in the recon portion of learning your target, but I honestly think im going to navigate towards using it as a central hub for all the bug bounty modules instead ------------------------------------------------- In the image below you see a combination of 💥cloudflared + node + oob →being used to spin up your own localized but publicly available OOB Listener. Uses the cloudflare CDN so less likely to be blocked as compared to Burp Collaborators version. 💥http.server + cloudflared →instant public webserver for demos or phishing page hosting. 💥Node + oob + http.server + cloudflared → Fully portable beacon lab: host, log, and expose any crafted payload from a single PowerShell session. Using a persistent tunnel turns this into a polymorphic URL . One public link capable of dynamically switching between an OOB listener, a file dropper, or live XSS/SQL injection payloads based on how you reconfigure the local endpoint. Perfect for red teaming, bug bounty PoCs, or staged exploit chains without ever changing the URL you sent. all of these are accessible from the powershell console with: Install-Module [name] Import-Module [name] Get the rest of the commands you need with: get-command -Module [name] Have fun and let me know how you feel about them