Bug bounty hunter · offensive security · tool builder · final-year CS · Arch Linux · Tiruvannamalai, IN
- 🎯 Final-year project: TakeoverHunter — subdomain takeover detector
- 📡 New: VulnRadar — terminal mission control for hunters (curses TUI)
- 🔍 Hunting web apps, APIs, cloud, subdomain takeover on HackerOne & Bugcrowd
$ whoami
venu — security researcher building offensive tooling from scratch
| Project | What | Stack |
|---|---|---|
| takeoverhunter | Subdomain takeover detector (final-year project) | Python |
| vulnradar | Terminal mission control for hunters (curses TUI) | Python |
| bountycommand | All-in-one bug bounty command center (web, offline) | JS |
| payloadforge | Payload generator & mutator (7 vuln types, 6 encodings, WAF bypass) | Python |
| bountyreport | Report generator (CVSS 3.1, 27 templates, 5 platforms) | Python |
| bountyrecon | Zero-dependency Python recon toolkit | Python |
| full-recon | Shell pipeline: subfinder → httpx → nuclei | Bash |
| assetmap | Fast recon & fingerprinting | C |
| Beast | Multi-threaded recon (DNS, ports, TLS, headers) | C |
| APIFlowHunter | API endpoint discovery | C |
| idor_prober | IDOR prober | C |
| JSScope | JS scanner for endpoints, secrets, GraphQL | Python |
| httpfuzz | HTTP fuzzer | C |
| s3-toolkit | S3 bucket misconfig scanner | Bash |
| Portscanner | Multi-threaded TCP port scanner | Python |
| WebTrap | Honeypot / decoy | Python |
| picoCTF-PowerAnalysis | AES CPA exploit | Python |
Open to: collaboration · bug bounty team-ups · open-source security contributions.
[●] status : hunting
[●] focus : subdomain takeover · API security · recon automation
[●] shipping : TakeoverHunter (final-year project)
[○] sleep : optional
"break it, report it, fix it. no harm — just protection."
— venu, from a terminal somewhere in tiruvannamalai