Skip to content
View Venu-exe's full-sized avatar
🎯
Focusing
🎯
Focusing

Block or report Venu-exe

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Venu-exe/README.md

Venu

Bug bounty hunter · offensive security · tool builder · final-year CS · Arch Linux · Tiruvannamalai, IN


Now

  • 🎯 Final-year project: TakeoverHunter — subdomain takeover detector
  • 📡 New: VulnRadar — terminal mission control for hunters (curses TUI)
  • 🔍 Hunting web apps, APIs, cloud, subdomain takeover on HackerOne & Bugcrowd
$ whoami
venu — security researcher building offensive tooling from scratch


Arsenal (20+ tools)

Project What Stack
takeoverhunter Subdomain takeover detector (final-year project) Python
vulnradar Terminal mission control for hunters (curses TUI) Python
bountycommand All-in-one bug bounty command center (web, offline) JS
payloadforge Payload generator & mutator (7 vuln types, 6 encodings, WAF bypass) Python
bountyreport Report generator (CVSS 3.1, 27 templates, 5 platforms) Python
bountyrecon Zero-dependency Python recon toolkit Python
full-recon Shell pipeline: subfinder → httpx → nuclei Bash
assetmap Fast recon & fingerprinting C
Beast Multi-threaded recon (DNS, ports, TLS, headers) C
APIFlowHunter API endpoint discovery C
idor_prober IDOR prober C
JSScope JS scanner for endpoints, secrets, GraphQL Python
httpfuzz HTTP fuzzer C
s3-toolkit S3 bucket misconfig scanner Bash
Portscanner Multi-threaded TCP port scanner Python
WebTrap Honeypot / decoy Python
picoCTF-PowerAnalysis AES CPA exploit Python

Contact

Open to: collaboration · bug bounty team-ups · open-source security contributions.



Signal

[●] status   : hunting
[●] focus    : subdomain takeover · API security · recon automation
[●] shipping : TakeoverHunter (final-year project)
[○] sleep    : optional

"break it, report it, fix it. no harm — just protection."

— venu, from a terminal somewhere in tiruvannamalai

Popular repositories Loading

  1. JSScope JSScope Public

    Scans JavaScript files for exposed API endpoints, secrets, and GraphQL schemas during recon.

    Python 4

  2. full-recon full-recon Public

    Shell pipeline that chains recon tools together into one end-to-end bug bounty workflow.

    Shell 2 1

  3. ignite-cli ignite-cli Public

    Command-line utility tool.

    Python 2

  4. echo-server echo-server Public

    Python 2

  5. JsonExploit JsonExploit Public

    Parses and probes JSON responses/APIs for exposed data and misconfigurations during recon.

    Python 2

  6. remote-monitoring-tool remote-monitoring-tool Public

    Simple client-server tool for remote system monitoring over a network.

    Python 2