neobotnet_

Data → Pre-scanned. Indexed. Filterable.

what is this

neobotnet collects reconnaissance data from companies that run bug bounty programs on HackerOne and Bugcrowd. the goal is to map exposed web infrastructure for security research, following each company's rules of engagement.

how it works

neobotnet runs popular open-source tools to collect subdomains, DNS records, web servers, URLs, and JavaScript bundles. every URL collected is signal-typed and filterable — query by status code, technology, content type, parameter, or vulnerability class. it won't replace your own process if you have one — but it handles the repetitive groundwork so you can skip straight to analysis.

vulnerability signals indexed

Vulnerability signals are URL parameters and values that match patterns commonly tied to security flaws. neobotnet detects them through parameter-name and value-pattern analysis across every URL collected — a parameter named redirect_uri pointing to an external host, a value matching a JWT pattern, a numeric user_id. each is a candidate entry point a researcher can investigate, not a confirmed vulnerability.

available signal types

same taxonomy you'll filter on inside /urls — click a category to see the subtypes

• →identifiers9
  • uuid (v4)
  • uuid (v1)
  • mongodb objectid
  • numeric id (short)
  • numeric id (snowflake)
  • md5 hash
  • sha-1 hash
  • sha-256 hash
  • sha-512 hash
• →credentials & tokens4
• →personal data2
• →urls & assets6
• →files3