🔍 Bug Bounty Web Checklist

Track your web pentesting progress by checking each subcategory.

🛰️ Reconnaissance

Subdomain Enumeration (amass, subfinder, crt.sh)

Port Scanning (nmap, rustscan, naabu, python)

Directory Bruteforcing (feroxbuster)

Wayback Machine / Archive Recon

JS File Analysis (endpoints, keys, secrets)

Content Discovery (robots.txt, sitemap.xml)

Dorks (Google, Github, Shodan, Censys)

WHOIS & DNS Recon

DNS Zone Transfers

URLextractor