Bounty Hawk: Automated Reconnaissance & Vulnerability Discovery

Academic project — REVA University

Built an automation tool in Python, Bash, and Node.js to diagnose and report issues across networked systems at scale. Reduced manual diagnostic effort by 40% and improved consistency across every run.

• Developed modular scripts to debug and analyze system behavior, mirroring production engineering diagnostic workflows. Produced structured reports to document findings and support rapid issue resolution.
• Designed the tool for extensibility, enabling new diagnostic checks to be added without restructuring existing code. Demonstrated strong coding fundamentals applied to large-scale systems problems.
• Covers passive recon (DNS, WHOIS, subdomain mapping, tech fingerprinting) and automated OWASP Top 10 checks — SQL injection, XSS, security misconfigurations, broken auth, XXE, and SSRF — with exploit validation to reduce false positives.

Full write-up: How I Built Bounty Hawk