Recon Automation
Chains subfinder, httpx, dnsx, naabu, katana, and nuclei into a single pipeline across your own in-scope targets, with diffing between runs.
STATUS: BUILDING IN PUBLIC
Offensive-security automation, built by a solo researcher who ships.
Xocipher builds recon automation and report-writing tooling for bug bounty hunters and security researchers; practical software you run yourself, on your own authorized targets.
Built with
subfinderhttpxdnsxnucleikatananaabu
// WHAT XOCIPHER DOES
Tooling for the parts of bug bounty that eat your time.
Recon and reporting are repetitive and easy to script, so that's what gets automated, leaving you more time for the actual research.
Report Writing
Turns raw findings and notes into a structured, well-formatted vulnerability report matching your program's expected submission format.
Built by a Practitioner
Every tool exists because it solved a real problem during actual bug bounty work; it wasn't built speculatively for a feature list.