🎯 HexaHunt

An automated Bug Bounty Recon Suite for Termux & Linux

🔥 Features

Module	Description
🔍 Subdomain Enumeration	Find subdomains of any target
✅ Alive Checker	Check which domains are live
🔓 Port Scanner	Scan open ports on targets
🛡️ Header Analyzer	Check missing security headers
📂 Directory Bruteforcer	Find hidden paths & directories
🔗 JS Finder	Extract endpoints & secrets from JS
🕰️ Wayback URL Collector	Collect URLs from Wayback Machine
📊 Report Generator	Generate TXT & HTML reports

📱 Installation (Termux)

pkg update && pkg upgrade -y
pkg install python git figlet ruby -y
gem install lolcat
git clone https://github.com/tanvirpiyal/HexaHunt.git
cd HexaHunt
pip install -r requirements.txt
python hexahunt.py

💻 Installation (Linux/Kali)

sudo apt update
sudo apt install python3 python3-pip git figlet -y
pip3 install lolcat
git clone https://github.com/tanvirpiyal/HexaHunt.git
cd HexaHunt
pip3 install -r requirements.txt
python3 hexahunt.py

🎯 Usage

[1] Subdomain Enumeration  → Find subdomains
[2] Alive Checker          → Check live domains
[3] Port Scanner           → Scan open ports
[4] Header Analyzer        → Security header check
[5] Directory Bruteforcer  → Find hidden paths
[6] JS Finder              → Extract JS secrets
[7] Wayback URL Collector  → Historical URLs
[8] Report Generator       → Export HTML/TXT report

🔄 Workflow

Target Domain
     ↓
[1] Subdomain Enum → subdomains found
     ↓
[2] Alive Check → live domains
     ↓
[3] Port Scan → open ports
     ↓
[4] Header Check → missing headers
     ↓
[5] Dir Brute → hidden paths
     ↓
[6] JS Finder → leaked secrets
     ↓
[7] Wayback → historical URLs
     ↓
[8] Report → HTML/TXT export

⚠️ Disclaimer

HexaHunt is for educational purposes and authorized testing only. Do not use against targets without explicit permission. The developer is not responsible for any misuse.

👨‍💻 Author

• tanvirpiyal — GitHub

🔗 Related Projects

• reconX — Subdomain Enumeration
• HexaSafeLink — Link Safety Checker
• SmartClean — Termux Cleaner