VOID.Bounty

Agentic Bug Bounty — AI-Driven Vulnerability Discovery

Find vulnerabilities before the bad actors do.

Pipeline · Features · Quick Start · Ecosystem

---

What is VOID.Bounty?

VOID.Bounty is an agentic bug bounty platform that uses autonomous AI agents to discover, classify, and triage security vulnerabilities. It combines automated reconnaissance with intelligent analysis to surface findings that would take human researchers days to uncover.

Pipeline

┌──────────────┐    ┌──────────────┐    ┌──────────────┐    ┌──────────────┐
│  RECON       │───▶│  SCAN        │───▶│  ANALYZE     │───▶│  REPORT      │
│  Agent       │    │  Agent       │    │  Agent       │    │  Agent       │
│              │    │              │    │              │    │              │
│ - Subdomain  │    │ - Port scan  │    │ - Vuln       │    │ - CVSS       │
│   discovery  │    │ - Service    │    │   validation │    │   scoring    │
│ - Tech stack │    │   detection  │    │ - Exploit    │    │ - PoC gen    │
│   fingerprint│    │ - Banner grab│    │   suggestion │    │ - Report     │
│              │    │              │    │              │    │   export     │
└──────────────┘    └──────────────┘    └──────────────┘    └──────────────┘

Features

Feature	Status	Description
Subdomain Discovery	🚧 Building	Automated subdomain enumeration
Port Scanning	🚧 Building	Intelligent port scanning with service detection
Vulnerability DB	🚧 Building	Integration with CVE, ExploitDB, NVD
AI Triage	📋 Planned	ML-based vulnerability severity classification
PoC Generation	📋 Planned	Automated proof-of-concept generation
Report Export	📋 Planned	PDF/JSON report generation with CVSS scoring

Tech Stack

• Scanner: Python · nmap · massdns · amass
• Analysis: Python · OpenAI API · CVE database
• Frontend: Next.js 16 · TypeScript · Tailwind CSS
• Storage: PostgreSQL · Redis
• Queue: Celery · Redis

Quick Start

git clone https://github.com/Davidcarmelalex/void-bounty.git
cd void-bounty

# Backend
cd backend
python -m venv venv && source venv/bin/activate
pip install -r requirements.txt
python main.py --target example.com

# Frontend
cd ../web
npm install
npm run dev

Ecosystem

VOID.Bounty is part of the M&R&Nothing ecosystem:

• Integrates with MrNothing OS for on-device security audits
• Feeds vulnerability intelligence to AZRAEL cyber defense
• Reports published via VOID//SIGNAL for security awareness

→ github.com/Davidcarmelalex/MrNothingEcosystem

---

Built from nothing. For someone. Forever. MR° · M&R&Nothing · 2026 · A tribute, by David Carmel Alex