"Search. Find. Exploit Responsibly."
CyberKhoj is a free open source bug bounty assistant that thinks like a hacker. Paste any URL or domain and instantly get AI-powered vulnerability attack paths, recon checklists, visual mind maps, and 100 hacker test ideas — completely free forever.
Built for the bug bounty community.
By a developer from Nepal 🇳🇵
- 🔍 URL Analyzer — Paste any URL, get instant attack paths
- ⚔️ Attack Mode — Generate 100 hacker test ideas for any domain
- 🧠 Mind Map — Visual attack surface mapper
- 📋 Payload Library — 200+ ready-to-use payloads
- 🛰️ Recon Dashboard — Full recon toolkit in one place
- 🔎 Google Dork Generator — 30 targeted dorks per domain
- 🕵️ JS Recon Analyzer — Find secrets in JavaScript files
- 📚 Cheat Sheets — OWASP, SQLi, XSS, JWT and more
- 🐛 Findings Tracker — Log and track your bug bounty finds
- 🔒 100% Private — Your data never leaves your browser
Visit: cyberkhoj.prachitregmi.com.np
Completely free forever.
- No subscription
- No credit card
- No server costs
- Uses your own free Groq API key (1,000 requests/day)
- Get your free key at: console.groq.com
| Layer | Technology |
|---|---|
| Frontend | React + TypeScript + Tailwind CSS |
| AI | Groq API (Llama 3 70B) — free tier |
| Storage | localStorage only, no backend needed |
| Builder | Lovable |
| Fonts | Syne + Share Tech Mono |
- Visit cyberkhoj.prachitregmi.com.np
- Get your free Groq API key at console.groq.com
- Paste your key and start hunting bugs
git clone https://github.com/Prachit1245/CyberKhoj.git
cd cyberkhoj
npm install
npm run dev- ✅ API key encrypted before storing in localStorage
- ✅ Sensitive parameters auto-redacted before sending to AI
- ✅ No servers, no database, no tracking
- ✅ No data collection of any kind
- ✅ Full client-side application — everything runs in your browser
CyberKhoj is built for authorized security testing only.
- Only test systems you own or have explicit written permission to test
- Follow responsible disclosure guidelines
- Use on bug bounty platforms: HackerOne, Bugcrowd
- Never use on systems without permission
- The developer is not responsible for misuse
Contributions are welcome! This is an open source project built for the global bug bounty community.
- Fork the repo
- Create your feature branch
git checkout -b feature/NewFeature
- Commit your changes
git commit -m 'Add NewFeature' - Push to the branch
git push origin feature/NewFeature
- Open a Pull Request
- 🐛 Report bugs by opening an Issue
- 💡 Suggest new features via Issues
- 📋 Add new payloads to the payload library
- 📚 Add new cheat sheet content
- 📝 Improve documentation
- 📣 Share the tool with the bug bounty community
Edit: src/lib/payloads.ts — follow the existing format exactly.
Edit: src/lib/cheatsheets.ts — follow the existing format exactly.
MIT License — free to use, modify, and distribute.
See LICENSE for full details.
- Built with Lovable — the AI-powered full-stack app builder
- AI powered by Groq — free and blazing-fast inference
- Inspired by the global bug bounty community
- Made with pride from Nepal 🇳🇵
⭐ Star this repo if CyberKhoj helped you find your first bug!
0 comments
log in to comment.