vulns.co
/
GKData.io MCP

Back to Workflows

Recon → live hosts → nuclei

The canonical bug-bounty one-liner: enumerate subdomains, resolve, probe live HTTP, and scan for known issues.

Level: beginner

Tools: subfinder, dnsx, httpx, nuclei

Pipeline

subfinder -d {domain} -all -silent | dnsx -silent | httpx -silent | nuclei -severity critical,high -o nuclei.txt