BCHackTool

<div align="center"> <img src="Pictures/logo.png" alt="BCHackTool Logo" width="600">

<br><br>

Professional Penetration Testing Framework v4.0

</div>

---

📋 Table of Contents

• Overview
• What's New in v4.0
• Features
• Installation
• Usage
• Scan Modes
• Pipeline Architecture
• Configuration
• Tools Integrated
• Output & Reports
• API Integration
• Notifications
• Troubleshooting
• Contributing
• License

---

🎯 Overview

BCHackTool is a comprehensive, professional-grade penetration testing framework designed for security researchers, bug bounty hunters, and penetration testers. Built with bash, it orchestrates multiple industry-standard security tools into a streamlined, automated workflow.

Key Highlights

• 🎨 Modern UI/UX - Emoji-rich interface with real-time vulnerability display
• 🚀 Parallel Scanning - 10x faster with concurrent tool execution
• 🎯 Smart Targeting - Intelligent subdomain enumeration and service discovery
• 🔍 Deep Vulnerability Scanning - Live detailed findings with Nuclei (9000+ templates)
• 📊 Professional Reports - Clean TXT reports with human-readable vulnerability findings
• ⚡ Resume Capability - Continue interrupted scans automatically
• 🔔 Notifications - Real-time alerts via Telegram/Discord/Slack
• 🛠️ Modular Architecture - Easy to extend and customize

---

🆕 What's New in v4.0

Major Features

1. Modern UI/UX Design 🎨

Emoji-rich interface with real-time vulnerability display and clean visual hierarchy!

Features:

• 🎯 Emoji Navigation - Intuitive menu system with visual indicators
• 📊 Real-time Vulnerability Display - Live detailed findings as Nuclei discovers them
• 🎨 Color-coded Severity - Instant visual feedback (🔴 Critical, 🟠 High, 🟡 Medium, 🟢 Low, ℹ️ Info)
• ✨ Clean Spacing Design - No box-drawing characters for universal terminal compatibility
• 📋 Clean TXT Reports - Human-readable vulnerability reports in current directory
• 📁 Current Directory Output - All results saved in BCHackTool_Results/ folder

Live Vulnerability Display:

[▶] Starting vulnerability scan...

🔴 [CRITICAL] CVE-2024-1234-RCE
   └─ Target: https://demo.xooi.com/api

🟠 [HIGH] SQL Injection Found
   └─ Target: https://our.xooi.com/login

🟡 [MEDIUM] XSS Vulnerability Detected
   └─ Target: https://app.xooi.com/search

🟢 [LOW] Information Disclosure
   └─ Target: https://api.xooi.com/debug

ℹ️  [INFO] Missing Security Headers
   └─ Target: https://www.xooi.com

2. Subdomain List Input Mode (Option 3) 🎯

Skip the reconnaissance phase entirely and jump straight to vulnerability scanning!

# Use pre-collected subdomains
sudo bash bchacktool.sh
> 3  # Subdomain List option
Enter subdomain list file path: /path/to/subdomains.txt
Mode> ALL

Benefits:

• ⏱️ Save 30-50% scan time
• 🔄 Integrate with external recon tools
• 🎯 Test specific subdomains only
• 📝 Use results from previous scans

File Format:

example.com
www.example.com
api.example.com
mail.example.com

3. Full Nuclei Severity Scanning 🔍

Now scans ALL severity levels instead of just medium+

Before v4.0:

• ❌ Info level: Filtered
• ❌ Low level: Filtered
• ✅ Medium: Included
• ✅ High: Included
• ✅ Critical: Included

v4.0:

• ✅ Info: Version disclosure, tech stack detection
• ✅ Low: Weak headers, minor misconfigurations
• ✅ Medium: CSRF, open redirects
• ✅ High: SQL injection, XSS
• ✅ Critical: RCE, authentication bypass

Impact:

• 📈 3-5x more findings
• 🎯 Complete security picture
• 📊 Better compliance reporting

3. Real-time Vulnerability Display 📊

Live detailed findings as vulnerabilities are discovered

[▶] Starting vulnerability scan...

🔴 [CRITICAL] CVE-2024-1234-RCE
   └─ Target: https://api.example.com/admin

🟠 [HIGH] SQL Injection - Authentication Bypass
   └─ Target: https://login.example.com

🟡 [MEDIUM] Cross-Site Scripting (XSS)
   └─ Target: https://search.example.com?q=test

Features:

• Instant vulnerability notifications as they're found
• Detailed template identification
• Exact target URLs for each finding
• Color-coded severity for quick assessment
• No waiting for scan completion to see results

Improvements from v3.1

• ✅ Parallel scanning with up to 10 concurrent jobs
• ✅ Checkpoint system for resume capability
• ✅ Enhanced error handling and retry logic
• ✅ JSON structured output for all tools
• ✅ Clean TXT reports with parsed vulnerability data
• ✅ API key integration (Shodan, VirusTotal, etc.)
• ✅ Multi-platform notification support
• ✅ Detailed logging system

---

✨ Features

🔍 Reconnaissance

• 7 Parallel Subdomain Enumeration Tools
  • Subfinder (Passive OSINT)
  • Assetfinder (Web scraping)
  • Findomain (Multi-source API)
  • Wayback Machine (Archive.org)
  • GAU (GetAllUrls)
  • Crt.sh (Certificate logs)
  • Anubis (Passive DNS)

🔓 Port Scanning

• Fast SYN scanning with Naabu
• Top 1000 ports by default
• CDN exclusion for accurate results
• Rate limiting (300 req/sec - stealth mode)

🌐 Web Probing

• HTTP/HTTPS service detection
• Technology stack identification
• Status code validation
• Title extraction
• Redirect following

🎯 Vulnerability Scanning

• Template-based detection with Nuclei v3.6+
• 9000+ vulnerability templates (updated automatically)
• CVE database integration
• Custom template support
• All severity levels (info to critical)
• Real-time detailed vulnerability display
• Live findings as they're discovered

📊 Reporting

• Clean TXT reports with:
  • Vulnerability breakdown by severity
  • Subdomain discovery results
  • Live service inventory
  • Human-readable format
• JSON output for automation
• JSONL format for streaming
• All results saved in current directory (BCHackTool_Results/)

🔔 Notifications

• Telegram bot integration
• Discord webhook support
• Slack webhook support
• Scan completion alerts
• Error notifications

⚡ Performance

• Parallel tool execution (10 concurrent jobs)
• Optimized vulnerability counting (80% faster)
• Timeout management
• Resource optimization
• Stealth mode rate limiting (300 req/sec)
• Clean, efficient output (no overhead)

🛠️ Advanced Features

• Resume interrupted scans
• Checkpoint system
• API key management
• Automatic tool updates
• Template auto-updates
• Comprehensive logging

---

📦 Installation

Prerequisites

• Operating System: Linux (Ubuntu 20.04+, Debian 10+, Kali Linux)
• Root Access: Required for some tools
• Internet Connection: For tool installation and updates

Quick Install

# Download
git clone https://github.com/ByCh4n/BCHackTool.git
cd BCHackTool

# Run (auto-installs dependencies)
sudo bash bchacktool.sh

Manual Installation

# 1. Install system dependencies
sudo apt-get update
sudo apt-get install -y git curl jq python3 perl unzip pv gcc make libpcap-dev

# 2. Install Go (if not present)
wget https://go.dev/dl/go1.22.0.linux-amd64.tar.gz
sudo tar -C /usr/local -xzf go1.22.0.linux-amd64.tar.gz
export PATH=$PATH:/usr/local/go/bin

# 3. Run BCHackTool
sudo bash bchacktool.sh
# Tools will be installed automatically on first run

Installed Tools

The script automatically installs:

Go-based tools:

• subfinder
• naabu
• httpx
• nuclei
• notify
• assetfinder
• waybackurls
• gau

Binary tools:

• findomain

---

🚀 Usage

<div align="center"> <img src="Pictures/ToolScreenShot.png" alt="BCHackTool Main Menu" width="500"> <br> <em>BCHackTool Main Menu Interface</em> </div> <br>

Basic Usage

# Start BCHackTool
sudo bash bchacktool.sh

# Select scan type from menu
1. Single Domain Scan       # Scan one domain
2. Multiple Domains          # Scan domains from file
3. Subdomain List           # Use pre-collected subdomains (NEW!)
4. Configure API Keys        # Setup API integrations
5. Setup Notifications       # Configure alerts
6. View Previous Scans       # Browse scan history
T. Update Nuclei Templates   # Update vulnerability templates
U. Update All Tools          # Update all tools to latest
H. Help & Wiki               # Detailed documentation
L. View Logs                 # Check error logs
0. Exit                      # Close tool

Example Workflows

1. Single Domain Scan (Full Pipeline)

sudo bash bchacktool.sh
> 1  # Single Domain Scan
Enter target domain: example.com
Mode> ALL  # Comprehensive scan

# Output:
# ✓ 247 subdomains discovered
# ✓ 89 open ports found
# ✓ 34 live web services
# ✓ 12 vulnerabilities detected
# Report: BCHackTool_Results/example_com_20260108_123456/vulnerabilities.txt

2. Multiple Domains

# Create domains.txt
echo "example.com" > domains.txt
echo "test.com" >> domains.txt

sudo bash bchacktool.sh
> 2  # Multiple Domains
Enter file path: /path/to/domains.txt
Mode> A  # Web scan only

3. Subdomain List (Skip Recon) - NEW!

# Already have subdomains from external tool
cat subdomains.txt
# example.com
# www.example.com
# api.example.com

sudo bash bchacktool.sh
> 3  # Subdomain List
Enter subdomain list file path: /path/to/subdomains.txt
Mode> ALL

# Skips reconnaissance phase
# Starts directly with port scanning

4. Resume Interrupted Scan

# If scan is interrupted (Ctrl+C or netw