High-risk tools in Bug Bounty MCP Server

High severity Bug Bounty MCP Server MCP Server 38 of 40 tools

38 of the 40 tools in Bug Bounty MCP Server are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

amass_scan Execute

Execute Amass for subdomain enumeration with enhanced logging.
arjun_parameter_discovery Execute

Execute Arjun for HTTP parameter discovery with enhanced logging.
bugbounty_business_logic_workflow Execute

Create business logic testing workflow for bug bounty hunting.
bugbounty_comprehensive_assessment Execute

bugbounty_comprehensive_assessment
bugbounty_file_upload_testing Execute

Create file upload vulnerability testing workflow.
bugbounty_osint_workflow Execute

Create OSINT gathering workflow for bug bounty hunting.
bugbounty_reconnaissance_workflow Execute

Create comprehensive reconnaissance workflow for bug bounty hunting.
bugbounty_vulnerability_hunting Execute

Create vulnerability-hunting workflow by impact and bounty.
create_attack_chain Execute

Create intelligent attack chain based on target profile.
dalfox_xss_scan Execute

Run Dalfox for advanced XSS scanning with enhanced logging.
dirb_scan Execute

dirb_scan
dirsearch_scan Execute

Run Dirsearch for advanced directory and file discovery with logging.
dnsenum_scan Execute

dnsenum_scan
feroxbuster_scan Execute

feroxbuster_scan
ffuf_scan Execute

Execute FFuf for web fuzzing with enhanced logging.
fierce_scan Execute

fierce_scan
gau_discovery Execute

Run Gau to discover URLs from multiple sources with logging.
gobuster_scan Execute

gobuster_scan
hakrawler_crawl Execute

hakrawler_crawl
httpx_probe Execute

httpx_probe
jaeles_vulnerability_scan Execute

Execute Jaeles for advanced vulnerability scanning with custom signatures.
katana_crawl Execute

Run Katana for next-generation crawling and spidering with logging.
masscan_high_speed Execute

masscan_high_speed
nikto_scan Execute

nikto_scan
nmap_advanced_scan Execute

nmap_advanced_scan
nmap_scan Execute

nmap_scan
nuclei_scan Execute

Run Nuclei scanner with enhanced logging and rich parameters.
paramspider_mining Execute

Run ParamSpider to mine parameters from archives with logging.
rustscan_fast_scan Execute

rustscan_fast_scan
select_tools Execute

AI-powered tool selection based on target profile.
smart_scan Execute

Run AI-driven smart scan with parallel execution.
sqlmap_scan Execute

Execute SQLMap for SQL injection testing with enhanced logging.
subfinder_scan Execute

subfinder_scan
wafw00f_scan Execute

wafw00f_scan
waybackurls_discovery Execute

Execute Waybackurls for historical URL discovery with enhanced logging.
wfuzz_scan Execute

wfuzz_scan
wpscan_analyze Execute

wpscan_analyze
x8_parameter_discovery Execute

x8_parameter_discovery

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Bug Bounty MCP Server

Tools at high risk

Attacks that target this class

More on Bug Bounty MCP Server

Enforce policy on every Bug Bounty MCP Server tool call.