INTEGRATING OPEN-SOURCE TOOLS INTO A BUG BOUNTY SYSTEM FOR NETWORK INFRASTRUCTURE VULNERABILITY DETECTION
Keywords:
vulnerability detection, bug bounty, automation, Sublist3r, Nuclei, Dalfox, usability, open-source tools, cybersecurityAbstract
In the evolving landscape of cybersecurity, efficient and accurate detection of network vulnerabilities is critical, especially in the context of bug bounty programs. This research presents the development of an integrated, open-source-based vulnerability detection system that combines Sublist3r, Nuclei, and Dalfox into a unified, automated platform. The system is built using a Flask backend and a React.js-based graphical user interface to streamline subdomain enumeration, CVE-based scanning, and Cross-Site Scripting (XSS) detection. Benchmark tests conducted across nine domains demonstrate a significant reduction in execution time (21.8 seconds average), an accuracy rate above 85%, and a System Usability Scale (SUS) score of 82.5, categorized as "Excellent." Compared to manual workflows, the integrated system improves operational speed, consistency, and user accessibility. This study contributes a modular and scalable solution for vulnerability assessments, especially suited for educational, research, and small enterprise envi
Downloads
References
[1] S. Sahay, A. Van Der Ven, and M. Janssen, “Digital transformation in
the era of cyber threats: The need for resilience,” Gov. Inf. Q., vol. 39,
no. 1, pp. 1–9, 2022.
[2] J. Wright and M. Goodwin, Penetration Testing: A Hands-On
Introduction to Hacking. San Francisco: No Starch Press, 2021.
[3] S. Kurniawan, H. B. Santoso, and D. H. Widyantoro, “Automation
Challenges in Penetration Testing on Cloud-Native Architectures,” J.
Inf. Secur. Res., vol. 4, no. 2, pp. 34–42, 2023.
[4] S. Kumar, “Collaborative Security Testing Using Bug Bounty
Platforms: A Review,” CyberDefence J., vol. 5, no. 1, pp. 41–50,
2022.
[5] Aboul3la, “Sublist3r,” 2024. [Online]. Available:
https://github.com/aboul3la/Sublist3r
[6] P. Discovery, “Nuclei – Fast and customizable vulnerability scanner,”
2024. [Online]. Available: https://github.com/projectdiscovery/nuclei
[7] Hahwul, “Dalfox – The XSS Scanner,” 2024. [Online]. Available:
https://github.com/hahwul/dalfox
[8] S. Voggenreiter, M. S. Al-Ameen, and M. Smith, “Human-centered
security tool design: Overcoming adoption barriers in CLI-based
cybersecurity tools,” 2024.
[9] D. Lin and R. H. Deng, “Security Automation and Orchestration in
Vulnerability Management Systems,” IEEE Access, vol. 10, pp.
31245–31259, 2022.
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Indonesian Journal of Cybersecurity and Emerging Risks
This work is licensed under a Creative Commons Attribution 4.0 International License.
This work is licensed under a Creative Commons Attribution 4.0 International License (CC BY 4.0) 
