DEV Community

Ruyynn
Ruyynn

Posted on

VulnDraft: Open-Source Bug Report Generator for Bug Bounty & Pentesting

TL;DR: Stop wasting 30-45 minutes formatting bug reports. VulnDraft helps bug bounty hunters and pentesters generate professional security reports in minutes.


Why VulnDraft?

You find a bug. You have the PoC. But then comes the report:

  • Which platform? HackerOne, Bugcrowd, Intigriti?
  • What sections do they require?
  • Where's that CVSS calculator?
  • Did I include all the steps?

The result: Time lost formatting, when you could have found more bugs.


What VulnDraft Does

✅ HackerOne / Bugcrowd / Intigriti templates — no more format guessing
✅ Built-in CVSS v3.1 calculator
✅ CLI + Web interface — use it your way
✅ Export to Markdown, HTML, JSON
✅ Multi-vulnerability support — one report, multiple findings

Spend less time formatting, more time finding real security issues.


Tech Stack

  • Python 3.8+
  • FastAPI (web interface)
  • Pydantic (validation)
  • Questionary (CLI prompts)
  • TailwindCSS (styling)

Try It Yourself

git clone https://github.com/ruyynn/VulnDraft.git
cd VulnDraft
pip install -r requirements.txt
python main.py
Enter fullscreen mode Exit fullscreen mode

Start the web interface:

python main.py --web
Enter fullscreen mode Exit fullscreen mode

Open http://localhost:8000


Feedback & Contributions

Try it. Break it. Tell me what sucks — open to suggestions, improvements, and contributions!

🔗 VulnDraft on GitHub
⭐ Star it if you find it useful!

Top comments (0)

Some comments may only be visible to logged-in visitors. Sign in to view all comments.