$ bountyhunt scan scope.yaml --all
→ Starting full pipeline for: example.com
• subfinder — subdomain discovery
• dnsx — DNS resolution
• httpx — host probing
• naabu — port scanning
• nuclei — vulnerability detection
• katana — content crawling
• secrets — secret discovery
────────────────────────────────────
✓ 3 hosts found (2 alive)
✓ 2 open ports detected
✓ nuclei: 2 findings (1 new)
✓ katana: 15 endpoints crawled
✓ 1 potential secret discovered
────────────────────────────────────
✓ Results saved to bountyhunt.db
$ bountyhunt report --format html --output report.html
✓ Report generated: report.html
$ ▊