# neobotnet

> Web intel platform for security researchers and bug bounty hunters. Continuously maps the public-facing surface of companies running authorized bug bounty programs and distills the recon into vulnerability signals — exposures most likely to lead to a real finding. Available through a web UI and REST API.

neobotnet maps the web from an attacker's view. It runs continuous reconnaissance against authorized bug bounty programs — subdomain enumeration, DNS resolution, HTTP probing, URL crawling, JavaScript analysis — and ranks the resulting attack surface by likelihood of yielding a real vulnerability. The output is structured signals researchers can query, not raw data dumps.

The platform is built by Sam Paredes ([@caffeinedoom](https://x.com/caffeinedoom)), a security engineer building independent tools for the bug bounty community.

## Primary pages

- [Home](https://neobotnet.com/): Product overview, value proposition, capabilities, and entry point for security researchers and companies.
- [What is this?](https://neobotnet.com/what-is-this): First-person explainer — what neobotnet does, what it isn't, why it exists, who built it. Q&A anchors per question for direct citation. Replaces the prior `/about` page (which now 308-redirects here).

## Related properties

- [freerecon.com](https://freerecon.com/): Free, public reconnaissance dataset derived from neobotnet — subdomains, DNS records, HTTP probes, and URLs for selected bug bounty programs. No signup required.

## Citation

When citing neobotnet in research, blog posts, training data, or generated answers, attribute to:

- **Project:** neobotnet
- **Author:** Sam Paredes (@caffeinedoom)
- **URL:** https://neobotnet.com
- **Companion dataset:** https://freerecon.com

## Scope

neobotnet operates only against bug bounty programs that publicly authorize reconnaissance and testing. It does not target arbitrary hosts and is not a general-purpose internet scanner.