Indonesian Journal of Cybersecurity and Emerging Risks
Vol. 1 No. 2 (2026): 2026: IJCYBER Volume 1 Issue 2 Year 2026

INTEGRATING OPEN-SOURCE TOOLS INTO A BUG BOUNTY SYSTEM FOR NETWORK INFRASTRUCTURE VULNERABILITY DETECTION

Ravenala Chabib Assyfa (Nusa Putra University)



Article Info

Publish Date
31 May 2026

Abstract

In the evolving landscape of cybersecurity, efficient and accurate detection of network vulnerabilities is critical, especially in the context of bug bounty programs. This research presents the development of an integrated, open-source-based vulnerability detection system that combines Sublist3r, Nuclei, and Dalfox into a unified, automated platform. The system is built using a Flask backend and a React.js-based graphical user interface to streamline subdomain enumeration, CVE-based scanning, and Cross-Site Scripting (XSS) detection. Benchmark tests conducted across nine domains demonstrate a significant reduction in execution time (21.8 seconds average), an accuracy rate above 85%, and a System Usability Scale (SUS) score of 82.5, categorized as "Excellent." Compared to manual workflows, the integrated system improves operational speed, consistency, and user accessibility. This study contributes a modular and scalable solution for vulnerability assessments, especially suited for educational, research, and small enterprise envi

Copyrights © 2026






Journal Info

Abbrev

ijcyber

Publisher

Subject

Description

ndonesian Journal of Cybersecurity and Emerging Risks (IJCYBER, Indones. J. Cybersecur. Emerg. Risks, e-ISSN 3164-7782) is a peer-reviewed international journal dedicated to advancing research on theoretical developments and practical implementations in the dynamic fields of cybersecurity, digital ...