Generate Claude Code bug bounty skills from public HackerOne reports and GitHub writeups — 18 vuln classes, no private reports needed
☆223Aug 25, 2026Updated this week
Alternatives and similar repositories for public-skills-builder
Users that are interested in public-skills-builder are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- AI-powered bug bounty hunting toolkit that works with or without subscription.☆4,419Updated this week
- 18 Claude Code skill files for smart contract security — built from 2,749 Immunefi reports, 681 DeFiHack reproductions, and real hunt exp…☆129Updated this week
- IP Finder tool, ipfinder collects IP addresses from Shodan search queries.☆17Dec 12, 2025Updated 8 months ago
- A fast and efficient subdomain hijacking scanner that checks for takeover vulnerabilities by matching HTTP response bodies against predef…☆42Apr 12, 2026Updated 4 months ago
- Convert your HackerOne reports into reusable AI skills.☆106Mar 9, 2026Updated 5 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- RamiBot v3.8.0 is a local-first AI security operations platform integrating multi-LLM support, a dynamic red/blue team skill pipeline, MC…☆27Mar 22, 2026Updated 5 months ago
- Security testing toolkit for AI Agent: curated SecLists wordlists, injection payloads, and expert agents for authorized pentesting, CTFs,…☆366Jun 8, 2026Updated 2 months ago
- A powerful subdomain enumeration tool that aggregates data from multiple sources to create comprehensive lists of root subdomains.☆67May 2, 2026Updated 3 months ago
- Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more☆1,421Updated this week
- Herramienta avanzada de escaneo XSS (Cross-Site Scripting) para auditorías de seguridad web, con capacidades de evasión de WAF y generaci…☆104Jan 7, 2026Updated 7 months ago
- A powerful Go tool for finding origin IPs of domains by querying multiple security APIs and validating results with built-in HTTP client.☆50Dec 4, 2025Updated 8 months ago
- MCP server that connects AI assistants to HackerOne for bug bounty hunting☆346Apr 7, 2026Updated 4 months ago
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆22Mar 16, 2026Updated 5 months ago
- List of Fresh DNS resolvers updates every 1 hour☆23Updated this week
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- ☆28Apr 12, 2026Updated 4 months ago
- ☆1,171Jan 28, 2026Updated 6 months ago
- Find XSS payloads that actually work by filtering them based on real-world constraints instead of blind payload spraying.☆282Aug 12, 2026Updated last week
- ✅ Experience the power of an automated Insecure Direct Object Reference (IDOR) vulnerability detection tool. Safeguard your applications …☆73Mar 9, 2025Updated last year
- ☆537Aug 21, 2025Updated last year
- Analyze Android native `.so` files☆127Jul 28, 2025Updated last year
- AI-powered modular Active Directory red-team framework for authorized penetration testing, AD enumeration, attack-path analysis, Kerber…☆349Jun 11, 2026Updated 2 months ago
- Monitor your targets and hunt fresh assets in real time.☆189Feb 23, 2026Updated 6 months ago
- Custom wordlist, updated regularly☆152Jun 26, 2026Updated last month
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Auto Frida is a powerful, all-in-one automation toolkit that handles everything from Frida installation to script injection. Zero manual …☆136Apr 15, 2026Updated 4 months ago
- A Burp Suite extension for GraphQL security testing.☆67Mar 29, 2026Updated 4 months ago
- A universal MCP client with proxying feature to interact with MCP Servers which support STDIO transport.☆23Apr 17, 2026Updated 4 months ago
- Autonomous Bug Bounty Hunting Framework powered by Claude Code. 20 AI agents, state-machine orchestration, Burp Suite MCP, credential vau…☆65May 19, 2026Updated 3 months ago
- 🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast…☆1,842Jun 21, 2026Updated 2 months ago
- rep+ — Burp-style HTTP Repeater for Chrome DevTools with built‑in AI to explain requests and suggest attacks☆1,604Jan 16, 2026Updated 7 months ago
- ☆50Feb 27, 2026Updated 5 months ago
- PDF Files for Pentesting☆15Jun 5, 2024Updated 2 years ago
- A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curat…☆3,768Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools…☆810Jun 12, 2026Updated 2 months ago
- Evaluation harness for Strix agent☆20Jan 23, 2026Updated 7 months ago
- A list of AI security skills☆53Aug 6, 2026Updated 2 weeks ago
- Grafana scanner with all public CVEs that I collected in one script to make grafana testing easier☆242Jul 7, 2026Updated last month
- Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.☆1,381Updated this week
- Simple XSS vulnerability checker tool very useful with xsschecker.☆28Nov 21, 2025Updated 9 months ago
- AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes☆374Apr 30, 2026Updated 3 months ago