A complete bug bounty workspace for HackerOne researchers. Includes scope enforcement, automated recon/vuln pipeline (400+ tools), report templates, CVE/CWE watchlists, and a local VM practice lab. Built for disciplined, ethical hunting.
☆479Oct 14, 2026Updated last week
Alternatives and similar repositories for bugbounty-lab101
Users that are interested in bugbounty-lab101 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A curated collection of offensive, defensive and AI/LLM security tools.☆181Oct 11, 2026Updated last week
- ☆493Feb 14, 2025Updated last year
- How To approach recon on real targets — from passive enumeration to origin IP discovery. Covers tools, automation, and the logic behind e…☆431Jul 5, 2026Updated 3 months ago
- all round pentest skill☆458Sep 16, 2026Updated last month
- Portable passive hostname reconnaissance through Shodan CTL☆40Sep 5, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full writ…☆1,311Sep 1, 2026Updated last month
- Pentest Coverage Tracker is a Burp Suite extension that helps penetration testers monitor testing coverage in real time. It logs discover…☆47Mar 16, 2026Updated 7 months ago
- AI-powered bug bounty hunting toolkit that works with or without subscription.☆5,392Oct 9, 2026Updated 2 weeks ago
- Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path anal…☆452Updated this week
- Karpathy LLM based claude harness for PenetrationTesting / Bugbounty using obsidian☆333Sep 1, 2026Updated last month
- Reusable prompts for a structured, evidence-first bug bounty hunting workflow☆739Oct 3, 2026Updated 2 weeks ago
- Burp Suite extension for API security testing with 15 attack types, 108+ payloads, intelligent fuzzing, BOLA/IDOR detection, AI integrati…☆369Aug 15, 2026Updated 2 months ago
- PentestCode - Multi-agent AI penetration testing system with persistent engagement state, strategic coordination, and parallel autonomous…☆878Oct 2, 2026Updated 3 weeks ago
- Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-…☆953Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A personal RAG system for offensive security knowledge☆178Aug 11, 2026Updated 2 months ago
- LLM-native static vulnerability detection: point it at a repo and get a reviewable vuln report, the way a human auditor would.☆63Oct 15, 2026Updated last week
- A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curat…☆5,196Updated this week
- A bug bounty tool for bypassing 401/403 access restrictions and testing endpoint accessibility.☆54Sep 28, 2026Updated 3 weeks ago
- Bug Bounty Methodology☆335Oct 5, 2026Updated 2 weeks ago
- AutoAR is an automated security reconnaissance tool, ASM and Discord bot for bug bounty hunters and penetration testers. It automates gat…☆252Oct 8, 2026Updated 2 weeks ago
- Collection of documentation, tools, and tips related to vulnerability research.☆274Sep 24, 2026Updated 3 weeks ago
- Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools…☆1,026Jun 12, 2026Updated 4 months ago
- Open-source AI-powered offensive security harness for automated penetration testing.☆3,212Updated this week
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Pentest Harness — Heaven for Hackers. A self-hosted AI agent harness for authorized pentests, bug bounty, security labs, and CTFs. Bring …☆426Oct 7, 2026Updated 2 weeks ago
- An intentionally vulnerable OWASP LLM Top 10 training platform for AI Security, Prompt Injection, RAG Security, Agent Security, and GenAI…☆342Updated this week
- Automated DAST for Android Apps☆156Sep 16, 2026Updated last month
- GitHub-native command-and-control framework for authorized security research, with encrypted multi-channel transport and resilient failov…☆232Jul 18, 2026Updated 3 months ago
- A web security workbench built for AI agents.☆298Oct 14, 2026Updated last week
- AI red-team platform. Autonomous LLM agents run a penetration test end to end inside a Kali container and write the report. LangGraph pla…☆346Oct 6, 2026Updated 2 weeks ago
- Agentic offensive-security in your terminal☆1,413Aug 31, 2026Updated last month
- A comprehensive guide to adversarial testing and security evaluation of AI systems, helping organizations identify vulnerabilities before…☆997Oct 11, 2026Updated last week
- Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can repla…☆1,766Oct 9, 2026Updated 2 weeks ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Python Exploitation Framework, V8 Engine Debugger, Proxy interceptor, marketplace, post-exploitation, backdoor generator,....☆623Updated this week
- Claude Code plugin for writing triager-grade bug bounty reports☆317Aug 25, 2026Updated last month
- AKCA Advanced Web Security Scanner☆243Updated this week
- A curated list of public-source, research, and commercial tools for AI security and AI-assisted cybersecurity — autotriage, agent securit…☆1,676Updated this week
- RAPTOR autonomous looping multi-altitude security vulnerability hunt — Claude Code skill☆271Sep 1, 2026Updated last month
- A series of leaks from hacker forums☆363Aug 18, 2026Updated 2 months ago
- Modern offline-first Application Security Intelligence Platform for Android, iOS, Flutter and React Native with attack-chain analysis, ex …☆184Jul 21, 2026Updated 3 months ago