A complete bug bounty workspace for HackerOne researchers. Includes scope enforcement, automated recon/vuln pipeline (400+ tools), report templates, CVE/CWE watchlists, and a local VM practice lab. Built for disciplined, ethical hunting.
☆214Jul 20, 2026Updated 2 weeks ago
Alternatives and similar repositories for bugbounty-lab101
Users that are interested in bugbounty-lab101 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆872Jul 18, 2026Updated 2 weeks ago
- How To approach recon on real targets — from passive enumeration to origin IP discovery. Covers tools, automation, and the logic behind e…☆358Jul 5, 2026Updated 3 weeks ago
- Autonomous red teaming and evidence-backed security evaluation for live AI agents.☆28Jul 22, 2026Updated last week
- An intentionally vulnerable OWASP LLM Top 10 training platform for AI Security, Prompt Injection, RAG Security, Agent Security, and GenAI…☆262Updated this week
- A personal RAG system for offensive security knowledge☆166Jul 13, 2026Updated 3 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Karpathy LLM based claude harness for PenetrationTesting / Bugbounty using obsidian☆263Updated this week
- 🦞 Local, read-only security scanner for OpenClaw. Finds config, prompt-injection and supply-chain risks — A–F grade.☆58Updated this week
- PenTest and BugBounty 🕵️☆16Jul 11, 2026Updated 3 weeks ago
- An evolving recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MI…☆1,044Updated this week
- GitHub-native command-and-control framework for authorized security research, with encrypted multi-channel transport and resilient failov…☆217Jul 18, 2026Updated 2 weeks ago
- A blazingly fast, multi-threaded TUI malware analysis tool built in Rust. Features deep PE parsing, YARA scanning, and heuristic risk sco…☆189Jul 12, 2026Updated 3 weeks ago
- HackAgent is an open-source security toolkit to detect vulnerabilities of your AI Agents☆348Updated this week
- ☆109Mar 30, 2026Updated 4 months ago
- Agentic offensive-security in your terminal☆1,172Jun 14, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- BugBounty-Recon-Methodology☆326May 26, 2026Updated 2 months ago
- AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude…☆4,119Updated this week
- Offensive-security MCP server with 205 wrapped tools, 17 specialist agents, and 60 SPA-aware probes for OWASP Top 10. CLI + MCP, BYO LLM.…☆1,538Jul 5, 2026Updated 3 weeks ago
- Python Exploitation Framework, V8 Engine Debugger, Proxy interceptor, marketplace, post-exploitation, backdoor generator,....☆579Updated this week
- Codex CLI jailbreak guide — customizing system prompt via model_instructions_file config☆172Jul 3, 2026Updated last month
- Stealth hybrid URL mapper☆26May 1, 2026Updated 3 months ago
- A live, browser-based threat intelligence dashboard aggregating 68 curated sources across government advisories, news, research, vendor b…☆15Updated this week
- 66-tool MCP server for dark web intelligence — breach data, ransomware tracking, Tor .onion access, malware analysis, blockchain intel, e…☆302Updated this week
- AutoAR is an automated security reconnaissance tool, ASM and Discord bot for bug bounty hunters and penetration testers. It automates gat…☆239Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆13Mar 6, 2025Updated last year
- A tool for detecting subdomain takeover vulnerabilities by checking DNS records☆33May 28, 2026Updated 2 months ago
- ☆15Feb 27, 2026Updated 5 months ago
- powerfull pentesting tool to checking email by smtp command☆10Feb 29, 2024Updated 2 years ago
- 安全研究工作台，集成逆向工程、CTF、移动安全、Web安全于一体☆193Updated this week
- ☆1,572Mar 7, 2026Updated 4 months ago
- List of AI Hacking Agents☆624Updated this week
- autonomous red teaming platform; multi-agent offensive-security meta-harness☆5,377Updated this week
- claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md f…☆2,806May 8, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools…☆785Jun 12, 2026Updated last month
- AI 驱动的红队免杀知识库 — AI-generated red team evasion notes☆52Jun 23, 2026Updated last month
- All-round bug bounty skill for Claude Code parallelized agents for smart contract audits (EVM, Move, Solana, TRON), web/API security, an…☆237Jul 27, 2026Updated last week
- 面向 Windows 的本地优先 Team 工作流控制台，支持空间管理、账号轮换、顺序队列、浏览器身份快照及 CPA/Sub2API 推送。☆21Jul 17, 2026Updated 2 weeks ago
- Dump Linux keyrings☆24Jul 15, 2024Updated 2 years ago
- A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curat…☆3,280Updated this week
- Intentionally Vulnerable Hacking Labs☆573Jun 26, 2026Updated last month