Generate Claude Code bug bounty skills from public HackerOne reports and GitHub writeups — 18 vuln classes, no private reports needed
☆247Sep 21, 2026Updated last month
Alternatives and similar repositories for public-skills-builder
Users that are interested in public-skills-builder are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 18 Claude Code skill files for smart contract security — built from 2,749 Immunefi reports, 681 DeFiHack reproductions, and real hunt exp…☆168Sep 21, 2026Updated last month
- AI-powered bug bounty hunting toolkit that works with or without subscription.☆5,428Updated this week
- FetchDiff is a tool to monitor remote JavaScript and web pages for changes.☆25Sep 27, 2026Updated 3 weeks ago
- An AI-powered bug bounty framework that provides structured workspaces for conducting security engagements with AI agents☆13Mar 27, 2026Updated 6 months ago
- MCP server that connects AI assistants to HackerOne for bug bounty hunting☆355Oct 13, 2026Updated last week
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Convert your HackerOne reports into reusable AI skills.☆113Mar 9, 2026Updated 7 months ago
- Autonomous Bug Bounty Hunting Framework powered by Claude Code. 20 AI agents, state-machine orchestration, Burp Suite MCP, credential vau…☆90May 19, 2026Updated 5 months ago
- IP Finder tool, ipfinder collects IP addresses from Shodan search queries.☆17Dec 12, 2025Updated 10 months ago
- An MCP (Model Context Protocol) server that gives Claude Code access to a comprehensive bug bounty hunting knowledge base.☆21Jun 19, 2026Updated 4 months ago
- A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curat…☆5,287Updated this week
- all round pentest skill☆455Sep 16, 2026Updated last month
- The one shot API attacker tool - finds the API url from the given root simulate the automated attacks☆35Jul 21, 2026Updated 3 months ago
- Security testing toolkit for AI Agent: curated SecLists wordlists, injection payloads, and expert agents for authorized pentesting, CTFs,…☆393Jun 8, 2026Updated 4 months ago
- A powerful Go tool for finding origin IPs of domains by querying multiple security APIs and validating results with built-in HTTP client.☆52Dec 4, 2025Updated 10 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more☆1,555Updated this week
- A powerful subdomain enumeration tool that aggregates data from multiple sources to create comprehensive lists of root subdomains.☆70Oct 8, 2026Updated 2 weeks ago
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆24Mar 16, 2026Updated 7 months ago
- ☆10Mar 24, 2022Updated 4 years ago
- RamiBot v3.8.0 is a local-first AI security operations platform integrating multi-LLM support, a dynamic red/blue team skill pipeline, MC…☆29Mar 22, 2026Updated 7 months ago
- ☆47Jun 7, 2026Updated 4 months ago
- Claude Code plugin for writing triager-grade bug bounty reports☆342Aug 25, 2026Updated 2 months ago
- A fast and efficient subdomain hijacking scanner that checks for takeover vulnerabilities by matching HTTP response bodies against predef…☆43Apr 12, 2026Updated 6 months ago
- Herramienta avanzada de escaneo XSS (Cross-Site Scripting) para auditorías de seguridad web, con capacidades de evasión de WAF y generaci…☆105Sep 21, 2026Updated last month
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Android security and penetration testing, from first principles to senior practitioner. 81 chapters, ~327 labs, measured rather than reci…☆63Aug 18, 2026Updated 2 months ago
- ☆1,178Jan 28, 2026Updated 8 months ago
- Reusable prompts for a structured, evidence-first bug bounty hunting workflow☆764Oct 3, 2026Updated 3 weeks ago
- Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full writ…☆1,315Sep 1, 2026Updated last month
- A local, safety-first pre-submission reviewer for bug bounty reports.☆43Oct 3, 2026Updated 3 weeks ago
- ☆48Jul 30, 2026Updated 2 months ago
- Here's an updated Google Dorking list for 2025 Bug Bounty Hunting, incorporating new patterns and, the latest trends.☆25Apr 26, 2025Updated last year
- ☆548Aug 21, 2025Updated last year
- CVE lookup + Wappalyzer☆38Updated this week
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- xsschecker tests endpoints for reflected XSS by injecting payloads and checking responses. It prints vulnerable if the payload is reflect…☆38Nov 3, 2025Updated 11 months ago
- Find XSS payloads that actually work by filtering them based on real-world constraints instead of blind payload spraying.☆290Aug 12, 2026Updated 2 months ago
- ✅ Experience the power of an automated Insecure Direct Object Reference (IDOR) vulnerability detection tool. Safeguard your applications …☆70Sep 4, 2026Updated last month
- ☆41Oct 4, 2026Updated 3 weeks ago
- List of Fresh DNS resolvers updates every 1 hour☆23Updated this week
- ☆16Jun 28, 2026Updated 3 months ago
- 🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast…☆1,909Jun 21, 2026Updated 4 months ago