Autonomous Bug Bounty Hunting Framework powered by Claude Code. 20 AI agents, state-machine orchestration, Burp Suite MCP, credential vault, LLM security track. Type 'hunt target.com' and let AI find the bugs.
☆74May 19, 2026Updated 3 months ago
Alternatives and similar repositories for bughunter-ai
Users that are interested in bughunter-ai are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆11Aug 12, 2022Updated 4 years ago
- Monitors and curates bug-bounty related repositories weekly (Monday).☆84Updated this week
- Hey there! Welcome to my collection of bug bounty and security testing resources. Whether you're just starting out or already deep into y…☆22Apr 8, 2026Updated 5 months ago
- JSHawk is a powerful, context-aware JavaScript security scanner that hunts for exposed credentials, API keys, and sensitive information i…☆17Apr 13, 2026Updated 5 months ago
- A Productivity-Boosting Burp Suite extension written in Kotlin that enables persistent sticky session handling in web application testing…☆15Oct 8, 2025Updated 11 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- An python script that use apkleaks to scan the android application over web☆11Jun 2, 2022Updated 4 years ago
- Burp plugin for jxscout☆25May 12, 2025Updated last year
- Collection of documentation, tools, and tips related to vulnerability research.☆268Sep 5, 2026Updated last week
- Vulnerability Research Group☆18Jul 2, 2026Updated 2 months ago
- An experimental project using LLM technology to generate security documentation for Open Source Software (OSS) projects☆39Feb 28, 2025Updated last year
- Agentic C2-style MCP server for Frida instrumentation on rooted Android and jailbroken iOS.☆64Mar 18, 2026Updated 5 months ago
- ☆26May 21, 2025Updated last year
- ☆40Aug 13, 2026Updated last month
- A fast and powerful CLI tool for finding secrets and other data in files, web pages, and other text sources. Supports multi-threading and…☆27Apr 2, 2026Updated 5 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A universal MCP client with proxying feature to interact with MCP Servers which support STDIO transport.☆23Apr 17, 2026Updated 4 months ago
- Android security tool that scans installed apps bytecode to discover content providers, file providers, and intent interfaces, then gener…☆20Mar 12, 2026Updated 6 months ago
- Live runtime audit for installed Android apps. Runs on the rooted phone, serves a browser dashboard.☆32May 23, 2026Updated 3 months ago
- A web security workbench built for AI agents.☆271Aug 17, 2026Updated 3 weeks ago
- Standardised setup for researching WordPress plugin- and theme vulnerabilities.☆33Aug 17, 2026Updated 3 weeks ago
- Reverse‑engineered Claude AI's HTTPS completion API to build a free, API‑less CLI client. Modify prompts at the protocol level and stream…☆37Apr 25, 2026Updated 4 months ago
- An intentionally vulnerable Android Application to demonstrate various vulnerabilities that airses in Android Components.☆47Apr 11, 2025Updated last year
- ☆16Jun 26, 2025Updated last year
- Fast AEM scope gathering tool for all your public and private BugCrowd Programs☆10Jul 14, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Browser-based Android security auditing tool.☆82Aug 7, 2026Updated last month
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆23Mar 16, 2026Updated 5 months ago
- Search for github leaks by combining gitleaks and git-hound capabilities with rate control and exhaustive search.☆25Jun 20, 2026Updated 2 months ago
- ☆15Nov 11, 2023Updated 2 years ago
- A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curat…☆4,486Updated this week
- Enhanced Burp Suite extension for finding links and sensitive data in JavaScript files☆26May 10, 2026Updated 4 months ago
- Filter URLs to save your time.☆60Jul 29, 2022Updated 4 years ago
- A fast, keyboard-driven HTTP intercepting proxy and hacking & pentesting toolkit for the terminal.☆98Updated this week
- AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes☆417Apr 30, 2026Updated 4 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- A compilation of resources for studying for the eCPPTv2☆19Sep 28, 2022Updated 3 years ago
- This tools used for Automating finding of subdomain, and checking for alive subdomain, and gathering js files from all the subdomain and …☆23Jun 28, 2024Updated 2 years ago
- ☆13Oct 24, 2024Updated last year
- This repo has a collection of scripts and exploits for OSCP-style labs. It covers enumeration, exploitation, web testing, and reverse she…☆34Aug 20, 2026Updated 3 weeks ago
- ☆15Jan 27, 2022Updated 4 years ago
- Simple mind maps for IoT security attack surfaces and methodologies☆17Aug 12, 2019Updated 7 years ago
- ThreadsApp is a web application built with a purpose of helping people learn web application security.☆17Nov 22, 2024Updated last year