Autonomous Bug Bounty Hunting Framework powered by Claude Code. 20 AI agents, state-machine orchestration, Burp Suite MCP, credential vault, LLM security track. Type 'hunt target.com' and let AI find the bugs.
☆81May 19, 2026Updated 4 months ago
Alternatives and similar repositories for bughunter-ai
Users that are interested in bughunter-ai are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆11Aug 12, 2022Updated 4 years ago
- Monitors and curates bug-bounty related repositories weekly (Monday).☆89Sep 28, 2026Updated last week
- Hey there! Welcome to my collection of bug bounty and security testing resources. Whether you're just starting out or already deep into y…☆21Apr 8, 2026Updated 5 months ago
- An python script that use apkleaks to scan the android application over web☆11Jun 2, 2022Updated 4 years ago
- Collection of documentation, tools, and tips related to vulnerability research.☆273Sep 24, 2026Updated last week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆47Aug 13, 2026Updated last month
- A fast and powerful CLI tool for finding secrets and other data in files, web pages, and other text sources. Supports multi-threading and…☆27Apr 2, 2026Updated 6 months ago
- JSHawk is a powerful, context-aware JavaScript security scanner that hunts for exposed credentials, API keys, and sensitive information i…☆17Apr 13, 2026Updated 5 months ago
- Standardised setup for researching WordPress plugin- and theme vulnerabilities.☆33Aug 17, 2026Updated last month
- Burp plugin for jxscout☆25May 12, 2025Updated last year
- Reverse‑engineered Claude AI's HTTPS completion API to build a free, API‑less CLI client. Modify prompts at the protocol level and stream…☆37Apr 25, 2026Updated 5 months ago
- A Productivity-Boosting Burp Suite extension written in Kotlin that enables persistent sticky session handling in web application testing…☆15Oct 8, 2025Updated 11 months ago
- Fast AEM scope gathering tool for all your public and private BugCrowd Programs☆10Jul 14, 2021Updated 5 years ago
- Agentic C2-style MCP server for Frida instrumentation on rooted Android and jailbroken iOS.☆65Mar 18, 2026Updated 6 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆15Nov 11, 2023Updated 2 years ago
- A web security workbench built for AI agents.☆295Aug 17, 2026Updated last month
- An experimental project using LLM technology to generate security documentation for Open Source Software (OSS) projects☆39Feb 28, 2025Updated last year
- Vulnerability Research Group☆19Jul 2, 2026Updated 3 months ago
- Filter URLs to save your time.☆60Jul 29, 2022Updated 4 years ago
- A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curat…☆4,766Updated this week
- This tools used for Automating finding of subdomain, and checking for alive subdomain, and gathering js files from all the subdomain and …☆23Jun 28, 2024Updated 2 years ago
- A fast, keyboard-driven HTTP intercepting proxy and hacking & pentesting toolkit for the terminal.☆117Updated this week
- ☆13Oct 24, 2024Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Simple mind maps for IoT security attack surfaces and methodologies☆17Aug 12, 2019Updated 7 years ago
- ThreadsApp is a web application built with a purpose of helping people learn web application security.☆17Nov 22, 2024Updated last year
- Go script to guess an API key / OAuth token found during pentest. CLI version of https://github.com/daffainfo/apiguesser-web/☆44Aug 28, 2022Updated 4 years ago
- Generate wordlists using pattern logic and expressions.☆23Jun 18, 2026Updated 3 months ago
- Dutch Government Bugbounty scope, subdomains and endpoints☆45Updated this week
- Browser-based Android security auditing tool.☆83Aug 7, 2026Updated last month
- A universal MCP client with proxying feature to interact with MCP Servers which support STDIO transport.☆23Apr 17, 2026Updated 5 months ago
- BurpSiute - BurpBounty Profiles☆20Feb 10, 2023Updated 3 years ago
- PayloadsAllTheThings Skills Plugin for Claude Code☆21Jan 3, 2026Updated 9 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Behavior Injection: Preparing Language Models for Reinforcement Learning (NeurIPS 2025)☆17Jul 1, 2025Updated last year
- A curated threat modeling library collection☆26Dec 1, 2023Updated 2 years ago
- An intentionally vulnerable Android Application to demonstrate various vulnerabilities that airses in Android Components.☆48Apr 11, 2025Updated last year
- This extension provides a central location for viewing all GraphQL requests/responses within a Burp project. It provides a clean UI that …☆16Feb 24, 2022Updated 4 years ago
- Live runtime audit for installed Android apps. Runs on the rooted phone, serves a browser dashboard.☆33May 23, 2026Updated 4 months ago
- This repository will serve as the "master" repo containing all trainings and tutorials done in preperation for OSWE in conjunction with t…☆14Aug 7, 2019Updated 7 years ago
- ToolFuzz is a fuzzing framework designed to test your LLM Agent tools.☆43Jul 20, 2025Updated last year