CLAUDE.md configs and skills I use for bug bounty hunting with Claude Code
☆34Apr 14, 2026Updated 6 months ago
Alternatives and similar repositories for claude-code-bb
Users that are interested in claude-code-bb are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Bug bounty methodology, checklists, and hunting notes.☆39Jul 10, 2026Updated 4 months ago
- A simple HAR-based JavaScript recon automation kit for organizing JS files, endpoints, secrets, and gf-filtered attack surface during bug…☆19May 20, 2026Updated 5 months ago
- Simple Wordpress theme from Youtube series☆18Nov 29, 2016Updated 9 years ago
- A Burp extension to Fuzz URLs for HTTP parser inconsistencies☆13Jan 9, 2024Updated 2 years ago
- ☆28Dec 4, 2025Updated 11 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- IP Finder tool, ipfinder collects IP addresses from Shodan search queries.☆17Dec 12, 2025Updated 11 months ago
- Stealth hybrid URL mapper☆60Oct 21, 2026Updated 3 weeks ago
- List of Fresh DNS resolvers updates every 1 hour☆23Updated this week
- A curated collection of my security research and bug bounty writeups, documenting real-world vulnerabilities, exploitation methods☆27Oct 16, 2026Updated 3 weeks ago
- CVE-2025-55182-bypass-waf☆30Jan 8, 2026Updated 10 months ago
- My ATO Via Password Reset Methodology☆53May 13, 2026Updated 5 months ago
- Here's an updated Google Dorking list for 2025 Bug Bounty Hunting, incorporating new patterns and, the latest trends.☆26Apr 26, 2025Updated last year
- ☆13Mar 12, 2022Updated 4 years ago
- XSSRecon is a fast reflected-parameter discovery tool that uses unique numbered payloads to detect input reflection in HTTP responses and…☆61Oct 12, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Useful "Match and Replace" & "TLS Pass Through" in Burpsuite Rules☆11Sep 26, 2025Updated last year
- ☆58Jul 31, 2024Updated 2 years ago
- harry0703/MoneyPrinterTurbo mirror☆64Jun 20, 2026Updated 4 months ago
- Cockpit: Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection☆15Apr 18, 2026Updated 6 months ago
- My Main App Hacking CheckList☆35Jun 20, 2026Updated 4 months ago
- ☆33Jun 26, 2026Updated 4 months ago
- Biscuit's Bug Bounty Playbook is a curated hub for cybersecurity learners and bug bounty hunters. It includes tools, methodologies, write…☆23Sep 25, 2026Updated last month
- TokenTwin Checker — Dual Token BAC/IDOR Tester for Burp Suite☆99Aug 24, 2026Updated 2 months ago
- An obsessive, expert-tier knowledge base + AI skill system for professional bug bounty hunting, security research, and penetration testin…☆72Apr 25, 2026Updated 6 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Reproducible PHP request-state RCE labs and self-checking PoC☆58Oct 25, 2026Updated 2 weeks ago
- This repo collects nuclei template from 600+ github repos, updates every 6 hours.☆39Feb 17, 2026Updated 8 months ago
- A Chrome extension that watches your HackerOne reports and alerts you when their status changes. Its main reason to exist is internal act…☆15Jul 3, 2026Updated 4 months ago
- ☆13Jul 9, 2026Updated 4 months ago
- Ambiente de pentest assistido por IA integrando Claude Code + Caido MCP + 792 Skills + 35 Subagentes especializados. Do reconhecimento ao…☆16Jul 15, 2026Updated 3 months ago
- Chrome MV3 parameter/endpoint/secret harvester for authorized web security testing (GAP-style + Next.js RSC path maps)☆12Sep 9, 2026Updated 2 months ago
- YWH Programs Selector is a CLI tool to filter bug bounty programs from platforms like YesWeHack☆11Jan 29, 2026Updated 9 months ago
- How fast can you write a Google Protocol Buffer (signed) VarInt?☆13May 9, 2021Updated 5 years ago
- NextForge — unified Next.js exploitation framework. RCE · SSRF · middleware · authorized lab only.☆18Sep 23, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Mnemonic kubectl commands☆10Jul 23, 2026Updated 3 months ago
- The repo will search for the latest highest severity CVEs and keep them updated daily! Run by Claude Routines.☆21Updated this week
- A tool to manipulate parameters inside URLs with different modes in order to check for reflected parameters.☆10Sep 2, 2023Updated 3 years ago
- An offensive-security methodology that an AI coding agent can actually execute — 88 class docs, 6 agents, 24 scripts, evidence-first vali…☆27Nov 2, 2026Updated last week
- repo do Diego☆10Nov 7, 2023Updated 3 years ago
- A project to track ideas needed by the infosec community.☆11Dec 5, 2017Updated 8 years ago
- ☆62Jul 15, 2026Updated 3 months ago
Are these results useful?