Web2 bug bounty Agent Skill — evidence-based, no AI slop. Covers 18 vulnerability classes across HackerOne, Bugcrowd, Intigriti, and YesWeHack.
☆76Feb 21, 2026Updated 8 months ago
Alternatives and similar repositories for bug-reaper
Users that are interested in bug-reaper are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- High-performance JavaScript reconnaissance tool with Aho-Corasick pattern matching for bug bounty hunters and security researchers☆11Jan 24, 2026Updated 9 months ago
- 0xJS is an AI-powered JavaScript Security Tool☆68Apr 16, 2026Updated 6 months ago
- Red Team Coin for crypto-mining operations.☆27Mar 1, 2026Updated 8 months ago
- A simple recon pipeline☆40Sep 24, 2026Updated last month
- Autonomous AI agents for bug bounty hunting, 18 parallel hunters, built-in validator, zero setup.☆22Apr 16, 2026Updated 6 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆11Mar 1, 2025Updated last year
- My Main App Hacking CheckList☆34Jun 20, 2026Updated 4 months ago
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆24Mar 16, 2026Updated 7 months ago
- An obsessive, expert-tier knowledge base + AI skill system for professional bug bounty hunting, security research, and penetration testin…☆69Apr 25, 2026Updated 6 months ago
- Fetch, download, and decompile Android/iOS/Exe assets from HackerOne bug bounty programs☆43Oct 12, 2026Updated 3 weeks ago
- Agent skill for rigorous bug bounty report triage, validation, severity escalation, and submission-ready reporting.☆150Oct 9, 2026Updated 3 weeks ago
- Ultra-fast hybrid IPv4/IPv6 port scanner with adaptive concurrency, banner grab, TLS sniff, and built-in httpx + nuclei recon pipeline — …☆18Sep 30, 2026Updated last month
- Unofficial MCP server for accessing your HackerOne reports, programs, scope, and earnings from Claude Code☆41Apr 1, 2026Updated 7 months ago
- ☆14Apr 24, 2026Updated 6 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Tool to list smb shares and enumerate their content in a Windows domain☆14Jul 6, 2026Updated 4 months ago
- The official Rifteo agent skills library - a collection of reusable instruction sets for AI agents covering security testing, audit, and …☆37Sep 16, 2026Updated last month
- Mass Hunting & Exploitation PoC for CVE-2025-55182 & CVE-2025-66478☆37Dec 7, 2025Updated 10 months ago
- Collection of documentation, tools, and tips related to vulnerability research.☆279Sep 24, 2026Updated last month
- A research project to add some brrrrrr to Burp☆215Feb 16, 2026Updated 8 months ago
- A simple script that edits the XML of a macro-enabled Word document (.docm or Word 97 document) to add a reference to a remote stylesheet…☆11Oct 5, 2022Updated 4 years ago
- ☆16Jan 15, 2026Updated 9 months ago
- It serves as a practical guide for security researchers to identify and test WordPress targets effectively during bug bounty hunting.☆27Jul 19, 2026Updated 3 months ago
- A Python tool to resolve domains to IPs, fetch related CVEs, and display open ports☆17Nov 21, 2025Updated 11 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- TokenTwin Checker — Dual Token BAC/IDOR Tester for Burp Suite☆99Aug 24, 2026Updated 2 months ago
- Proper Notes of EWPTX v3☆20Jun 10, 2025Updated last year
- your ai debugger, vibe hacking tool☆50Feb 21, 2026Updated 8 months ago
- Windows CSC Service Elevation of Privilege Vulnerability☆15Jun 12, 2024Updated 2 years ago
- A comprehensive collection of various techniques and methods for bypassing Two-Factor Authentication (2FA) security mechanisms.☆121Oct 5, 2026Updated last month
- all round pentest skill☆460Sep 16, 2026Updated last month
- Ruby On Rails unrestricted render() exploit☆16Feb 9, 2018Updated 8 years ago
- Sectiv is a skill-driven AI security review for Burp Suite. Pick captured traffic and a review goal (IDOR, XSS, SQLi, SSRF…), and ge…☆81Updated this week
- A Pentesters Confluence Keyword Scanner☆21Dec 3, 2024Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- A windows 11 rootkit in Rust☆22Mar 23, 2025Updated last year
- Dump exposed HTTP .git fast☆53Nov 11, 2022Updated 3 years ago
- A proof-of-concept PDF file designed for authorized security testing of PDF upload functionality and PDF viewer behavior, including XSS a…☆79Aug 28, 2026Updated 2 months ago
- Transforming Smooth AD Automation Scripts into Attack Vectors☆20Nov 22, 2025Updated 11 months ago
- Burp Extension to manipulate AES encrypted payloads☆13Feb 4, 2022Updated 4 years ago
- TCP Port Forwarding Utility on C☆42Jun 18, 2026Updated 4 months ago
- AI agents for pentesting, code audit, fuzzing, vulnerability discovery, and reverse engineering: harnesses, sandboxes, security MCP serve…☆48Updated this week