Generate Claude Code bug bounty skills from public HackerOne reports and GitHub writeups — 18 vuln classes, no private reports needed
☆210Mar 12, 2026Updated 4 months ago
Alternatives and similar repositories for public-skills-builder
Users that are interested in public-skills-builder are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude…☆4,065Updated this week
- 18 Claude Code skill files for smart contract security — built from 2,749 Immunefi reports, 681 DeFiHack reproductions, and real hunt exp…☆114Mar 15, 2026Updated 4 months ago
- IP Finder tool, ipfinder collects IP addresses from Shodan search queries.☆17Dec 12, 2025Updated 7 months ago
- A fast and efficient subdomain hijacking scanner that checks for takeover vulnerabilities by matching HTTP response bodies against predef…☆31Apr 12, 2026Updated 3 months ago
- Convert your HackerOne reports into reusable AI skills.☆104Mar 9, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- RamiBot v3.8.0 is a local-first AI security operations platform integrating multi-LLM support, a dynamic red/blue team skill pipeline, MC…☆24Mar 22, 2026Updated 4 months ago
- Security testing toolkit for AI Agent: curated SecLists wordlists, injection payloads, and expert agents for authorized pentesting, CTFs,…☆348Jun 8, 2026Updated last month
- A powerful subdomain enumeration tool that aggregates data from multiple sources to create comprehensive lists of root subdomains.☆51May 2, 2026Updated 2 months ago
- Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more☆1,375Jul 15, 2026Updated 2 weeks ago
- Herramienta avanzada de escaneo XSS (Cross-Site Scripting) para auditorías de seguridad web, con capacidades de evasión de WAF y generaci…☆103Jan 7, 2026Updated 6 months ago
- A powerful Go tool for finding origin IPs of domains by querying multiple security APIs and validating results with built-in HTTP client.☆48Dec 4, 2025Updated 7 months ago
- MCP server that connects AI assistants to HackerOne for bug bounty hunting☆330Apr 7, 2026Updated 3 months ago
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆22Mar 16, 2026Updated 4 months ago
- List of Fresh DNS resolvers updates every 1 hour☆22Updated this week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆27Apr 12, 2026Updated 3 months ago
- ☆1,169Jan 28, 2026Updated 6 months ago
- Find XSS payloads that actually work by filtering them based on real-world constraints instead of blind payload spraying.☆278Jun 6, 2026Updated last month
- ✅ Experience the power of an automated Insecure Direct Object Reference (IDOR) vulnerability detection tool. Safeguard your applications …☆73Mar 9, 2025Updated last year
- ☆529Aug 21, 2025Updated 11 months ago
- Analyze Android native `.so` files☆126Jul 28, 2025Updated last year
- AI-powered modular Active Directory red-team framework for authorized penetration testing, AD enumeration, attack-path analysis, Kerber…☆340Jun 11, 2026Updated last month
- Monitor your targets and hunt fresh assets in real time.☆183Feb 23, 2026Updated 5 months ago
- Custom wordlist, updated regularly☆151Jun 26, 2026Updated last month
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Auto Frida is a powerful, all-in-one automation toolkit that handles everything from Frida installation to script injection. Zero manual …☆133Apr 15, 2026Updated 3 months ago
- A universal MCP client with proxying feature to interact with MCP Servers which support STDIO transport.☆22Apr 17, 2026Updated 3 months ago
- A Burp Suite extension for GraphQL security testing.☆66Mar 29, 2026Updated 4 months ago
- Autonomous Bug Bounty Hunting Framework powered by Claude Code. 20 AI agents, state-machine orchestration, Burp Suite MCP, credential vau…☆57May 19, 2026Updated 2 months ago
- 🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast…☆1,822Jun 21, 2026Updated last month
- rep+ — Burp-style HTTP Repeater for Chrome DevTools with built‑in AI to explain requests and suggest attacks☆1,601Jan 16, 2026Updated 6 months ago
- vulntechfinder is a powerful security tool that automates vulnerability scanning based on technology stack detection. It intelligently pr…☆16Apr 12, 2026Updated 3 months ago
- ☆50Feb 27, 2026Updated 5 months ago
- A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curat…☆3,207Jul 22, 2026Updated last week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- PDF Files for Pentesting☆15Jun 5, 2024Updated 2 years ago
- Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools…☆776Jun 12, 2026Updated last month
- Evaluation harness for Strix agent☆16Jan 23, 2026Updated 6 months ago
- A list of AI security skills☆52Jul 14, 2026Updated 2 weeks ago
- Grafana scanner with all public CVEs that I collected in one script to make grafana testing easier☆241Jul 7, 2026Updated 3 weeks ago
- Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.☆1,361Updated this week
- Simple XSS vulnerability checker tool very useful with xsschecker.☆28Nov 21, 2025Updated 8 months ago