AI-powered bug bounty hunting toolkit that works with or without subscription.

python osint mcp penetration-testing bug-bounty recon appsec hacking-tool ethical-hacking red-team bugcrowd hackerone security-tools vulnerability-scanner graphql-security ai-security claude-ai llm-security agentic-ai claude-code

• Updated Nov 12, 2026
• Python

A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.

bug-bounty application-security web-security pentesting bugbounty offensive-security ethical-hacking red-team bugcrowd hackerone security-tools claude ai-security anthropic claude-code claude-skills

• Updated Nov 11, 2026
• Python

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

bug bounty vrp bugcrowd hackerone federacy hackenproof intigriti yeswehack

• Updated Nov 12, 2026

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

bash framework scanner enumeration pentesting bugbounty kali-linux kali bugcrowd hackerone reconnaissance subdomain-scanner subfinder subdomain-enumeration sublist3r httprobe collected-subdomains subdomain-finder recon-subdomain

• Updated Jun 27, 2024
• Shell

Tips and Tutorials for Bug Bounty and also Penetration Tests.

bug vulnerability vulnerabilities bugs bugbounty ethical-hacking red-team bugcrowd hackerone red-teaming bugbountytips bugbounty-tool bugbountytricks bugbounty-reports ethical-hacker bugbounty-checklist

• Updated Oct 7, 2025

Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, exploit chain builder.

mcp bug-bounty pentesting agents bugcrowd hackerone security-tools claude-code

• Updated Jun 12, 2026
• Python

Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.

search google osint yandex bing hacking duckduckgo yahoo python3 infosec baidu recon bugbounty search-engines bugcrowd google-dorks hackerone reconnaissance googledork intigriti

• Updated Oct 8, 2026
• Python

BUG BOUNTY WRITEUPS - OWASP TOP 10 🔴🔴🔴🔴✔

google facebook bug bug-bounty bugbounty bugcrowd hackerone bug-bounty-hunters bug-bounty-recon bug-bounty-hunting alexbieber bug-bounty-poc bug-poc integriti

• Updated Jun 27, 2022
• Python

This project crawls bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) hourly and dumps them into the bounty-targets-data repo

bug bounty vrp bugcrowd hackerone federacy hackenproof intigriti yeswehack

• Updated Oct 9, 2026
• Ruby

This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference

dns censys osint domains subdomain enumeration certificate-transparency pentesting levelup dnssec bugcrowd nsec nsec3 crtsh

• Updated Feb 5, 2019
• Python

Jie stands out as a comprehensive security assessment and exploitation tool meticulously crafted for web applications. Its robust suite of features encompasses vulnerability scanning, information gathering, and exploitation, elevating it to an indispensable toolkit for both security professionals and penetration testers. 挖洞辅助工具(漏洞扫描、信息收集)

crawler scanner scan src vulnerability vulnerability-detection vulnerability-scanners bugcrowd hackerone jie vul shiro-exp vulnerability-exploitation apollo-exp security-copilot

• Updated Jul 5, 2024
• Go

Bugcrowd’s baseline priority ratings for common security vulnerabilities

taxonomy rating vulnerabilities vrt bugcrowd

• Updated Aug 26, 2026
• Python

DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it

golang hacking bug-bounty pentest bypass bugcrowd hackerone forbiddens dir-listing

• Updated Jan 9, 2024
• Go

Find exposed API keys based on RegEx and get exploitation methods for some of keys that are found

python regex exploits infosec bugbounty ethical-hacking bugcrowd hackerone apikeys

• Updated Nov 6, 2023
• Python

Bugbounty scope tool

security infosec bugbounty burp owasp-zap bugcrowd burpsuite hackerone hackenproof intigriti yeswehack

• Updated Mar 5, 2025
• Go

Monitoring framework to detect and report newly found subdomains on a specific target using various scanning tools

bugbounty bugcrowd hackerone subfinder subdomain-enumeration

• Updated Jul 13, 2024
• Python

Domains belonging to the most reputed public bug bounty programs. [NOT FOR NON-MONETARY OR PRIVATE PROGRAMS]

bug dataset subdomain bug-bounty bounty recon bugbounty hacktoberfest bugcrowd hackerone reconnaissance bounty-hunters hackenproof intigriti yeswehack bug-bounty-recon bounty-hunting hacktoberfest2024 standoff365 bugbase

• Updated Aug 29, 2024

Python library and CLI for the Bug Bounty Recon API

security osint hacking cybersecurity web-security recon bugbounty bugcrowd hackerone federacy hackenproof bugbountytips yeswehack bug-bounty-recon

• Updated Jul 3, 2026
• Python

Hacking tools

dns http automation tcp hacking xss owasp poc rce sqli fuzzing csrf bugbounty directory-lister bughunting subdomains bugcrowd hackerone information-gathering-tools pocgenerator

• Updated Feb 11, 2025

⚡ FastDork speeds up repetitive dorking: build reusable lists, open search tabs in batches, and import matching results without copying links manually.

chrome google extension cybersecurity bugbounty bugcrowd dork hackerone pentest-tool intigriti fastdork

• Updated Jul 5, 2026
• JavaScript