Bug bounty

Strix is an open-source AI-powered penetration testing platform that autonomously identifies and validates vulnerabilities in applications through...

CyberStrike is an open-source AI-powered offensive security agent that automates penetration testing by integrating with LLMs (Claude, GPT, etc.) to...

pentest-ai is an AI-driven penetration testing tool that verifies exploit findings by re-executing them rather than trusting scanner output,...

Metabigor is an OSINT reconnaissance tool written in Go that performs network discovery, certificate transparency searches, IP enrichment, and...

Claude-BugHunter is a specialized skill bundle for the Claude Code system that transforms Claude into a bug-hunting and red-team operator, bundling...

pentest-ai-agents is a collection of 50 Claude Code subagents that extend Claude into an offensive security research assistant, covering recon, web...

BugHunter is an AI-powered bug bounty hunting toolkit that automates reconnaissance, vulnerability scanning across 20 vulnerability classes, and...

reconFTW is an automated reconnaissance framework designed for bug bounty hunters and penetration testers to enumerate subdomains, perform security...

This is a specialized research and penetration-testing toolkit for reverse-engineering ChatGPT subscription payment flows (Plus/Team/Pro via Stripe,...

This is a curated index of OSINT (Open Source Intelligence) tools and resources organized by category—covering areas like breach databases, social...

ScopeSentry is a distributed security scanning platform designed for asset reconnaissance, subdomain enumeration, vulnerability detection, and...

IPRanges aggregates public IP address ranges from major cloud providers, search engine crawlers, and CDN services (Google, AWS, Microsoft, OpenAI,...

dirsearch is a web path brute-forcer tool for discovering hidden directories and files on web servers during penetration testing and bug bounty work....

Afrog is a vulnerability scanner and penetration testing tool designed for bug bounty hunters, penetration testers, and red teamers. It focuses on...

Awesome-hacking-lists is a curated collection repository aggregating penetration testing tools, security utilities, and hacking resources across...

Awesome-Hacking is a curated meta-list that aggregates other 'awesome' lists covering hacking, penetration testing, and security research topics such...

Subjack is a DNS takeover scanner written in Go that identifies subdomain hijacking vulnerabilities across nine attack vectors, including dangling...

Pentest Swarm AI is an autonomous penetration testing framework that orchestrates multiple AI agents (recon, classification, exploitation, reporting)...

sn0int is a semi-automatic OSINT framework and package manager designed for IT security professionals, bug bounty hunters, and law enforcement to...

reNgine is an automated reconnaissance framework for web application penetration testing that streamlines information gathering through configurable...