#

bug-bounty

A bug bounty program is a deal offered by many websites, organizations and software developers by which individuals can receive recognition and compensation for reporting bugs, especially those pertaining to security exploits and vulnerabilities.

Here are 1,208 public repositories matching this topic...

usestrix / strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

Updated Sep 20, 2026
Python

maurosoria / dirsearch

Web path scanner

Updated Sep 19, 2026
Python

Agentic-Bug-Hunter

awarexone / Agentic-Bug-Hunter

AI-powered bug bounty hunting toolkit that works with or without subscription.

hacking penetration-testing bug-bounty recon cti hacking-tool ethical-hacking bugcrowd hackerone vulnerability-scanner ai-security claude-ai claude-code

Updated Sep 22, 2026
Python

Claude-BugHunter

elementalsouls / Claude-BugHunter

A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.

bug-bounty application-security web-security pentesting bugbounty offensive-security ethical-hacking red-team bugcrowd hackerone security-tools claude ai-security anthropic claude-code claude-skills

Updated Sep 22, 2026
Python

DanOps-1 / Gpt-Agreement-Payment

ChatGPT Plus/Team/Pro 订阅协议端到端重放工具集 · hCaptcha 视觉求解器 · 反欺诈机制实证研究 / End-to-end protocol replay toolkit for ChatGPT Plus/Team/Pro subscription with from-scratch hCaptcha solver and empirical anti-fraud research

stripe bug-bounty mitmproxy captcha-solver ctf-tools anti-fraud vlm playwright adversarial-ml hcaptcha-solver chatgpt protocol-replay

Updated Jun 15, 2026
Python

SubDomainizer

nsonaniya2010 / SubDomainizer

A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.

security secrets s3-bucket python3 bug-bounty bugbounty s3-buckets security-automation security-tools cloud-storage-services subdomain-scanner subdomain-enumeration find-subdomains external-javascripts secretfinder find-secrets madeinindia

Updated Sep 14, 2026
Python

pentest-ai

0xSteph / pentest-ai

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.

Updated Sep 13, 2026
Python

dumpall

0xHJK / dumpall

一款信息泄漏利用工具，适用于.git/.svn/.DS_Store泄漏和目录列出

security tools spider scanner hacking python3 svn bug-bounty pentesting githack dumpall

Updated Dec 27, 2022
Python

nikitastupin / clairvoyance

Obtain GraphQL API schema even if the introspection is disabled

graphql security penetration-testing bug-bounty

Updated Dec 5, 2025
Python

uphiago / recon-skills

Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full write-up at hiago.sh

penetration-testing bug-bounty wordpress-security offensive-security red-team ssrf security-automation reconnaissance cloud-security subdomain-enumeration supabase firebase-hacking jwt-attacks hermes-agent cors-exploitation

Updated Sep 1, 2026
Python

diodb

disclose / diodb

Open-source vulnerability disclosure and bug bounty program database

legal data hackers bug-bounty safety simplicity responsible-disclosure safe-harbor-framework security-research vulnerability-disclosure disclosure-policy bug-bounty-hunters

Updated Aug 11, 2026
Python

yassineaboukir / sublert

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

python security hacking penetration-testing certificate-transparency bug-bounty pentest information-gathering monitoring-tool reconnaissance certificate-transparency-logs sublert

Updated Feb 5, 2021
Python

cdxiaodong / cain-agent

Real-world AI penetration testing engineer for authorized assessments — built-in cloud module covering AWS/Azure/GCP + Aliyun/Tencent/Huawei clouds. Built on Claude Agent SDK

aws penetration-testing bug-bounty pentest offensive-security aliyun red-team security-tools cloud-security redteam ai-agent llm cloud-pentest claude-agent-sdk

Updated Sep 21, 2026
Python

H-mmer / pentest-agents

Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, exploit chain builder.

mcp bug-bounty pentesting agents bugcrowd hackerone security-tools claude-code

Updated Jun 12, 2026
Python

bl4de / security-tools

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

python scanner static-analysis hacking bug-bounty infosec pentesting ctf bugbounty ctf-tools webappsec security-tools itsecurity bug-bounties security-testing

Updated Apr 22, 2026
Python

Cybermes

Zyrexnn / Cybermes

Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-model LLM orchestration.

Updated Sep 19, 2026
Python

alexbieber / Bug_Bounty_writeups

BUG BOUNTY WRITEUPS - OWASP TOP 10 🔴🔴🔴🔴✔

google facebook bug bug-bounty bugbounty bugcrowd hackerone bug-bounty-hunters bug-bounty-recon bug-bounty-hunting alexbieber bug-bounty-poc bug-poc integriti

Updated Jun 27, 2022
Python

pis10 / TraceSurface

发现藏在前端代码里的 API，验证未授权访问风险 · 动态浏览器追踪 × JavaScript 静态分析

python security static-analysis penetration-testing bug-bounty web-security security-tools api-discovery api-security playwright

Updated Sep 7, 2026
Python

faiyazahmad07 / xss_vibes

A modern tool written in Python that automates your xss findings.

cybersecurity bug-bounty ethical-hacking-tools

Updated Nov 26, 2023
Python

PatrikFehrenbach / h1-brain

MCP server that connects AI assistants to HackerOne for bug bounty hunting

security ai mcp hacking bug-bounty pentesting hackerone claude bug-bounty-tools mcp-server

Updated Apr 7, 2026
Python

Followers: 665 followers
Website: github.com/topics/bugbounty
Wikipedia: Wikipedia

Related topics

penetration-testing pentest pentesting security