bug-bounty

usestrix/strix

+1.4k

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

opentrap

+178

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

Awesome-Hacking

+545

A collection of various awesome lists for hackers, pentesters and security researchers

Claude-BugHunter

+99

A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.

Agentic-Bug-Hunter

+79

AI-powered bug bounty hunting toolkit that works with or without subscription.

ScopeSentry

+124

ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes

open-kritt

+53

Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.

xalgorix

+47

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

CyberStrike

+63

Open-source AI-powered offensive security harness for automated penetration testing.