Security
Plugin
claude-bug-bounty
AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude Code.
Plugin Signal91/100Strong
maintained98
capable85
documented100
adopted77
Install
$ npx -y skills add shuvonsec/claude-bug-bounty --agent claude-code
Run the curl in your terminal, the rest in Claude Code.
Stats
4,176
Stars
752
Forks
Active
Maintenance
Python
Language
MIT
License
3d ago
Last commit
5mo ago
Created
Repo: shuvonsec/claude-bug-bounty
What's inside
Skills
15/argusArgus — the all-seeing scanner suite. Six automated scanners for high-value web + LLM bug classes — CORS misconfiguration (origin reflection / null / credentialed read), CRLF & host-header injection, NoSQL injection (operator auth-bypass / $where blind), JWT attacks (alg:none //bb-methodologyUse at the START of any bug bounty hunting session, when switching targets, or when feeling lost about what to do next. Master orchestrator that combines the 5-phase non-linear hunting workflow with the critical thinking framework (developer psychology, anomaly detection,/bug-bountyComplete bug bounty workflow — recon (subdomain enumeration, asset discovery, fingerprinting, HackerOne scope, source code audit), pre-hunt learning (disclosed reports, tech stack research, mind maps, threat modeling), vulnerability hunting (IDOR, SSRF, XSS, auth bypass, CSRF,/cicd-securityCI/CD pipeline security hunting — GitHub Actions workflow injection, secret exfiltration, self-hosted runner poisoning, dependency confusion, OIDC token theft, and supply chain attacks. Covers sisakulint scanning, manual workflow analysis, and chaining CI/CD bugs into critical/client-reverseClient-side request-signing and anti-bot token reversal for bug bounty — when a request carries a sign/sig/hmac/token/nonce/timestamp/X-Sensor header that Burp Repeater cannot replay, recover the signer just enough to reproduce the request outside the client. Packet-first/credential-attackPassword spray methodology for bug bounty — when to do it vs web-vuln hunting, the wordlist-gen + breach-check + osint-employees + spray pipeline, mode selection (http-form / oauth / o365 / okta), rate-limit + lockout tactics, BBP legal guardrails, success detection, and the
Show all 15 skillsShow fewer
/graphql-auditGraphQL security hunting — introspection abuse, field suggestion enumeration (clairvoyance), batching DoS, IDOR via aliasing, auth bypass, injection via arguments, subscription abuse, depth/complexity bombs, and WAF bypass. Covers graphw00f fingerprinting, gqlmap, graphql-cop,/meme-coin-auditMeme coin and token security audit — rug pull detection (honeypot, hidden mint, fee manipulation, LP lock bypass), Solana SPL token analysis (freeze authority, mint authority, metadata mutability), Token-2022 extension risks (transfer hooks, permanent delegate), DEX liquidity/mobile-pentestMobile app pentest for bug bounty (Android APK + iOS IPA) — runtime-first workflow: install app, proxy through Burp/mitmproxy, drive the UI, capture packets, then test the API exactly like a web target; escalate to decompile (apktool/jadx) and Frida/objection only when traffic/report-writingBug bounty report writing for H1/Bugcrowd/Intigriti/Immunefi — report templates, human tone guidelines, impact-first writing, CVSS 3.1 scoring, title formula, impact statement formula, severity decision guide, downgrade counters, pre-submit checklist. Use after validating a/security-arsenalSecurity payloads, bypass tables, wordlists, gf pattern names, always-rejected bug list, and conditionally-valid-with-chain table. Use when you need specific payloads for XSS/SSRF/SQLi/XXE/NoSQLi/command injection/SSTI/IDOR/path-traversal/HTTP smuggling/WebSocket/MFA bypass,/triage-validationFinding validation before writing any report — 7-Question Gate (all 7 questions), 4 pre-submission gates, always-rejected list, conditionally valid with chain table, CVSS 3.1 quick reference, severity decision guide, report title formula, 60-second pre-submit checklist. Use/web2-reconWeb2 recon pipeline — subdomain enumeration (subfinder, Chaos API, assetfinder), live host discovery (dnsx, httpx), URL crawling (katana, waybackurls, gau), directory fuzzing (ffuf), JS analysis (LinkFinder, SecretFinder), continuous monitoring (new subdomain alerts, JS change/web2-vuln-classesComplete reference for 26 web2 bug classes with root causes, detection patterns, bypass tables, exploit techniques, and real paid examples. Covers IDOR, auth bypass, XSS, SSRF (11 IP bypass techniques), SQLi, business logic, race conditions, OAuth/OIDC, file upload (10 bypass/web3-auditSmart contract security audit — 10 DeFi bug classes (accounting desync, access control, incomplete path, off-by-one, oracle, ERC4626, reentrancy, flash loan, signature replay, proxy), pre-dive kill signals (TVL < $500K etc), Foundry PoC template, grep patterns for each class,
Agents
9autopilotAutonomous hunt loop agent. Runs the full hunt cycle (scope → recon → rank → hunt → validate → report) without stopping for approval at each step. Configurable checkpoints (--paranoid, --normal, --yolo). Uses scope_checker.py for deterministic scope safety on every outboundchain-builderExploit chain builder. Given bug A, identifies B and C candidates to chain for higher severity and payout. Knows all major chain patterns — IDOR→auth bypass, SSRF→cloud metadata, XSS→ATO, open redirect→OAuth theft, S3→bundle→secret→OAuth, prompt injection→IDOR, subdomaincredential-hunterAutonomous credential-attack pipeline runner. Chains /wordlist-gen + /osint-employees + /breach-check (data-prep stages, runs without prompts) then HARD STOPS before /spray (live attack stage requires human go/no-go). Designed so the user only types the target once instead ofrecon-agentSubdomain enumeration and live host discovery specialist. Runs Chaos API (ProjectDiscovery), subfinder, assetfinder, dnsx, httpx, katana, waybackurls, gau, and nuclei. Produces prioritized attack surface for a target. Use when starting recon on a new target domain.recon-rankerAttack surface ranking agent. Takes recon output and hunt memory, produces a prioritized attack plan. Ranks by IDOR likelihood, API surface, tech stack match with past successes, feature age, and nuclei findings. Use after recon to decide what to test first.report-writerBug bounty report writer. Generates professional H1/Bugcrowd/Intigriti/Immunefi reports. Impact-first writing, human tone, no theoretical language, CVSS 4.0 calculation included. Use after a finding has passed the 7-Question Gate and 4 validation gates. Never generates reports
Show all 9 agentsShow fewer
token-auditorFast meme coin and token security auditor. Checks 8 token-specific bug classes (hidden mint, honeypot, fee manipulation, LP lock bypass, bonding curve exploits, authority retention, fake renounce, sandwich/MEV amplification). Runs token_scanner.py for automated red flagvalidatorFinding validator. Runs the 7-Question Gate and 4-gate checklist on a described finding. Kills weak/theoretical findings fast before report writing. Prevents N/A submissions. Use before writing any report — describe the finding and this agent decides PASS, KILL, or DOWNGRADEweb3-auditorSmart contract security auditor. Checks 10 bug classes in order of frequency (accounting desync 28%, access control 19%, incomplete path 17%, off-by-one 22% of Highs, oracle errors, ERC4626 attacks, reentrancy, flash loan oracle manipulation, signature replay, proxy/upgrade
Commands
33/arsenalShow which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from high-signal repos. Use to bootstrap a fresh box or audit which optional capabilities are wired in. Usage: /arsenal | /arsenal <tool-name>/autopilotRun autonomous hunt loop on a target — scope check → recon → rank surface → hunt → validate → report with configurable checkpoints. Usage: /autopilot target.com [--paranoid|--normal|--yolo]/breach-checkHIBP k-anonymity check on a password wordlist. Enriches each password with its breach count, ranks DESC. Free API (no key), only first 5 chars of SHA-1 sent. Output -> <input>-ranked.txt. Usage /breach-check <wordlist> [--min-count N] [--max-count N] [--with-counts]/bypass-403Probe a 403/401 endpoint with the most-paid bypass tricks (header injection, path encoding, method swap, WAF fingerprint, vendor-specific). Wraps byp4xx when installed; otherwise runs a built-in matrix of 38+ techniques. Usage: /bypass-403 <url> | /bypass-403 -l <urls-file>/chainBuild an exploit chain — given bug A, finds B and C to combine for higher severity and payout. Knows common chain patterns: IDOR→ATO, SSRF→cloud metadata, XSS→ATO, open redirect→OAuth theft, S3→bundle→secret→OAuth. Usage: /chain/cloud-reconSweep cloud assets for a target — public S3/Azure/GCP buckets via S3Scanner and cloud_enum, plus CloudFlare-bypassed origin IPs via CloudFail (or built-in DNS-history fallback). Use --keyword for storage discovery and --cf-bypass to find an origin IP behind CloudFlare. Usage:
Show all 33 commandsShow fewer
/corsScan an endpoint for CORS misconfiguration — arbitrary-origin reflection, null-origin trust, credential exposure, suffix/prefix regex bypass, scheme downgrade. Usage: /cors <url> [--cookie "session=..."] | /cors -l urls.txt/crlfTest for CRLF / HTTP response-splitting and host-header injection — Set-Cookie injection, cache poisoning, reset-poisoning. Usage: /crlf <url> [--host-header] | /crlf -l urls.txt/huntActive vulnerability hunt against a target by invoking tools/hunt.py (which calls vuln_scanner.sh against recon/<target>/). Auto-runs recon first if no recon dir exists. Usage: /hunt target.com/intelOn-demand intelligence fetch for a target — CVEs, disclosed reports, new features. Wraps learn.py + hunt memory context. Usage: /intel target.com/jwt-scanJWT attack toolkit (offline) — alg:none forgery, RS256→HS256 algorithm confusion, weak-secret crack, static claim analysis. Usage: /jwt-scan <token> [--analyze|--alg-none|--confuse --public-key pub.pem|--crack --wordlist f]/llm-redteamLLM red-team corpus runner — fires categorized prompt-injection / jailbreak / system-prompt-leak / data-exfil / indirect-injection / guardrail-bypass payloads at a chat endpoint and canary-detects which land. Usage: /llm-redteam --url <chat-endpoint> --field message [--category/memory-gcInspect or rotate hunt-memory JSONL files (audit.jsonl, patterns.jsonl, journal.jsonl). Caps file size and keeps N rotated backups so memory does not grow unbounded./nosqliNoSQL injection scanner (MongoDB/Mongoose/operator-injection DBs) — auth bypass via $ne/$gt operators, bracket-syntax query injection, $where time-based blind. Usage: /nosqli --login <url> --user-field email --pass-field password/oobOut-of-band orchestrator — confirm BLIND SSRF/XXE/SQLi/RCE/Log4Shell by correlating interactsh callbacks to the payload that fired them. Usage: /oob --payloads <oob-domain> [--class ssrf,sqli] | /oob --listen | /oob --correlate inter.jsonl --payloads-file p.json/osint-employeesGather employee names + email patterns for password spray prep. Pipeline theHarvester (search engines + CT logs) -> derive names from email local-parts -> username-anarchy expansion. LinkedIn search is opt-in via --with-linkedin. Output -> recon/<target>/osint/. Usage/param-discoverDiscover hidden HTTP parameters on a URL or list of URLs using Arjun (or x8 fallback). Hidden params are gold for IDOR, SSRF, LFI, redirect, and authorization bypass — often missed by automated scanners. Usage: /param-discover <url> | /param-discover -l <urls-file>/pickupPick up a previous hunt on a target — shows hunt history, untested endpoints, and memory-informed suggestions. Usage: /pickup target.com/reconRun the full recon pipeline by invoking tools/recon_engine.sh — subdomain enum (subfinder + amass + crt.sh + wayback), httpx live host probing with tech detection, nmap port scan, gau URL collection, JS analysis, ffuf directory fuzzing, parameter discovery, config exposure/rememberLog current finding or successful pattern to hunt memory. Auto-fills from /validate output if available. Usage: /remember/reportWrite a submission-ready bug bounty report. Generates H1/Bugcrowd/Intigriti/Immunefi format with CVSS 3.1 score, proof of concept, impact statement, and remediation. Run /validate first. Usage: /report/scan-cvesRun a focused nuclei CVE sweep against a host or recon directory, optionally filtered by year. Runs log4j-scan in parallel when installed for legacy enterprise stacks. Usage: /scan-cves <host-or-file> [--year 2024] | /scan-cves --recon <recon-dir>/scope-aggregatePull every in-scope asset for a bug bounty program across HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi in one shot. Uses bbscope when authenticated, otherwise the public bounty-targets-data dump. Output is one host per line, ready to feed into /recon. Usage:/scopeCheck if a target asset is in scope for the program before hunting or submitting. Reads program scope page, checks asset against in-scope and out-of-scope lists, verifies the asset is owned by the target organization. Usage: /scope <asset>/secrets-huntHunt leaked credentials in a filesystem path, git history, JS bundles from a recon run, or an entire GitHub org. Wraps trufflehog (verifies live keys against issuer APIs), noseyparker (fast on huge histories), and gitleaks (default rule pack). Falls back to a regex grep if no/sprayPassword spray with hard guards — typed-hostname confirmation, lockout warning, audit log. Modes: http-form (custom login page), oauth (password grant), o365 + okta (via TREVORspray). Default delay 30min/round + 60s jitter. Usage /spray <url> --mode <mode> --users <file>/surfaceShow ranked attack surface for a target based on recon output + hunt memory. Invokes recon-ranker agent. Usage: /surface target.com/takeoverScan subdomains for takeover candidates (dangling CNAMEs to GitHub Pages, S3, Heroku, Shopify, etc.). Wraps dnsReaper (best signal) and subjack (fast Go fallback). With no scanner installed, runs a built-in fingerprint grep over a curated set of providers. Usage: /takeover/token-scanMeme coin and token security scan — checks for rug pull vectors (hidden mint, honeypot, fee manipulation, LP lock bypass, authority retention, bonding curve exploits, fake renounce, sandwich amplification). Runs automated token_scanner.py + manual 8-class audit. Usage:/triageQuick 7-Question Gate triage on a finding before writing a report. Kills N/A submissions before they happen. Faster than /validate — for quick go/no-go decisions. Usage: /triage/validateValidate a finding — runs 7-Question Gate + 4-gate checklist. Kills weak findings before report writing. Prevents N/A submissions that hurt validity ratio. Usage: /validate/web3-auditSmart contract security audit — runs through 10 bug class checklist (accounting desync, access control, incomplete path, off-by-one, oracle errors, ERC4626, reentrancy, flash loan, signature replay, proxy/upgrade). Applies pre-dive kill signals first. Generates Foundry PoC/wordlist-genGenerate a company-specific password wordlist for spray attacks. Crawls the target website with cewler, dedups + length-filters, then applies hashcat rules to produce a ranked candidate list. Output -> recon/<target>/wordlists/. Usage /wordlist-gen <target> [--depth N] [--mode
README
1What Is This?
A professional bug bounty hunting toolkit that works with or without a Claude subscription. Give it a target — it handles recon, tests for vulnerabilities, validates findings through a strict gate, and writes submission-ready reports for HackerOne, Bugcrowd, Intigriti, and Immunefi.
It remembers everything. Patterns found on one target inform the next. Sessions pick up where they left off.
Works as a Claude Code plugin or as a fully standalone CLI (bughunter) powered by free AI providers.
Standalone Mode — No Subscription Required
You no longer need Claude Code, Claude Pro, or any paid AI subscription.
Install once, use the bughunter command from any terminal on your machine:
git clone https://github.com/shuvonsec/claude-bug-bounty.git
cd claude-bug-bounty
./install.sh --agent standalone
Rerun the same command after pulling updates. The installer detects and
refreshes the active managed bughunter command, including older installations
under /usr/local/bin or ~/.local/bin, while preserving your saved provider
configuration in ~/.bughunter/config.json.
To uninstall the standalone command while keeping its configuration:
./uninstall.sh --agent standalone
Use --purge-config to also delete ~/.bughunter/config.json. The uninstaller
also supports claude, opencode, pi, codex, agents, and all targets.
bughunter help # show every command
bughunter setup # choose your AI provider (Ollama is free + offline)
bughunter recon target.com # map the attack surface
bughunter hunt target.com # hunt for vulnerabilities
bughunter validate "finding" # 7-Question Gate on your finding
bughunter report # write a submission-ready report
bughunter chat # interactive AI hunting shell
bughunter providers # list all available AI providers
bughunter models # list models and show the selected one
bughunter status # check which provider is active
bughunter h target.com # short alias for hunt
bughunter r target.com # short alias for recon
bughunter v "finding" # short alias for validate
Free AI Providers (auto-detected, free-first priority)
| Provider | Cost | Privacy | Speed | Get Started |
|---|---|---|---|---|
| Ollama | 100% free · runs locally | Full — stays on your machine | Fast | ollama pull qwen2.5:14b |
| Groq | Free tier available | Cloud | Very fast | console.groq.com → get API key |
| DeepSeek | Very cheap (v4-flash / v4-pro) | Cloud | Fast | platform.deepseek.com |
| Claude API | Paid | Cloud | Fast | console.anthropic.com |
| OpenAI | Paid | Cloud | Fast | platform.openai.com |
| Grok (xAI) | Paid | Cloud | Fast | console.x.ai → grok-4.5 |
| OpenRouter | Subscription / pay-as-you-go | Cloud | Fast | openrouter.ai/keys → get API key |
BugHunter auto-detects providers in this order: Ollama → Groq → DeepSeek → … → OpenRouter → Claude → OpenAI
Switch providers or choose an installed Ollama model anytime: bughunter setup.
The setup can also be fully non-interactive:
bughunter setup --provider ollama --model qwen2.5:14b
For a one-off override, put the option before the command:
bughunter --provider ollama --model qwen3:14b hunt target.com
Zero-cost fully offline setup
# 1. Install Ollama (runs AI locally, no internet needed after download)
curl -fsSL https://ollama.ai/install.sh | sh
ollama pull qwen2.5:14b # ~9 GB, one-time download
# 2. Install BugHunter
git clone https://github.com/shuvonsec/claude-bug-bounty.git
cd claude-bug-bounty
./install.sh --agent standalone # creates system-wide 'bughunter' command
# 3. Hunt
bughunter setup # choose Ollama, then choose one of its installed models
bughunter recon target.com
Groq setup (free cloud, fastest option)
export GROQ_API_KEY="your-key-here" # free at console.groq.com
./install.sh --agent standalone
bughunter setup # choose Groq
bughunter hunt target.com
Quick Start
Option A — standalone (no subscription, works for everyone)
git clone https://github.com/shuvonsec/claude-bug-bounty.git
cd claude-bug-bounty
./install.sh --agent standalone # creates system-wide 'bughunter' command
bughunter setup # pick a free AI provider
bughunter recon target.com
bughunter hunt target.com
bughunter validate "my finding"
bughunter report
Option B — Claude Code plugin (requires Claude Code)
git clone https://github.com/shuvonsec/claude-bug-bounty.git
cd claude-bug-bounty
chmod +x install_tools.sh && ./install_tools.sh # subfinder · httpx · nuclei · katana · ffuf
chmod +x install.sh && ./install.sh # skills + commands → ~/.claude/
claude
/recon target.com # map the attack surface
/hunt target.com # test for vulnerabilities
/validate # run the 7-Question Gate
/report # write the submission
Option C — let Claude install it (Claude Code only)
Open your terminal, run claude, then paste:
Install the Claude Bug Bounty toolkit from https://github.com/shuvonsec/claude-bug-bounty
into ~/tools/. Clone the repo, run ./install_tools.sh then ./install.sh.
Verify /recon /hunt /validate /report are available.
Commands
Core Workflow
| Command | What It Does |
|---|---|
/recon target.com | Subdomain enum · live host probing · URL crawl · nuclei sweep |
/hunt target.com | Tests IDOR · auth bypass · SSRF · XSS · SQLi · logic flaws and more |
/validate | 7-Question Gate — kills weak findings before you waste time reporting |
/report | Generates an H1 · Bugcrowd · Intigriti · Immunefi submission in 60s |
/autopilot target.com | Full loop, autonomous — scope → recon → hunt → validate → report |
Recon & Enumeration
| Command | What It Does |
|---|---|
/surface target.com | Ranked attack surface from recon data + memory |
/scope-aggregate <program> | All in-scope assets across H1 · Bugcrowd · Intigriti · YWH · Immunefi |
/cloud-recon --keyword <name> | Public S3 · Azure · GCP buckets + CloudFlare-bypass origin IPs |
/param-discover <url> | Hidden HTTP parameters via Arjun · x8 |
/secrets-hunt --js-bundle <dir> | Leaked credentials in source, JS bundles, or a GitHub org |
/takeover --recon <dir> | Subdomain takeover candidates via dnsReaper · subjack |
/scan-cves <host> | Focused nuclei high/critical sweep + optional log4j-scan |
/bypass-403 <url> | Header · method · encoding tricks against 403/401 |
Scanners (Web + LLM)
| Command | What It Does |
|---|---|
/cors <url> | CORS misconfig — origin reflection · null · credentialed |
/crlf <url> | CRLF / response-splitting + host-header injection |
/nosqli <url> | NoSQL injection (operator bypass · $where timing) |
/jwt-scan <token> | Offline JWT toolkit — alg:none · RS256→HS256 · secret crack |
/oob <target> | Out-of-band listener (interactsh) for blind SSRF/XXE/SQLi |
/llm-redteam <endpoint> | LLM red-team corpus — prompt injection · jailbreak · exfil |
Smart Contract (Web3)
| Command | What It Does |
|---|---|
/web3-audit <contract.sol> | 10-class smart contract audit with Foundry PoC template |
/token-scan <contract> | Rug pull scanner — mint authority · LP lock · honeypot · bonding curve |
Session & Utility
| Command | What It Does |
|---|---|
/pickup target.com | Resume from last session — untested endpoints first |
/intel target.com | CVEs + disclosed reports relevant to this target |
/chain | Bug A found → finds bugs B and C that chain with it |
/scope <asset> | Checks if a domain or URL is in scope before you test it |
/triage | Quick 2-minute go/no-go check |
/remember | Logs the current finding or technique to hunt memory |
/memory-gc | Inspect or rotate hunt-memory JSONL files (10 MB cap, 3 backups) |
/arsenal [tool] | Lists installed external tools or prints an install hint |
What It Finds
| Vulnerability | Typical Payout |
|---|---|
| IDOR / BOLA | $500 – $5K |
| Auth Bypass | $1K – $10K |
| XSS (Stored / Reflected / DOM) | $500 – $5K |
| SSRF | $1K – $15K |
| Business Logic | $500 – $10K |
| Race Conditions | $500 – $5K |
| SQL Injection | $1K – $15K |
| OAuth / OIDC | $500 – $5K |
| File Upload → RCE | $500 – $10K |
| GraphQL Auth Bypass | $1K – $10K |
| LLM / Prompt Injection | $500 – $10K |
| API Misconfiguration (mass assignment · JWT · CORS) | $500 – $5K |
| Account Takeover | $1K – $20K |
| SSTI | $2K – $10K |
| Subdomain Takeover | $200 – $5K |
| Cloud / Infra Exposure | $500 – $20K |
| HTTP Request Smuggling | $5K – $30K |
| Cache Poisoning | $1K – $10K |
| MFA / 2FA Bypass | $1K – $10K |
| SAML / SSO Attack | $2K – $20K |
| Error Disclosure / Debug Endpoints | $200 – $5K |
| CSS Injection | $500 – $5K |
| LFI → RCE | $1K – $15K |
| Insecure Deserialization | $5K – $30K |
| Dependency Confusion / Supply Chain | $1K – $20K |
| Padding Oracle / Crypto Misuse | $2K – $20K |
| Vulnerability | Typical Payout |
|---|---|
| Accounting Desync | $50K – $2M |
| Access Control | $50K – $2M |
| Incomplete Code Path | $50K – $2M |
| Off-By-One | $10K – $100K |
| Oracle Manipulation | $100K – $2M |
| ERC4626 Share Inflation | $50K – $500K |
| Reentrancy | $10K – $500K |
| Flash Loan Attack | $100K – $2M |
| Signature Replay | $10K – $200K |
| Proxy / Upgrade | $50K – $2M |
AI Agents
Nine specialists, each built for one job:
| Agent | Role |
|---|---|
recon-agent | Subdomain enum · live host discovery · URL crawl |
report-writer | Impact-first reports that get paid, not N/A'd |
validator | Runs the 7-Question Gate — kills weak findings |
web3-auditor | Smart contract audit across 10 bug classes |
chain-builder | Bug A → finds bugs B and C that chain with it |
autopilot | Full hunt loop with safety checkpoints |
recon-ranker | Ranks attack surface by highest-value targets first |
token-auditor | Meme coin / token rug pull and security scan |
credential-hunter | Wordlist gen → OSINT → breach-check → spray (hard-stop before spray) |
How It Works
You ─▶ /recon ─▶ /hunt ─▶ /validate ─▶ /report
│ │
▼ ▼
Hunt Memory 7-Question Gate
(persists across (kills weak findings
sessions) before you submit)
Every tool in the pipeline is gated on whether it's installed — missing tools are skipped, not errors. Auth headers set once carry through httpx · katana · ffuf · nuclei · dalfox automatically.
Project Structure
claude-bug-bounty/
│
├── skills/ # AI knowledge bases — loaded as /skill-name
│ ├── bug-bounty/ # Master workflow — all vuln classes, LLM testing, chains
│ ├── bb-methodology/ # Hunting mindset · 5-phase workflow · session discipline
│ ├── web2-recon/ # Subdomain enum · live host discovery · URL crawl
│ ├── web2-vuln-classes/ # 26 bug classes with bypass tables
│ ├── security-arsenal/ # Payloads · bypass tables · gf patterns
│ ├── triage-validation/ # 7-Question Gate · 4 gates · never-submit list
│ ├── report-writing/ # Templates for H1 · Bugcrowd · Intigriti · Immunefi
│ ├── web3-audit/ # Smart contract bugs · Foundry PoC · 10 bug classes
│ ├── meme-coin-audit/ # Rug pull detection · LP attacks · bonding curve
│ ├── credential-attack/ # Password spray methodology · legal guardrails
│ └── client-reverse/ # Request-signing / anti-bot token reversal
│
├── commands/ # 26 slash commands (/recon /hunt /validate /report …)
├── agents/ # 9 specialized AI agents (recon, validator, reporter …)
│
├── tools/ # Python + shell scanner pipeline (~35 tools)
│ ├── hunt.py # Master orchestrator
│ ├── recon_engine.sh # Subdomain + URL discovery
│ ├── vuln_scanner.sh # XSS · SQLi · SSRF · SSTI probe pipeline
│ ├── validate.py # 4-gate finding validator with identity checks
│ └── … # 30+ more scanners — see tools/README.md
│
├── memory/ # Cross-session hunt memory (pattern DB · audit log)
├── rules/ # Always-active hunting + reporting rules
├── tests/ # Regression test suite (pytest)
├── web3/ # 13-chapter smart contract audit guide
├── mcp/ # MCP integrations — Burp Suite · Caido · HackerOne API
├── wordlists/ # Curated wordlists + SecLists / PayloadsAllTheThings refs
├── scripts/ # Dork runner · full hunt pipeline
├── hooks/ # Claude Code hook configuration
├── site/ # bughunter.fun landing page
├── demo/ # Local vulnerable target for tutorial recordings
│
├── docs/ # Extended documentation
│ ├── advanced-techniques.md # Exploitation techniques + chaining strategies
│ ├── auth-sessions.md # Auth header management guide
│ ├── payloads.md # Payload reference for common vuln classes
│ ├── smart-contract-audit.md# Smart contract audit deep-dive
│ ├── TUTORIAL.md # A→Z video tutorial walkthrough
│ └── TODOS.md # Open improvement items
│
├── .github/ # GitHub community health files
│ ├── CONTRIBUTING.md # How to contribute
│ ├── CODE_OF_CONDUCT.md # Community standards
│ ├── SECURITY.md # Vulnerability reporting policy
│ ├── PULL_REQUEST_TEMPLATE.md
│ └── ISSUE_TEMPLATE/ # Bug report · Feature request · False positive
│
├── engine.py # Standalone CLI — 'bughunter' command, no subscription needed
├── brain.py # Multi-provider LLM layer (Ollama · Groq · DeepSeek · Claude · OpenAI)
├── agent.py # LangGraph-style ReAct hunting agent
├── install.sh # Install skills + commands → ~/.claude/ (or standalone mode)
├── install_tools.sh # Install subfinder · httpx · nuclei · katana · ffuf …
├── uninstall.sh # Remove skills + commands from ~/.claude/
├── uninstall_tools.sh # Remove external scanning tools
├── serve.py # Launch local demo target (python3 serve.py)
├── config.example.json # Auth session config template
├── requirements.txt # Python dependencies
├── CLAUDE.md # Claude Code plugin manifest (auto-loaded)
├── AGENTS.md # Multi-harness plugin guide (OpenCode · Codex · Pi)
├── SKILL.md # Master skill shortcut (auto-loaded by agent harnesses)
├── OPENCODE.md # OpenCode-specific installation guide
├── CHANGELOG.md # Version history
├── FAQ.md # Frequently asked questions
└── TERMS.md # Terms of use + authorized testing only
Installation
Prerequisites:
# macOS
brew install go python3 jq
# Linux (Ubuntu/Debian)
sudo apt install golang python3 jq
Scanning tools (installs subfinder · httpx · nuclei · katana · ffuf · gau · dnsx · nmap · dalfox and more):
chmod +x install_tools.sh && ./install_tools.sh
Standalone bughunter command (no subscription, works without Claude Code):
./install.sh --agent standalone
bughunter setup # choose Ollama (free) · Groq (free tier) · DeepSeek (cheap) · Claude · OpenAI
AI skills + commands into Claude Code:
chmod +x install.sh && ./install.sh
Other agent harnesses:
./install.sh --agent opencode # OpenCode
./install.sh --agent pi # Pi Agent
./install.sh --agent codex # Codex
./install.sh --agent all # every supported target
Optional: Chaos API key (better subdomain coverage)
export CHAOS_API_KEY="your-key"
echo 'export CHAOS_API_KEY="your-key"' >> ~/.zshrc
Rules
Seven rules run every session, no exceptions:
| # | Rule | Why |
|---|---|---|
| 1 | Read full scope first | Only test what the program authorizes |
| 2 | Real bugs only | "Can an attacker do this RIGHT NOW?" — if no, stop |
| 3 | Kill weak findings | A 30-second check saves hours of wasted reporting |
| 4 | Never go out of scope | One wrong request can get you banned |
| 5 | 5-minute rule | No progress after 5 minutes? Move on |
| 6 | Validate before report | /validate before spending 30 minutes writing |
| 7 | Impact first | Test the bugs with the worst consequences first |
Contributing
PRs welcome. Most valuable:
- New scanner modules or detection techniques
- Payload additions to
skills/security-arsenal/SKILL.md - Methodology improvements backed by paid reports
- Platform support (YesWeHack · Synack · HackenProof)
git checkout -b feature/your-contribution
git commit -m "feat: short description"
git push origin feature/your-contribution
Star History
Support
If BugHunter helps your hunts, you can fuel more of them:
Thanks
Thanks to everyone who has contributed to BugHunter. Click any avatar to open their GitHub profile.
File tree
250shuvonsec/claude-bug-bountyView on GitHub
.claude/
settings.json
.github/
CODE_OF_CONDUCT.md
CONTRIBUTING.md
ISSUE_TEMPLATE/
bug_report.md
false_positive.md
feature_request.md
PULL_REQUEST_TEMPLATE.md
SECURITY.md
.gitignore
agent.py
agents/
AGENTS.md
autopilot.md
chain-builder.md
credential-hunter.md
README.md
recon-agent.md
recon-ranker.md
report-writer.md
token-auditor.md
validator.md
web3-auditor.md
assets/
cli-banner.png
cli-banner.svg
brain.py
CHANGELOG.md
CLAUDE.md
commands/
arsenal.md
autopilot.md
breach-check.md
bypass-403.md
chain.md
cloud-recon.md
cors.md
crlf.md
hunt.md
intel.md
jwt-scan.md
llm-redteam.md
memory-gc.md
nosqli.md
oob.md
osint-employees.md
param-discover.md
pickup.md
README.md
recon.md
remember.md
report.md
scan-cves.md
scope-aggregate.md
scope.md
secrets-hunt.md
spray.md
surface.md
takeover.md
token-scan.md
triage.md
validate.md
web3-audit.md
wordlist-gen.md
config.example.json
demo/
__init__.py
app.py
README.md
docs/
advanced-techniques.md
auth-sessions.md
auth.example.json
CAPABILITY-GAPS.md
payloads.md
README.md
smart-contract-audit.md
TODOS.md
TUTORIAL.md
engine.py
FAQ.md
hooks/
hooks.json
README.md
install_tools.sh
install.sh
LICENSE
logo.png
mcp/
burp-mcp-client/
config.json
opencode-config.json
README.md
caido-mcp-client/
opencode-config.json
README.md
hackerone-mcp/
config.json
opencode-config.json
server.py
README.md
memory/
__init__.py
audit_log.py
pattern_db.py
README.md
rotation.py
schemas.py
OPENCODE.md
pytest.ini
README.md
requirements.txt
rules/
hunting.md
README.md
reporting.md
scripts/
dork_runner.py
full_hunt.sh
README.md
serve.py
site/
index.html
README.md
SKILL.md
skills/
argus/
SKILL.md
bb-methodology/
SKILL.md
bug-bounty/
SKILL.md
cicd-security/
SKILL.md
client-reverse/
references/
browser-js-signing.md
SKILL.md
credential-attack/
SKILL.md
graphql-audit/
SKILL.md
meme-coin-audit/
SKILL.md
mobile-pentest/
SKILL.md
report-writing/
SKILL.md
security-arsenal/
METHODOLOGY_CHEATSHEET.md
REFERENCES.md
SKILL.md
triage-validation/
SKILL.md
web2-recon/
SKILL.md
web2-vuln-classes/
SKILL.md
web3-audit/
SKILL.md
TERMS.md
tests/
conftest.py
test_audit_log.py
test_auth_session.py
test_autopilot_guard.py
test_brain_auto_detect.py
test_breach_checker.py
test_bypass_403_review_fixes.py
test_cicd_scanner.sh
test_cors_scanner.py
test_credential_store.py
test_crlf_scanner.py
test_dashboard.py
test_false_positives.py
test_hackerone_mcp.py
test_hackerone_server.py
test_hunt_target_types.py
test_intel_engine.py
test_jwt_scanner.py
test_lead_board.py
test_llm_redteam.py
test_memory_gc.py
test_mindmap.py
test_model_selection.py
test_nosqli_scanner.py
test_oob_listener.py
test_opencode_agent_frontmatter.py
test_pattern_db.py
test_recon_adapter.py
test_rotation.py
test_safe_method_policy.py
test_schemas_session_id.py
test_schemas.py
test_scope_checker.py
test_sneaky_bits.py
test_target_selector.py
test_token_scanner.py
test_validation_handoff.py
test_vuln_scanner_review_fixes.py
test_zendesk_idor_tool.py
tools/
__init__.py
_auth_helper.sh
_spray_http_form.py
_spray_oauth.py
auth_session.py
banner.py
banner.sh
breach_checker.py
bypass_403.sh
cicd_scanner.sh
cloud_recon.sh
cors_scanner.py
credential_store.py
crlf_scanner.py
cve_scan.sh
dashboard.py
eol_check.py
external_arsenal.sh
graphql_audit.sh
h1_idor_scanner.py
h1_mutation_idor.py
h1_oauth_tester.py
h1_race.py
h1_run.sh
hai_browser_recon.js
hai_payload_builder.py
hai_probe.py
hunt.py
intel_engine.py
jwt_scanner.py
lead_board.py
learn.py
llm_redteam.py
memory_gc.py
mindmap.py
multipart_mutator.py
nosqli_scanner.py
oob_listener.py
osint_employees.sh
param_discovery.sh
README.md
recon_adapter.py
recon_engine.sh
scope_aggregator.sh
scope_checker.py
secrets_hunter.sh
sneaky_bits.py
spray_orchestrator.sh
takeover_scanner.sh
target_selector.py
token_scanner.py
validate.py
vuln_scanner.sh
waf_encoder.py
waf_response_analyzer.py
wordlist_engine.sh
zendesk_idor_test.py
zero_day_fuzzer.py
uninstall_tools.sh
uninstall.sh
web3/
00-START-HERE.md
01-foundation.md
02-bug-classes.md
03-grep-arsenal.md
04-poc-and-foundry.md
05-triage-report-examples.md
06-methodology-research.md
07-case-study-role-misconfiguration.md
08-ai-tools.md
09-live-hunt-zksync.md
10-meme-coin-bugs.md
11-solana-token-audit.md
12-dex-lp-attacks.md
36-solidity-audit-mcp.md
README.md
wordlists/
api-endpoints.txt
common.txt
params.txt
raft-medium-dirs.txt
README.md
REFERENCES.md
sensitive-files.txtFAQ
claude-bug-bounty is a Claude Code plugin with 15 hand-picked skills for security work, indexed on Flowy. Install it with the command on its page. It includes argus, bb-methodology, bug-bounty. Its skills do not fire on their own yet. Request auto-invocation to have Flowy route them as you prompt. Free and open source.
- What is claude-bug-bounty?
- AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude Code.
- How do I install claude-bug-bounty?
- Run these in Claude Code: npx -y skills add shuvonsec/claude-bug-bounty --agent claude-code. Then prompt normally.
- Does claude-bug-bounty auto-invoke its skills?
- Not yet. It is indexed on Flowy as a plain plugin. Request auto-invocation on its page and Flowy will route its skills for you as you prompt.
- Is claude-bug-bounty free?
- Yes. Flowy is free and open source, with nothing gated. You can read every skill in full before you install.