AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude Code.
Claude Bug Bounty is a Claude Code plugin that turns the Claude AI assistant into a terminal-based bug bounty hunting workflow covering reconnaissance through report submission. It installs a set of slash commands, including `/recon`, `/hunt`, `/validate`, `/report`, and `/autopilot`, each backed by external open-source tools such as subfinder, httpx, nuclei, katana, ffuf, and dalfox. The `/hunt` command tests for 20 Web2 vulnerability classes including IDOR, SSRF, SQL injection, HTTP request smuggling, and SAML attacks, while `/web3-audit` runs a 10-class smart contract audit against Solidity files with Foundry proof-of-concept templates. A 7-Question Gate in `/validate` filters out weak findings before reporting, and `/report` generates platform-specific submissions for HackerOne, Bugcrowd, Intigriti, and Immunefi in roughly 60 seconds. The plugin stores hunt memory in JSONL files, allowing sessions to resume mid-target and carry patterns across engagements. It requires Claude Code with a Pro or Max plan, making it suited to security researchers already working within that environment.
- ✓Open-source license (MIT)
- ✓Actively maintained (<30d)
- ✓Healthy fork ratio
- ✓Clear description
- ✓Topics declared
- ✓Documented (README)
git clone https://github.com/shuvonsec/claude-bug-bountyResumen de Tools
Lo que la gente pregunta sobre claude-bug-bounty
¿Qué es shuvonsec/claude-bug-bounty?
+
shuvonsec/claude-bug-bounty es tools para el ecosistema de Claude AI. AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude Code. Tiene 2.8k estrellas en GitHub y se actualizó por última vez today.
¿Cómo se instala claude-bug-bounty?
+
Puedes instalar claude-bug-bounty clonando el repositorio (https://github.com/shuvonsec/claude-bug-bounty) o siguiendo las instrucciones del README en GitHub. ClaudeWave también te ofrece bloques de instalación rápida en esta misma página.
¿Es seguro usar shuvonsec/claude-bug-bounty?
+
Nuestro agente de seguridad ha analizado shuvonsec/claude-bug-bounty y le ha asignado un Trust Score de 100/100 (tier: Verified). Revisa el desglose completo de comprobaciones superadas y flags en esta página.
¿Quién mantiene shuvonsec/claude-bug-bounty?
+
shuvonsec/claude-bug-bounty es mantenido por shuvonsec. La última actividad registrada en GitHub es de today, con 12 issues abiertos.
¿Hay alternativas a claude-bug-bounty?
+
Sí. En ClaudeWave puedes explorar tools similares en /categories/tools, ordenados por popularidad o actividad reciente.
Despliega claude-bug-bounty en tu cloud
Lleva este repo a producción en minutos. Cada plataforma genera su propio entorno con variables de entorno editables.
¿Mantienes este repo? Añade un badge a tu README
Pega el badge en tu README de GitHub para mostrar que está auditado por ClaudeWave. Cada badge enlaza de vuelta a esta página y muestra el Trust Score actual.
[](https://claudewave.com/repo/shuvonsec-claude-bug-bounty)<a href="https://claudewave.com/repo/shuvonsec-claude-bug-bounty"><img src="https://claudewave.com/api/badge/shuvonsec-claude-bug-bounty" alt="Featured on ClaudeWave: shuvonsec/claude-bug-bounty" width="320" height="64" /></a>Más Tools
A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls.
An AI SKILL that provide design intelligence for building professional UI/UX multiple platforms
🪨 why use many token when few token do trick — Claude Code skill that cuts 65% of tokens by talking like caveman
AI coding assistant skill (Claude Code, Codex, OpenCode, Cursor, Gemini CLI, and more). Turn any folder of code, SQL schemas, R scripts, shell scripts, docs, papers, images, or videos into a queryable knowledge graph. App code + database schema + infrastructure in one graph.
A light-weight and powerful meta-prompting, context engineering and spec-driven development system for Claude Code by TÂCHES.
CLI proxy that reduces LLM token consumption by 60-90% on common dev commands. Single Rust binary, zero dependencies