Vibe Coding DiscoverClaude-BugHunter
View on GitHubA Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.
Claude Code Agent Skills bundle (83 skills, 15 slash commands, 681 disclosed-report patterns) that turns Claude into a bug-bounty hunter and external red-team operator: web/API vuln classes, enterprise CVE chains, recon, triage and reporting, with scope gates.
Use Cases
Bug bounty hunting on HackerOne/Bugcrowd/Intigriti programsWeb app and API pentesting (XSS, SQLi, SSRF, IDOR, JWT, OAuth, GraphQL)External red-team initial access against internet-facing enterprise estateRecon and OSINT: subdomain enum, cert transparency, JS/secret scanningEnterprise platform attack chains (M365/Entra, Okta, vCenter, SSL-VPN, SharePoint)Cloud misconfig and post-credential escalation reviewFinding triage, severity mapping (VRT) and evidence hygieneDrafting disclosure reports and client-facing red-team deliverablesScaffolding and routing work per engagement via /hunt and the cbh CLIRunning a skill-pack harness across multiple agent CLIs
Built With
- Language
- Python
- Frameworks
- Claude Code · Agent Skills · MCP · OpenCode · OpenAI Codex CLI · Hermes Agent · Google AntiGravity · Burp Suite MCP
Tags
claude-code · agent-skills · bug-bounty · pentesting · red-team · offensive-security · recon · osint · vulnerability-research · web-security · api-security · triage · reporting · cloud-security · burp-mcp · security-tools