Open Source Claude Code Tools for Automated Bug Bounty Hunting
Three open source repositories turn Claude Code into an automated bug bounty hunting pipeline. The tools cover both web2 and web3 security testing, running entirely within Claude Code conversations.
Key Components
The trilogy consists of three interconnected repositories:
- claude-bug-bounty: You point it at a target and Claude handles recon, maps the attack surface, runs scanners for IDOR, SSRF, XSS, SQLi, OAuth, GraphQL, race conditions, and LLM injection. It walks you through a 4-gate validation checklist, then writes a submission-ready HackerOne or Bugcrowd report.
- web3-bug-bounty-hunting-ai-skills: Focuses on smart contract security, covering 10 bug classes including reentrancy, flash loan attacks, oracle manipulation, and access control issues. Includes Foundry PoC templates and real Immunefi case studies so Claude understands what paid bugs look like.
- public-skills-builder: Feed it 500 disclosed reports from HackerOne or GitHub writeups and it generates structured skill files, one per vulnerability class, ready to load into Claude Code. No private reports needed.
How They Work Together
The three repos function as a pipeline: public-skills-builder builds the knowledge base, web3 repo provides smart contract context, and claude-bug-bounty runs the actual hunting operations. All tools are free and open source, available on GitHub.
The creator is open to contributions for adding scanners or Claude prompt templates. The tools aim to automate manual recon, scanning, and report writing processes that security researchers typically perform manually.
📖 Read the full source: r/ClaudeAI
👀 See Also
MLJAR Studio: Local AI Data Analyst That Generates Reproducible Notebooks
MLJAR Studio is a desktop app that turns natural language questions into Python notebooks executed locally, with AutoML for tabular data and support for local LLMs via Ollama.
Blip MCP Server: Draw UI Changes for Claude Code Instead of Describing Them
Blip is an MCP server for Claude Code that replaces verbal UI change descriptions with visual annotations. You draw directly on your running application, and Claude writes the corresponding code based on the annotated screenshot.
Maestro v1.5.0 adds Claude Code support for multi-agent orchestration
Maestro v1.5.0, an open-source multi-agent orchestration platform, now runs as a native plugin on Claude Code in addition to Gemini CLI. The update includes deeper design planning, a 42-step orchestration backbone, agent capability enforcement, and security hardening.
Needle: A 26M Parameter Function-Calling Model That Runs at 6000 tok/s on Mobile
Cactus open-sources Needle, a 26M parameter model for single-shot function calling, achieving 6000 tok/s prefill and 1200 tok/s decode on consumer devices. Built with Simple Attention Networks (no FFNs), it beats several larger models on tool-use benchmarks.