Open Source Claude Code Tools for Automated Bug Bounty Hunting
Three open source repositories turn Claude Code into an automated bug bounty hunting pipeline. The tools cover both web2 and web3 security testing, running entirely within Claude Code conversations.
Key Components
The trilogy consists of three interconnected repositories:
- claude-bug-bounty: You point it at a target and Claude handles recon, maps the attack surface, runs scanners for IDOR, SSRF, XSS, SQLi, OAuth, GraphQL, race conditions, and LLM injection. It walks you through a 4-gate validation checklist, then writes a submission-ready HackerOne or Bugcrowd report.
- web3-bug-bounty-hunting-ai-skills: Focuses on smart contract security, covering 10 bug classes including reentrancy, flash loan attacks, oracle manipulation, and access control issues. Includes Foundry PoC templates and real Immunefi case studies so Claude understands what paid bugs look like.
- public-skills-builder: Feed it 500 disclosed reports from HackerOne or GitHub writeups and it generates structured skill files, one per vulnerability class, ready to load into Claude Code. No private reports needed.
How They Work Together
The three repos function as a pipeline: public-skills-builder builds the knowledge base, web3 repo provides smart contract context, and claude-bug-bounty runs the actual hunting operations. All tools are free and open source, available on GitHub.
The creator is open to contributions for adding scanners or Claude prompt templates. The tools aim to automate manual recon, scanning, and report writing processes that security researchers typically perform manually.
📖 Read the full source: r/ClaudeAI
👀 See Also
ClaudeAI Brainstorming Mode Gets Visual Companion for Mockups and UI Approval
A user discovers a new 'Visual companion' feature in ClaudeAI brainstorming mode that serves mockups on a local web server, enabling back-and-forth UI tweaks before building.
Rails Is Built for AI: Conventions, Token Efficiency, and Benchmark Results
Rails' conventions give AI agents a map, cutting tokens and boosting accuracy. Benchmark shows OPUS-5 at 92.1% accuracy, 47k tokens per run.
Adam CAD Harness Integrates with Fusion and Onshape for Agentic CAD Editing
Adam’s agentic CAD harness now integrates with Autodesk Fusion and PTC Onshape, reading and editing feature trees via natural language. Install via one-liner commands for macOS/Windows.
Total Recall: Local Knowledge Graph for Claude Code Conversation History
Total Recall is an open-source system that ingests Claude Code's JSONL conversation transcripts into a SQLite database with full-text search and vector embeddings, making conversation history searchable across sessions. It retrieves actual conversation excerpts with DAG-aware context and includes a ChatGPT importer.