awarexone

    awarexone/Agentic-Bug-Hunter

    AI-powered bug bounty hunting toolkit that works with or without subscription.

    security
    agentic-ai
    ai-security
    appsec
    bug-bounty
    bugcrowd
    Python
    MIT
    5.5K stars
    978 forks
    5.5K GitHub watchers
    Updated Nov 1, 2026
    View on GitHub

    Build with Backblaze B2

    SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.

    Explore Backblaze Labs

    Loading star history...

    Where it stands

    Rank, growth pace and release cadence relative to everything GStars tracks.

    1 release in the last 90 days, the latest 72 days ago, with 39 contributors on GitHub.

    Peaked at #27 in the weekly ranking the week of Jun 28, its best in the past year.

    Use Cases & Benefits

    • Provides an AI-powered bug bounty hunting toolkit that automates recon, vulnerability testing, validation, and report generation from the terminal.
    • Enables fully standalone operation without paid AI subscriptions by auto-selecting free or local AI providers, ensuring accessibility and privacy.
    • Use for professional bug bounty hunters needing an end-to-end automated workflow from attack surface mapping to submission-ready reports.
    • Use for security researchers auditing Web3 smart contracts with integrated multi-class vulnerability detection and proof-of-concept generation.
    • Use for penetration testers requiring continuous session memory and chaining of findings to discover complex, multi-step vulnerabilities.

    Should you depend on it?

    License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.

    License

    MIT

    Permissive: commercial use, modification and redistribution are allowed with attribution.

    Community files

    • README: present
    • Contributing guide: present
    • Code of conduct: present

    Watch-outs

    No watch-outs from GStars' checks.

    General guidance from repository metadata, not legal advice. How we score

    From the README

    AI-powered bug bounty hunting — recon to report, in your terminal.

    Find vulnerabilities. Validate them. Get paid. No subscription required.

    Here's what you see when you launch it.

    A professional bug bounty hunting toolkit that works with or without a Claude subscription. Give it a target — it handles recon, tests for vulnerabilities, validates findings through a strict gate, and writes submission-ready reports for HackerOne, Bugcrowd, Intigriti, and Immunefi.

    It remembers everything. Patterns found on one target inform the next. Sessions pick up where they left off.

    Works as a Claude Code plugin or as a fully standalone CLI (bughunter) powered by free AI providers.

    You no longer need Claude Code, Claude Pro, or any paid AI subscription.

    Excerpt from the awarexone/Agentic-Bug-Hunter README on GitHub (MIT license). © its authors.Read the full README on GitHub

    Daily snapshots

    Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots

    Forks

    978+240

    Open issues

    10-6

    Compared with peers in Security

    Fastest-growing repositories GStars tracks in this cohort for the week of Nov 1, by 7-day star growth

    awarexone/Agentic-Bug-Hunter compared with Security repositories by stars, 7-day star growth, health score and last release
    RepositoryStars+7dHealthLast release
    cloudflare/security-audit-skill61.7K+8.8K17—
    KeygraphHQ/shannon51.2K+1.1K328 days ago
    vxcontrol/pentagi33.5K+7123831 days ago
    Asymptote-Labs/agent-beacon3.3K+36040today
    caddyserver/caddy78.8K+267601 day ago
    awarexone/Agentic-Bug-Hunter5.5K—5772 days ago
    Category median51.2K+71238—

    Discover Repositories

    Search across tracked repositories by name or description