Claude-BugHunter

83 Claude skills for bug bounty hunting and external red-team work.

Free Development & Engineering ★ 5492

#130 of 289 skill repos

5.5k GitHub stars

elementalsouls author

// about

Claude-BugHunter bundles skills, slash commands and a library of disclosed-report patterns across common vulnerability classes. It also includes attack matrices for enterprise identity and infrastructure, scaffolding for engagement folders, and Burp MCP integration. It is intended for authorized testing and bug bounty programs.

// how to install

See the repository README for setup instructions.

// works with Claude Code

// what’s inside

This repository bundles the following skills:

bug-bounty: Runs the full bounty workflow from recon and scope review to reporting.
bb-methodology: Helps decide what to do at the start of a hunt or when switching targets.
apk-redteam-pipeline: Acquires and tests Android APKs end to end.
cloud-iam-deep: Covers external attack paths against AWS, Azure and GCP IAM.
enterprise-vpn-attack: Attack matrix for external SSL VPN appliances such as Cisco ASA and Fortinet.
evidence-hygiene: Covers evidence capture and redacting cookies and secrets from proof-of-concept material.
bugcrowd-reporting: Bugcrowd-specific reporting advice, including category selection.

Claude-BugHunter

// about

// what’s inside

// similar skills in Development & Engineering