90 tagged bug-bounty, measured the same way as everything else here.
Browse within: ai-security 88hackerone 68bugcrowd 59ctf 53cybersecurity 52agents 50Autonomous Agents 27blue-team 27ethical-hacking 22api-security 14application-security 12cloud-security 12opencode 12claude-ai 9
Agent Claude Code
Server-Side Template Injection specialist. Covers Jinja2 (H1 #74), Twig, Velocity, FreeMarker, ERB, Handlebars, Thymeleaf. Use for any rule-engine, comment/message rendering, PR automation, admin template, or user-customizable template surface. Systematic blocklist mapper + CVE bypass runner + runtime-vs-parse…
Agent Claude Code
Lead red team operator. Drives pentest methodology, coordinates phases, dispatches subagents.
Agent Claude Code
Password cracking and credential attack specialist. Use when working with password hashes, hash cracking, wordlist attacks, credential analysis, or password auditing. Triggers on: password, hash, crack, hashcat, john, wordlist, NetNTLMv2, Kerberoast, NTLM, bcrypt, credential, ASREP, JWT crack, mask attack, rule…
Agent Claude Code
Autonomous hunt loop agent. Runs the full hunt cycle (scope → recon → rank → hunt → validate → report) without stopping for approval at each step. Configurable checkpoints (--paranoid, --normal, --yolo). Uses scopechecker.py for deterministic scope safety on every outbound request. Logs all requests to audit.jsonl.…
Agent Claude Code
Security testing workflow assistant for recon, web, network, mobile, pwn, crypto, reverse engineering, and forensics phases.
Agent Claude Code
Master coordinator for authorized AI penetration testing — master coordinator for multi-agent orchestration, skill loading, and evidence tracking, skill loading, and evidence tracking.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: