hackerone agents

59 tagged hackerone, measured the same way as everything else here.

Browse within: bug-bounty 68bugcrowd 59agents 50ai-security 9bounty-hunters 9claude-ai 9ethical-hacking 9pentest 9pentest-tool 9security-research 9security-tools 9

ssti-hunter

01

H-mmer/pentest-agents

Agent Claude Code

Server-Side Template Injection specialist. Covers Jinja2 (H1 #74), Twig, Velocity, FreeMarker, ERB, Handlebars, Thymeleaf. Use for any rule-engine, comment/message rendering, PR automation, admin template, or user-customizable template surface. Systematic blocklist mapper + CVE bypass runner + runtime-vs-parse…

not rated 1.0k +17 4mo ago A 83 tokens

autopilot

02

ASK191225/bugbounty-kit

Agent Claude Code

Autonomous hunt loop agent. Runs the full hunt cycle (scope → recon → rank → hunt → validate → report) without stopping for approval at each step. Configurable checkpoints (--paranoid, --normal, --yolo). Uses scopechecker.py for deterministic scope safety on every outbound request. Logs all requests to audit.jsonl.…

not rated 4 2mo ago A 84 tokens

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: