bug bounty plugins

23 tagged bug bounty, measured the same way as everything else here.

Browse within: cybersecurity 8ai-security 7

Claude-BugHunter

02

elementalsouls/Claude-BugHunter

Plugin Claude Code

83-skill bug-hunting & external red-team bundle for Claude Code — 58 hunt- web/vuln-class + framework skills, enterprise platform attack chains (M365/Entra, Okta, SharePoint, vCenter, SSL-VPN, APK/iOS), recon/OSINT, reporting & validation gates, and Burp MCP integration. Skills auto-load by topic; 15 slash commands in.

3.9k 2d ago A tokens not measured original MIT

pentest-ai-agents

03

0xSteph/pentest-ai-agents

Plugin Claude Code

Marketplace for pentest-ai-agents — specialist Claude Code subagents for authorized penetration testing.

2.2k 15d ago A tokens not measured original MIT

pentest-ai-agents

04

0xSteph/pentest-ai-agents

Plugin Claude Code

52 specialist subagents for authorized penetration testing and red team engagements — recon, web/API, Active Directory, cloud, mobile, wireless, exploitation, post-exploitation, detection, forensics, and reporting.

2.2k 15d ago A tokens not measured original MIT

elementalsouls

05

Zyrexnn/Cybermes

Plugin Claude Code

Plugin marketplace listing 1 plugin: claude-bughunter.

668 2d ago A tokens not measured copy · 92% Apache-2.0

Claude-BugHunter

06

Zyrexnn/Cybermes

Plugin Claude Code

82-skill bug-hunting & external red-team bundle for Claude Code — 57 hunt- web/vuln-class + framework skills, enterprise platform attack chains (M365/Entra, Okta, SharePoint, vCenter, SSL-VPN, APK/iOS), recon/OSINT, reporting & validation gates, and Burp MCP integration. Skills auto-load by topic; 15 slash commands in.

668 2d ago A tokens not measured copy · 88% Apache-2.0

threatswarm

07

mukul975/Threatswarm

Plugin Claude Code

Plugin marketplace listing 1 plugin: threatswarm.

75 4mo ago A tokens not measured original MIT

threatswarm-plugin

08

mukul975/Threatswarm

Plugin Claude Code

Complete offensive security operator workspace: 27 specialist agents, 6 engagement commands, 5 reference skill libraries, scope-gated hooks, and evidence logging for professional penetration testing and red-team operations.

75 4mo ago A tokens not measured original MIT

cybersec-toolkit

09

26zl/cybersec-toolkit

Plugin Claude Code

Cybersecurity skill library — security how-tos, offensive/defensive methodology, and CTF/bounty playbooks for Claude Code.

46 4d ago A tokens not measured original MIT

cybersec-toolkit

10

26zl/cybersec-toolkit

Plugin Claude Code

872 on-demand security skills for CTF, pentest, bug bounty, DFIR, detection engineering, cloud, identity, and red/blue team work. Skills are plain Markdown and activate by task without permanently consuming context. Bundles vendored skills under mixed licenses (MIT, Apache-2.0, CC-BY-SA-4.0) — see per-source…

46 4d ago A tokens not measured original MIT

find-cve-agent

11

ByamB4/find-cve-agent

Plugin Claude Code

CVE hunting harness for open source security research. A 5-agent team that systematically finds, validates, and reports real vulnerabilities in open source packages.

45 5mo ago A tokens not measured original Apache-2.0

akira

14

kalpmodi/akira

Plugin Claude Code

The AI pentest co-pilot that actually finds bugs. Phase-chained, evidence-gated offensive security skills for bug bounty and authorized pentesting.

21 1mo ago A tokens not measured original MIT

pentest

15

humaidhahm/opencode-pentester

Plugin Claude Code

Full penetration testing framework - 69 attack categories across 16 domains covering OWASP, injection, authentication, cloud, and more.

21 6d ago A tokens not measured

DouglasRao/Claude-Pentest-Skills

Plugin Claude Code

Professional penetration testing skills for Claude Code — structured offensive workflows covering two independent tracks: (1) Web track: web-recon, web-exploitation, web-postexploitation, web-report; (2) AD track: ad-recon, ad-exploitation, ad-postexploitation, ad-report. All skills include automatic evidence capture.

11 4mo ago A tokens not measured original MIT

shor

17

tr4m0ryp/shor

Plugin Claude Code

Shor — autonomous AI web pentester. Provides the /shor-setup slash-command: an interactive wizard that guides you from zero to a running scan (black-box or white-box, GCP deployment included).

9 1mo ago A tokens not measured

72stack-sec

19

Little-H-lying-flat/72stack-sec

Plugin Claude Code

A collection of workflows for finding security weaknesses in websites and services, including security-response programs, public testing programs, and bug bounties. The description does not provide enough detail about its individual tools or steps.

5 yesterday A tokens not measured original MIT

claude-hunterkit

20

vigilantshield/Claude-HunterKit

Plugin Claude Code

148 offensive security skills — web, API, AI, network, cloud, recon, auth. Bug bounty, red team, pentest. Recon-first conditional agent launch pipeline.

5 1mo ago A tokens not measured

outrider-recon

21

Ap6pack/outrider-recon

Plugin Claude Code

Claude-native authorized external recon and ASM methodology bundle with 90 documented capabilities across 11 skills, deterministic Python controls, an optional loopback-only limited-control web plane, explicit human-reviewed finding promotion, and optional fixed policy-gated MCP enrichment. It does not provide…

4 24d ago A tokens not measured

ip-rotator

23

Aladeen12541/claude-ip-rotator

Plugin Claude Code

AWS API Gateway IP rotation for security testing. Single switch routes ALL HTTP/HTTPS traffic (nuclei, httpx, ffuf, curl, everything) through rotating AWS IPs to bypass WAF rate limits and IP blocks.

2 1mo ago A tokens not measured original MIT