Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, exploit chain builder.
17 files for Claude Code, Codex, OpenCode and GitHub Copilot: SubagentStop, Stop, SessionStart, PreToolUse and 13 more — 63,845 tokens loaded in every session.
AGENTS.md A 791 tok CLAUDE.md A 1,231 tok providers/copilot/.github/instructions/pentest-agents-chain-table.instructions.md C 2,942 tok providers/copilot/.github/instructions/pentest-agents-hunting.instructions.md A 4,119 tok providers/copilot/.github/instructions/pentest-agents-identities.instructions.md A 1,550 tok providers/copilot/.github/instructions/pentest-agents-mistakes.instructions.md A 17,588 tok providers/copilot/.github/instructions/pentest-agents-never-submit.instructions.md A 419 tok providers/copilot/.github/instructions/pentest-agents-payloads.instructions.md A 27,701 tok providers/copilot/.github/instructions/pentest-agents-techniques.instructions.md B 4,484 tok providers/copilot/.github/instructions/pentest-agents-vendor-status.instructions.md A 1,504 tok providers/copilot/.github/instructions/pentest-agents-waf-bypass-protocol.instructions.md B 1,516 tok .claude/settings.json B — .claude/settings.json A — .claude/settings.json A — .claude/settings.json A — .claude/settings.json A — .claude/settings.json A — These files are H-mmer/pentest-agents's own configuration — they tell Claude Code, Codex, OpenCode and GitHub Copilot how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.