About this project

Agentic Bug Hunter is an AI-powered bug bounty hunting toolkit that automates the full vulnerability discovery workflow: reconnaissance, vulnerability testing, validation, and report generation. It can be used as a Claude Code plugin or as a standalone CLI command (`bughunter`) that requires no paid AI subscription. The toolkit supports multiple AI providers with a free-first priority: Ollama (100% free, runs locally), Groq (free tier), DeepSeek (very cheap), plus paid options like Claude API, OpenAI, Grok, OpenRouter, OrcaRouter, and LiteLLM. It auto-detects providers in a specific order and allows switching anytime via `bughunter setup`. Key features include: - **Recon**: subdomain enumeration, live host probing, URL crawling, nuclei sweeps, cloud bucket discovery, parameter discovery, secrets hunting, subdomain takeover detection, CVE scanning, 403 bypass, port scanning, and screenshot galleries - **Hunting**: tests for IDOR, auth bypass, SSRF, XSS, SQLi, logic flaws, CORS misconfigurations, CRLF injection, NoSQL injection, JWT vulnerabilities, OOB interactions, DOM XSS, and LLM prompt injection - **Validation**: a 7-Question Gate that filters weak findings before reporting - **Reporting**: generates submission-ready reports for HackerOne, Bugcrowd, Intigriti, and Immunefi - **Web3 support**: smart contract audits across 10 bug classes, token rug pull scanning, and Foundry PoC templates - **Session memory**: persists findings and patterns across sessions, with the ability to resume from where you left off - **MCP support**: can be used from AI agents like Cursor, Claude Code, Codex, and OpenCode - **9 specialized AI agents**: recon, report writing, validation, web3 auditing, chain building, autopilot, recon ranking, token auditing, and credential hunting The toolkit includes 33 slash commands, 26 Web2 vulnerability classes, 10 Web3 bug classes, and a comprehensive project structure with skills, commands, agents, tools, memory, rules, tests, and documentation. It requires Python 3.10+ and can be installed via a simple install script that creates a system-wide `bughunter` command.