Agentic Bug Hunter
An AI-powered bug-bounty toolkit that runs reconnaissance, tests for vulnerabilities, validates findings against a strict gate, and writes a submission-ready report for platforms such as HackerOne, Bugcrowd, Intigriti or Immunefi.
Agentic Bug Hunter installs as a standalone CLI, bughunter, that needs no subscription, or as a Claude Code plugin. Running bughunter setup connects a free AI provider, and bughunter hunt target.com runs the recon-to-report loop; full reconnaissance also relies on external tools such as subfinder, httpx, nuclei, katana, ffuf and nmap, installed with a bundled script.
It remembers patterns found on one target to inform work on the next, and sessions resume where they left off, with output written to ~/.bughunter/.
It is written in Python, installs with uv tool install agentic-bug-hunter or pipx, and is licensed under MIT.