# Agentic Bug Hunter

An AI-powered bug-bounty toolkit that runs reconnaissance, tests for vulnerabilities, validates findings against a strict gate, and writes a submission-ready report for platforms such as HackerOne, Bugcrowd, Intigriti or Immunefi.

Agentic Bug Hunter installs as a standalone CLI, `bughunter`, that needs no subscription, or as a Claude Code plugin. Running `bughunter setup` connects a free AI provider, and `bughunter hunt target.com` runs the recon-to-report loop; full reconnaissance also relies on external tools such as subfinder, httpx, nuclei, katana, ffuf and nmap, installed with a bundled script.

It remembers patterns found on one target to inform work on the next, and sessions resume where they left off, with output written to `~/.bughunter/`.

It is written in Python, installs with `uv tool install agentic-bug-hunter` or pipx, and is licensed under MIT.

Website: https://awarexone.com