Agentic-Bug-Hunter

<p align="center"> <img src="https://raw.githubusercontent.com/awarexone/Agentic-Bug-Hunter/main/assets/banner.png" alt="Agentic Bug Hunter - by AwareXone - AI-powered bug bounty reconnaissance and vulnerability discovery" width="100%"/> </p> <p align="center"> <b>AI-powered bug bounty hunting — recon to report, in your terminal. </b> <br/> <a href="#what-is-this">What Is This</a> · <a href="#trusted-by-engineers-at">Trusted By</a> · <a href="#standalone-mode-no-subscription-required">Free Setup</a> · <a href="#quick-start">Quick Start</a> · <a href="#commands">Commands</a> · <a href="#what-it-finds">What It Finds</a> · <a href="#more-from-awarexone">AXguard</a> · <a href="#support-this-project">Support</a> · <a href="FAQ.md">FAQ</a> </p> <p align="center"> <a href="https://github.com/Awarexone/Agentic-Bug-Hunter/blob/main/LICENSE"><img src="https://img.shields.io/badge/License-MIT-yellow.svg?style=flat-square" alt="MIT License"></a> <img src="https://img.shields.io/badge/Python-3.10+-3776AB.svg?style=flat-square&logo=python&logoColor=white" alt="Python 3.10+"> <a href="https://pypi.org/project/agentic-bug-hunter/"><img src="https://img.shields.io/pypi/v/agentic-bug-hunter?style=flat-square&color=3775A9&logo=pypi&logoColor=white" alt="PyPI version"></a> <a href="https://pepy.tech/projects/agentic-bug-hunter"><img src="https://static.pepy.tech/personalized-badge/agentic-bug-hunter?period=total&units=international_system&left_color=black&right_color=green&left_text=downloads" alt="PyPI Downloads"></a> <a href="https://claude.ai/claude-code"><img src="https://img.shields.io/badge/Claude_Code-Plugin-D97706.svg?style=flat-square" alt="Claude Code Plugin"></a> <a href="https://github.com/Awarexone/Agentic-Bug-Hunter/actions/workflows/tests.yml"><img src="https://img.shields.io/github/actions/workflow/status/Awarexone/Agentic-Bug-Hunter/tests.yml?branch=main&style=flat-square&label=tests" alt="Tests"></a> <a href="https://github.com/Awarexone/Agentic-Bug-Hunter/stargazers"><img src="https://img.shields.io/github/stars/Awarexone/Agentic-Bug-Hunter?style=flat-square&color=yellow" alt="GitHub Stars"></a> </p> <p align="center"> <a href="https://trendshift.io/repositories/23808?utm_source=repository-badge&amp;utm_medium=badge&amp;utm_campaign=badge-repository-23808" target="_blank" rel="noopener noreferrer"><img src="https://trendshift.io/api/badge/repositories/23808" alt="Awarexone%2FAgentic-Bug-Hunter | Trendshift" width="250" height="55"/></a> </p> <p align="center"> Built and maintained by <b>AwareXone</b> · <a href="https://www.awarexone.com">Website</a> · <a href="https://x.com/awarexone">X</a> · <a href="https://github.com/Awarexone">GitHub</a> </p> <p align="center"> <img src="https://raw.githubusercontent.com/awarexone/Agentic-Bug-Hunter/main/assets/socialsafe-blurb.png" alt="SocialSafe by AwareXone provides case review and assistance for hacked, disabled, locked, restricted, and inaccessible social media accounts in Malaysia and worldwide by remote review. Assistance is best-effort, and final decisions remain with the platform." width="720"/> </p> <p align="center"> <a href="https://www.awarexone.com/all-types-of-social-media-problem-solutions#case-review"> <img src="https://raw.githubusercontent.com/awarexone/Agentic-Bug-Hunter/main/assets/apply-case-review-btn.png" alt="Apply for Case Review" height="48"/> </a> </p> <p align="center"> <a href="https://fluxionai.world/register?source=github&campaign=github-awarexone&promo=AWAREXONE"> <img src="https://raw.githubusercontent.com/awarexone/Agentic-Bug-Hunter/main/assets/fluxion-partner-banner.jpg" alt="Fluxion AI — One gateway to the world's leading AI models" width="720"/> </a> </p> <p align="center"> <b>One gateway to the world's leading AI models</b><br/> _{AI model access &amp; operations · partner for BugHunter standalone mode} </p> <p align="center"> <a href="https://fluxionai.world/register?source=github&campaign=github-awarexone&promo=AWAREXONE"><b>Register with partner link →</b></a> · promo <code>AWAREXONE</code> · <a href="https://docs.fluxionai.world/user-guide/help-center">Docs</a> · <a href="https://fluxionai.world/model-plaza">Model Plaza</a> </p>

---

Get started (30 seconds)

uv tool install agentic-bug-hunter   # install the CLI (or: pipx install agentic-bug-hunter)
bughunter setup                      # connect a free AI provider

Then hunt — straight from your terminal:

bughunter hunt target.com            # recon → find → validate → report

…or drive it from inside Claude Code:

/hunt target.com

_{The CLI and AI hunting work on their own. Full recon also uses external tools (subfinder · httpx · nuclei · katana · ffuf · nmap) — install them with <code>install_tools.sh</code> from the repo. Output lands in <code>~/.bughunter/</code>.}

---

Trusted By Engineers At

<p align="center"><i>Where this project's stargazers say they work.</i></p> <p align="center"> <img src="https://img.shields.io/badge/HackerOne-494649?style=for-the-badge&logo=hackerone&logoColor=white" alt="HackerOne"/> <img src="https://img.shields.io/badge/Bugcrowd-F26822?style=for-the-badge&logo=bugcrowd&logoColor=white" alt="Bugcrowd"/> <img src="https://img.shields.io/badge/IBM-052FAD?style=for-the-badge" alt="IBM"/> <img src="https://img.shields.io/badge/Huawei-FF0000?style=for-the-badge&logo=huawei&logoColor=white" alt="Huawei"/> <img src="https://img.shields.io/badge/Microsoft-0078D4?style=for-the-badge" alt="Microsoft"/> <img src="https://img.shields.io/badge/OffSec-1A1A1A?style=for-the-badge" alt="OffSec"/> <img src="https://img.shields.io/badge/TCS-EE3A43?style=for-the-badge&logo=tcs&logoColor=white" alt="TCS"/> <img src="https://img.shields.io/badge/Tencent-1289FF?style=for-the-badge" alt="Tencent"/> <img src="https://img.shields.io/badge/Apple-000000?style=for-the-badge&logo=apple&logoColor=white" alt="Apple"/> <img src="https://img.shields.io/badge/Canonical-E95420?style=for-the-badge&logo=canonical&logoColor=white" alt="Canonical"/> <img src="https://img.shields.io/badge/Cognizant-1662BE?style=for-the-badge" alt="Cognizant"/> <img src="https://img.shields.io/badge/Ericsson-0082F0?style=for-the-badge&logo=ericsson&logoColor=white" alt="Ericsson"/> <img src="https://img.shields.io/badge/Goldman_Sachs-7399C6?style=for-the-badge&logo=goldmansachs&logoColor=white" alt="Goldman Sachs"/> <img src="https://img.shields.io/badge/Google-4285F4?style=for-the-badge&logo=google&logoColor=white" alt="Google"/> <img src="https://img.shields.io/badge/HashiCorp-000000?style=for-the-badge&logo=hashicorp&logoColor=white" alt="HashiCorp"/> <img src="https://img.shields.io/badge/Intel-0071C5?style=for-the-badge&logo=intel&logoColor=white" alt="Intel"/> <img src="https://img.shields.io/badge/KPMG-00338D?style=for-the-badge" alt="KPMG"/> <img src="https://img.shields.io/badge/Meta-0467DF?style=for-the-badge&logo=meta&logoColor=white" alt="Meta"/> <img src="https://img.shields.io/badge/Mozilla-000000?style=for-the-badge&logo=mozilla&logoColor=white" alt="Mozilla"/> <img src="https://img.shields.io/badge/Nvidia-76B900?style=for-the-badge&logo=nvidia&logoColor=white" alt="Nvidia"/> <img src="https://img.shields.io/badge/PwC-D04A02?style=for-the-badge" alt="PwC"/> <img src="https://img.shields.io/badge/Qualcomm-3253DC?style=for-the-badge&logo=qualcomm&logoColor=white" alt="Qualcomm"/> <img src="https://img.shields.io/badge/Siemens-009999?style=for-the-badge&logo=siemens&logoColor=white" alt="Siemens"/> <img src="https://img.shields.io/badge/Snap-FFFC00?style=for-the-badge&logo=snapchat&logoColor=black" alt="Snap"/> <img src="https://img.shields.io/badge/SpaceX-000000?style=for-the-badge&logo=spacex&logoColor=white" alt="SpaceX"/> <img src="https://img.shields.io/badge/Synack-2C2C2C?style=for-the-badge" alt="Synack"/> <img src="https://img.shields.io/badge/Tsinghua-660874?style=for-the-badge" alt="Tsinghua"/> <img src="https://img.shields.io/badge/Wipro-341C53?style=for-the-badge&logo=wipro&logoColor=white" alt="Wipro"/> <img src="https://img.shields.io/badge/YesWeHack-24BDB4?style=for-the-badge" alt="YesWeHack"/> <img src="https://img.shields.io/badge/Zscaler-0068B5?style=for-the-badge" alt="Zscaler"/> </p> <p align="center"> _{Compiled from public GitHub profiles of this repository's stargazers - 43 people across 30 organizations, counted from the employer each person lists on their own profile or from their public organization memberships. No individual accounts are named. These companies have not endorsed or sponsored this project; their logos are shown as trademarks of their respective owners.} </p>

---

What Is This?

Agentic Bug Hunter finds real, reportable bugs, not theoretical ones. Point it at a target and it runs recon, tests for vulnerabilities, validates findings against a strict gate, and writes a submission-ready report for HackerOne, Bugcrowd, Intigriti, or Immunefi.

It remembers everything: patterns found on one target inform the next, and sessions pick up where they left off.

Works as a Claude Code plugin, or as a fully standalone CLI (bughunter) with no subscription required.

---

Standalone Mode: No Subscription Required

You no longer need Claude Code, Claude Pro, or any paid AI subscription.

Install once, use the bughunter command from any terminal on your machine:

git clone https://github.com/Awarexone/Agentic-Bug-Hunter.git
cd Agentic-Bug-Hunter
./install.sh --agent standalone

Rerun the same command after pulling updates. The installer detects and refreshes the active managed bughunter command, including older installations under /usr/local/bin or ~/.local/bin, while preserving your saved provider configuration in ~/.bughunter/config.json.

To uninstall the standalone command while keeping its configuration:

./uninstall.sh --agent standalone

Use --purge-config to also delete ~/.bughunter/config.json. The uninstaller also supports claude, opencode, pi, codex, agents, and all targets.

bughunter help               # show every command
bughunter setup              # choose your AI provider (Ollama is free + offline)
bughunter recon target.com   # map the attack surface
bughunter hunt  target.com   # hunt for vulnerabilities
bughunter validate "finding" # 7-Question Gate on your finding
bughunter report             # write a submission-ready report
bughunter chat               # interactive AI hunting shell
bughunter providers          # list all available AI providers
bughunter models             # list models and show the selected one
bughunter status             # check which provider is active
bughunter h target.com       # short alias for hunt
bughunter r target.com       # short alias for recon
bughunter v "finding"        # short alias for validate

Free AI Providers (auto-detected, free-first priority)

| Provider | Cost | Privacy | Speed | Get Started | |:---|:---|:---|:---|:---| | Ollama | 100% free · runs locally | Full - stays on your machine | Fast | ollama pull qwen2.5:14b | | Groq | Free tier available | Cloud | Very fast | console.groq.com → get API key | | DeepSeek | Very cheap (v4-flash / v4-pro) | Cloud | Fast | platform.deepseek.com | | Claude API | Paid | Cloud | Fast | console.anthropic.com | | OpenAI | Paid | Cloud | Fast | platform.openai.com | | Grok (xAI) | Paid | Cloud | Fast | console.x.ai → grok-4.5 | | OpenRouter | Subscription / pay-as-you-go | Cloud | Fast | openrouter.ai/keys → get API key | | OrcaRouter | Subscription / pay-as-you-