Open source bug-bounty projects

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data corr

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

AI-powered bug bounty hunting toolkit that works with or without subscription.

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

A Security Tool for Bug Bounty, Pentest and Red Teaming.

Open-source AI-powered offensive security harness for automated penetration testing.

Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approv

Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — su

Semi-automatic OSINT framework and package manager

Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.

Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, r

403/401 bypass tool: finds HTTP access-control bypasses via path, method, header and raw-request mutations. Baseline diff, auto-calibration, replayable curl evi

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.

Obtain GraphQL API schema even if the introspection is disabled

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance throu

Fast, red-teaming browser built for AI agents, with direct HTTP traffic control, sandboxed execution, and auditable sessions. Pure Rust.

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWA

Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.