Claude Bug Bounty turns Claude Code into an autonomous web + Web3 vulnerability hunter that scopes targets, scans 20 Web2 + 10 Web3 vuln classes, runs 180 tests, and writes the HackerOne report for you. 2,310 GitHub stars, MIT licensed, built by 16-year-old shuvonsec who once found a real NASA vulnerability.
— What You Will Learn —
0:02 Hook — AI hunts bugs + writes the report
0:13 What It Is — 23 commands, 8 agents, 9 skill domains
0:24 The Arsenal — Burp + Caido + HackerOne MCP, httpx, katana, ffuf, nuclei
0:35 /autopilot Mode — auth-aware pipeline scans 20 Web2 + 10 Web3 classes
0:46 The Author — shuvonsec, age 16, found NASA vuln, v4.3.0 shipped
0:57 Free Guide + Subscribe
— Key Features —
— 23 specialized slash commands for recon, exploit, and reporting
— 8 AI agents (recon, exploit, report-writer, triage, more)
— 9 skill domains covering web, mobile, Web3, network, cloud
— 20 Web2 vulnerability classes (XSS, SQLi, SSRF, IDOR, etc.)
— 10 Web3 vulnerability classes (reentrancy, oracle manipulation, more)
— 180 automated tests baked into the /autopilot pipeline
— Burp Suite + Caido + HackerOne MCP integrations
— Auth-aware scanner chains httpx + katana + ffuf + nuclei
— Report-writer agent drafts the full HackerOne submission
— 2,310 GitHub stars, MIT license, free forever
— Links —
— Claude Bug Bounty Repo: https://github.com/shuvonsec/claude-bug-bounty
— Claude Code: https://www.anthropic.com/claude-code
— HackerOne: https://www.hackerone.com/
— Burp Suite: https://portswigger.net/burp
— Caido: https://caido.io/
— Free Guide: https://drive.google.com/file/d/12k4fvIo4Z5AndPCZuf20sFXnLeX7bcNQ/view?usp=sharing
— Recommended Channels —
3Blue1Brown, Two Minute Papers, freeCodeCamp, Matt Wolfe, Matthew Berman, DeepLearning.AI, Krish Naik, Sentdex, Yannic Kilcher, Nate Herk
#ClaudeBugBounty #AISecurity #BugBounty #ClaudeCode #HackerOne #BurpSuite #EthicalHacking #Pentesting #MCP #Cybersecurity #AIAgents #OpenSource #shorts