Data / Repositories / Bug bounty
Bug bounty repositories on GitHub: 10 ranked by stars
10 public repositories tagged Bug bounty are on GitHub, with 100,058 stars between them; 6 had a push in the last 30 days. Most are written in Python (4), TypeScript (2), Shell (1). The most starred: usestrix/strix (68,539), maurosoria/dirsearch (14,951), six2dez/reconftw (8,178).
SpecStream is the live web data engine for teams and agents. It reads open-source repositories on GitHub and keeps what it reads, and this page groups that reading by topic. Ask for the repositories you track by topic, language, license or activity, and new ones and changes arrive in your sheet, CRM, Slack or agent.
Every repository, most starred first
| Repository | What it is | Language | Stars | Forks | License | Last push | Read |
|---|---|---|---|---|---|---|---|
| usestrix/strix | Open-source AI penetration testing tool to find and fix your app’s vulnerabilities. | Python | 68,539 | 7,595 | Apache-2.0 | Oct 14 | Oct 14 |
| maurosoria/dirsearch | Web path scanner | Python | 14,951 | 2,453 | Oct 7 | Oct 14 | |
| six2dez/reconftw | reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities | Shell | 8,178 | 1,240 | MIT | Sep 26 | Oct 11 |
| CyberStrikeus/CyberStrike | Open-source AI-powered offensive security harness for automated penetration testing. | TypeScript | 3,148 | 516 | AGPL-3.0 | Oct 14 | Oct 14 |
| danieldurnea/FBI-tools | OSINT Tools for gathering information and actions forensics | 2,700 | 379 | Mar 12, 2025 | Oct 11 | ||
| taielab/awesome-hacking-lists | A curated collection of top-tier penetration testing tools and productivity utilities across multiple domains. Join us to explore, contribute, and enhance your hacking toolkit! | 1,393 | 268 | Dec 4, 2025 | Oct 11 | ||
| H-mmer/pentest-agents | Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops… | Python | 1,008 | 188 | Jun 12 | Oct 14 | |
| skyvanguard/awesome-ai-pentesting | A curated list of AI-powered pentesting tools, frameworks, MCP servers, and resources for autonomous cybersecurity operations | Python | 77 | 14 | MIT | Oct 9 | Oct 14 |
| badchars/osint-mcp-server | OSINT intelligence MCP server for AI agents — 37 tools, 12 sources. Shodan, VirusTotal, Censys, SecurityTrails, DNS reconnaissance, WHOIS, certificate transparency, BGP routing… | TypeScript | 62 | 8 | MIT | Mar 17 | Oct 14 |
| bountyoperator/bounty-operator | Find the hole in your bug bounty report before the triager does. Pre-submission review for bounty reports and smart-contract findings, on your own model key. | JavaScript | 2 | 0 | MIT | Oct 14 | Oct 14 |
By language
- Python 4
Related topics
- Hacking 6
- Penetration testing 6
- Security 6
- Pentesting 5
- Security tools 5
- Agents 4
- Cybersecurity 4
- Osint 4
- MCP 4
- AI security 3
- Artificial intelligence 3
- Pentesting tools 3
Read from GitHub by SpecStream between October 11, 2026 and October 14, 2026; each row shows the day its repository was read. Stars and pushes change every day, and the GitHub page is the current one. Forks and archived repositories are left out.