pentest-agents

Why we included this project

Bug bounty hunters who already work with AI coding assistants will get a real scaffold here, not a demo. The project turns a full hunting workflow, from recon and surface analysis through validation and exploit chain building to report submission, into a set of agents and slash commands that run inside Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw. It ships concrete payloads, a 7-Question Gate for triaging findings, and two MCP servers that connect to 16 bug bounty platforms, so you can go from a fresh target to a submitted report without switching tools. A cross-IDE installer generates the native agent and skill format for each supported assistant, which cuts most of the setup work when you want the same methodology everywhere. Teams that already use AI coding tools and want a repeatable way to drive pentesting and bounty work should start here.