reference repositories

36 repositories · 72,819 stars

Working trees are not stored in this repository (they are versioned upstream). Re-clone any of them with the command shown.

Claude Code & agents

18 repos
trailofbits-skills ↗

79 security skills

★ 6,655 git clone https://github.com/trailofbits/skills
shuvonsec-claude-bug-bounty ↗

AI bug bounty hunting

★ 4,256 git clone https://github.com/shuvonsec/claude-bug-bounty
claude-bughunter ↗

82 skills, 681 disclosed-report patterns

★ 3,699 git clone https://github.com/elementalsouls/Claude-BugHunter
H-mmer-pentest-agents ↗

48 agents, exploit chains

★ 802 git clone https://github.com/H-mmer/pentest-agents
MyuriKanao-src-hunter-skill ↗

305 payloads, 263 WAF bypasses

★ 599 git clone https://github.com/MyuriKanao/src-hunter-skill
transilienceai-communitytools ↗

Open-source pentest skills

★ 476 git clone https://github.com/transilienceai/communitytools
shuvonsec-public-skills-builder ↗

Generate skills from HackerOne reports

★ 221 git clone https://github.com/shuvonsec/public-skills-builder
secskills ↗

Security skills (offense/defense/core)

★ 111 git clone https://github.com/trilwu/secskills
claude-pentest ↗

15 agents, 63 attack categories

★ 84 git clone https://github.com/stickman230/claude-pentest
threatswarm ↗

27 agents, 754 MITRE-mapped skills

★ 66 git clone https://github.com/mukul975/Threatswarm
h4ckologic-bughunter-ai ↗

20 AI agents, state-machine

★ 64 git clone https://github.com/h4ckologic/bughunter-ai
26zl-cybersec-toolkit ↗

670+ tools, 870+ skills

★ 40 git clone https://github.com/26zl/cybersec-toolkit
security-skills ↗

Defensive + offensive skills

★ 40 git clone https://github.com/mn-youssef/security-skills
★ 36 git clone https://github.com/0xGhostCAT/claude-ai-cyber-security-skills
Orizon-eu-claude-code-pentest ↗

6 skills, full pentest lifecycle

★ 23 git clone https://github.com/Orizon-eu/claude-code-pentest
payloadsallthethings-skills ↗

61 skills from PATT

★ 21 git clone https://github.com/mohdhaji87/payloadsallthethings-skills
claude-code-plugins-plus ↗

25 security plugins

git clone https://github.com/danielmiessler/claude-code-plugins-plus
claude-skills-pentest ↗

VPS-based scanner

git clone https://github.com/WolzenGeorgi/claude-skills-pentest

Learning & methodology

9 repos
awesome-pentest ↗

Awesome pentesting resources list

★ 26,604 git clone https://github.com/enaqx/awesome-pentest
nahamsec-resources ↗

Curated beginner collection

★ 11,923 git clone https://github.com/nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters
bugbounty-cheatsheet ↗

Payloads, tips, books

★ 6,000 git clone https://github.com/EdOverflow/bugbounty-cheatsheet
bug-bounty-methodology-2025 ↗

Bug Bounty Methodology 2025

★ 477 git clone https://github.com/amrelsagaei/Bug-Bounty-Hunting-Methodology-2025
bugbountyguide ↗

BBB launchpad

★ 472 git clone https://github.com/EdOverflow/bugbountyguide
bug-bounty-roadmap-2025 ↗

10-phase progressive roadmap

★ 3 git clone https://github.com/l3tchupkt/Bug-Bounty-Roadmap-2025
bug-bounty-methodology-2026 ↗

7-phase workflow 2026

git clone https://github.com/ItsDarker/Bug-Bounty-Methodology-2026
hardware-all-the-things ↗

IoT/hardware pentest wiki

git clone https://github.com/swisskyrepo/HardwareAllTheThings
internal-all-the-things ↗

AD/internal pentest cheatsheets

git clone https://github.com/swisskyrepo/InternalAllTheThings

OWASP & standards

4 repos
owasp-asvs ↗

ASVS 5.0 (May 2025)

git clone https://github.com/OWASP/ASVS
owasp-cheatsheets ↗

Full Cheat Sheet Series

git clone https://github.com/OWASP/CheatSheetSeries
owasp-secure-agent-playbook ↗

AI-assisted security plays

git clone https://github.com/OWASP/secure-agent-playbook
owasp-wstg ↗

WSTG v5.0

git clone https://github.com/OWASP/www-project-web-security-testing-guide

Toolkits & frameworks

5 repos
cai ↗

Cybersecurity AI framework

★ 9,644 git clone https://github.com/aliasrobotics/cai
Gabson0x-bountyforge ↗

Bug bounty + smart contracts

★ 383 git clone https://github.com/Gabson0x/bountyforge
perseus ↗

Multi-language security assessment

★ 67 git clone https://github.com/kaivyy/perseus
gigioneggiando-argo ↗

LLM-native static vuln detection

★ 53 git clone https://github.com/gigioneggiando/argo
payloads-all-the-things ↗

63+ vuln categories

git clone https://github.com/swisskyrepo/PayloadsAllTheThings

Read-only by policy. These repositories are references for patterns and methodology. Do not execute downloaded code; audit it first and use it only within authorised engagements.