h-mmer/pentest-agents

Claude Code 的 Pentest 代理套件

为Claude Code及其他6个AI编码工具打造自主的漏洞奖励框架——50个代理，26个命令，19个CLI工具，11个技能，2个MCP服务器。

---

~760个文件 ·~118k行 ·50个代理 ·26个命令 ·19个CLI工具 ·11个技能 ·2台MCP服务器（16个漏洞赏金平台+BYO写入搜索）·2500条有效载荷线

一个完整的漏洞赏金框架。经过实战考验的狩猎方法论，具备具体载荷、7个问题门验证、自主狩猎循环、A→B漏洞链构建、带端点追踪的持久大脑、可选语义写入搜索（自带索引）、通过CC钩子自动跟踪成本、实时平台集成，以及跨IDE安装程序，该安装程序原生支持Claude Code、Codex、Gemini、Cursor、Windsurf、VS Code Copilot和OpenClaw。

快速启动

scaffold.py 为每个支持的项目范围提供工作区 客户端，而不仅仅是Claude代码：CLAUDE.md、AGENTS.md、.codex/， .agents/skills/、.gemini/、.cursor/、.windsurf/、.github/，以及 .vscode/mcp.json 是从复制的工作区资源生成的，所以路径 在赏金工作区内解决。

Pentest Agent Suite for Claude Code

Autonomous bug-bounty framework for Claude Code and 6 other AI coding tools — 50 agents, 26 commands, 19 CLI tools, 11 skills, 2 MCP servers.

---

~760 files · ~118k lines · 50 agents · 26 commands · 19 CLI tools · 11 skills · 2 MCP servers (16 bug-bounty platforms + BYO writeup search) · 2,500 payload lines

A complete bug bounty framework. Battle-tested hunting methodology with concrete payloads, 7-Question Gate validation, autonomous hunt loops, A→B exploit chain building, persistent brain with endpoint tracking, optional semantic writeup search (bring your own index), automatic cost tracking via CC hooks, live platform integration, and a cross-IDE installer that emits the native format for Claude Code, Codex, Gemini, Cursor, Windsurf, VS Code Copilot, and OpenClaw.

Quick Start

# MCP servers are launched via `uv run --with mcp` — no global pip install required.
export HACKERONE_USERNAME=you HACKERONE_TOKEN=your_token
uv run python3 tools/scaffold.py hackerone tesla
cd ~/bounties/hackerone-tesla && claude
/model opus             # Opus 4.7 [1M] — subagents inherit via model: "inherit"
/sync hackerone tesla
/brain init && /status
/hunt tesla.com

scaffold.py provisions the workspace for every supported project-scoped client, not only Claude Code: CLAUDE.md, AGENTS.md, .codex/, .agents/skills/, .gemini/, .cursor/, .windsurf/, .github/, and .vscode/mcp.json are generated from the copied workspace assets so paths resolve inside the bounty workspace.

Install (Claude Code + 6 other AI coding tools)

The framework ships pre-rendered for every supported tool. There are two ways to use it:

1. Use the bundles directly (no install step)

git clone https://github.com/H-mmer/pentest-agents-suite
cd pentest-agents-suite/pentest-agents/providers/codex
codex                       # or: cd ../gemini && gemini, etc.

The providers// tree contains a fully-translated, ready-to-use bundle for each non-Claude target. Path references inside use .. to reach the repo’s tools/, rules/, and mcp-*-server/ — so the bundle works as long as it stays inside the cloned repo.

2. Run the installer (writes into your own project or ~/.codex/ etc.)