Popular GitHub Repositories for Bug

This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.

HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.

??AutoDev: The AI-powered coding wizard（AI 驱动编程助手）with multilingual support ?, auto code generation ??, and a helpful bug-slaying assistant ?! Customizable prompts ? and a magic Auto Dev/Testing/Document/Agent feature ? included! ?

支持本地模型的 LLM 的智能代码审计平台，致力于为您打造全流程审计无忧的AI代理。旧版试用：

A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomains and more!

All-in-one offensive security toolbox with AI agent and MCP architecture. Integrates tools like Nmap, Metasploit, FFUF, SQLMap. Enables pentesting, bug bounty hunting, threat hunting, and reporting. RAG-based responses with local knowledge base support.

All-in-one offensive security toolbox with AI agent and MCP architecture. Integrates tools like Nmap, Metasploit, FFUF, SQLMap. Enables pentesting, bug bounty hunting, threat hunting, and reporting. RAG-based responses with local knowledge base support.

超快的 RM 陀螺运动预测，包含精密火控 water-gun、弹道校正和各种数学轮子 ⭐️bug 修复中

KoBERT on ? Huggingface Transformers ? (with Bug Fixed)

An extension for the Gemini CLI that delegates coding tasks like bug fixing, refactoring, and dependency updates to the Jules asynchronous agent.

foot是一个集足球数据采集器,简单分析的项目.AI足球球探为程序全自动处理,全程无人为参与干预足球分析足球预测程序.程序根据各大指数多维度数据,结合作者多年足球分析经验,精雕细琢,集天地之灵气,汲日月之精华,历时七七四十九天,经Bug九九八十一个,编码而成.有兴趣的朋友,可以关注一下公众号AI球探(微信号ai00268).

A comprehensive code domain benchmark review of LLM researches.

Ultra-fast subdomain enumeration & reconnaissance tool with 110+ takeover fingerprints, security checks, cloud detection, and JS analysis. Written in Go.

Repo-level benchmark for real-world Code Agents: from repo understanding → env setup → incremental dev/bug-fixing → task delivery, with cost-aware α metric.

Professional Search Engine Hacking Syntax Tool - Supports Google, Baidu, and Bing search engines, and provides intelligent sidebar, URL extraction, custom syntax and other functions to help security research and penetration testing 专业的搜索引擎Hacking语法工具 - 支持Google、百度、Bing三大搜索引擎，提供智能侧边栏、URL提取、自定义语法等功能，助力安全研究和渗透测试

Hacking the Singularity. Deep learning hacking. Weaponizing AI in Offensive security

AspGoat is an intentionally vulnerable ASP.NET Core application for learning and practicing web application security.

FlowInquiry is an open-source platform that brings together project management, ticket tracking, workflow automation, and SLA monitoring to help teams stay organized and efficient.

? LLM-powered agent for automated Google Dorking in bug hunting & pentesting.

FlowLens is an open-source MCP server that gives your coding agent (Claude Code, Cursor, Copilot, Codex) full browser context for in-depth debugging and regression testing.