mdpsec / bug-bounty-hunting-prompts

Reusable prompts for a structured, evidence-first bug bounty hunting workflow

adshao / flounder

Autonomous white-hat security auditor for AI-driven code review, bug bounty research, exploit construction, and execution-grounded verification.

angusdevgo / Seep-Tool

CWE-602 客户端鉴权脆弱性白盒审计方法论与纵深防御加固研究框架

larlarua / AutoCVE

Agent-driven automated CVE discovery platform for source code auditing, vulnerability verification, and report generation.

0xdea / semgrep-rules

A collection of my Semgrep rules to facilitate vulnerability research.

ttlns / Selenium-Driverless

a stealthy browser automation framework

IamAlch3mist / Awesome-Embedded-Systems-Vulnerability-Research

Resources to getting started vulnerability research on IoT/embedded devices.

1rhino2 / fnprint

match functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.

dinosn / security-research-orchestrator-prompt

High-assurance, artifact-agnostic prompt for authorized security labs, exploit-chain research, PoC validation, and evidence-led reporting.

1diot9 / VulnHunter-White

基于 LLM 的白盒漏洞挖掘 Agent。四条挖掘路径（启发式、快速扫描 Sink 回溯、历史漏洞绕过、无约束）+ Docker 靶场 / 局部 harness / 静态验证，支持互联网复现与攻击链串联。 LLM-based white-box vuln mining agent. Four paths (heuristic, fast-scan sink backtrace, historical bypass, unconstrained) + Docker lab / harness / static verify; Internet retest and attack chains.