Skip to content

Back to the catalog

medium.comarticle

Claude as Autonomous Bug Bounty Hunter

Author describes Aii-Aii Hunter, a bug bounty framework built on Claude Code with 124 markdown skills (35.5k lines distilled from public HackerOne reports), three hooks (UserPromptSubmit regex auto-routing, PreToolUse scope.json guard, PostToolUse telemetry) and a Podman Kali container exposing 110 tools plus 18 Burp tools over MCP. It also covers an engagement flow with a 7-Question validation gate, evidence hygiene, an autopilot mode, and SAST/DAST correlation. Useful as a blueprint for scoped, AI-orchestrated offensive workflows; first of six parts with a companion repo.

TL;DR Architecture overview of a Claude Code bug-bounty framework: skills, routing/scope-guard hooks, Kali MCP bridge, and a validation gate.
Open original ↗
Also seen from another angle🧠 AI →

Organisations named here

  • 7-Question Gate
  • scope guard

Technologies named here

  • Next.js
  • Aii-Aii Hunter
  • Claude Code
  • Spring Boot
  • Laravel
  • Node.js
  • nuclei
  • sqlmap
  • ASP.NET
  • SharePoint
  • Ffuf
  • Active Directory
  • subfinder
  • dnsx
  • Kubernetes
  • httpx
  • CI/CD pipelines
  • Katana
  • Cloud IAM
  • VPN appliances
  • waymore
  • gf
  • M365/Entra
  • reconftw
  • Okta
  • Burp Suite integration
  • VMware vCenter
  • "Vibe-coded" AI-generated apps
  • Playwright
  • Claude-native SAST engine
  • Correlation engine
  • Hook scripts
  • Slash commands
  • Model Context Protocol
  • Kali Linux
  • Burp Suite

Techniques named here

  • Bug bounty recon
  • Vulnerability class hunting
  • AI/LLM attacks
  • Auth bypass testing
  • File upload testing
  • Static and dynamic finding correlation
  • Intent-gated prompt routing
  • Report writing with CVSS 3.1, impact-first, PoC

Related in Offensive Security