ClaudeBrain is an AI-powered penetration testing and bug-bounty knowledge base and automation harness for Claude Code, combining a 500+ page wiki, hunt skills, deterministic hooks, and a state-first engagement model to help red teams and bug bounty hunters work faster and more systematically.

Stars

255

7-day growth

No data

Forks

37

Open issues

0

License

MIT

Last updated

2026-07-28

AI repository intelligence
FR-AI / ANALYSIS

Why it is worth attention

It ships a full 500+ page offensive-security wiki that is semantically indexed and grows with each engagement, provides deterministic hooks that fire the right skill at the right moment, and enforces a hard client-data boundary—all built on the LLM Wiki pattern for compound knowledge.

Who it is for

  • Penetration testers conducting authorized engagements
  • Bug bounty hunters looking for an AI-powered workflow
  • Red teamers who want a reproducible, state-driven methodology
  • Security researchers using Claude Code for offensive tasks

Use cases

  • Automate hunting for XSS, SQLi, SSRF, IDOR, RCE, and other vulnerability classes via hunt skills
  • Maintain a persistent, searchable wiki of techniques that evolves over engagements
  • Track engagement state, loot, and coverage to avoid repeating work
  • Integrate deterministic automation hooks to trigger recon, scope checks, and next-move analysis

Strengths

  • Wiki-first approach: 500+ pages indexed for semantic and keyword search, available immediately upon cloning
  • Deterministic automation hooks (hunt-trigger, recon-capture, scope-guard) that fire on Claude Code lifecycle events
  • State-first engagement model with analyzers for next moves and coverage, preventing redundant work
  • Hard client-data boundary: all sensitive data lives under git-ignored targets/ and leak checks are built-in

Considerations

  • Requires a specific toolchain (Claude Code, bun, qmd) and Linux/WSL environment
  • Setup is opinionated and aggressive (bootstrap.sh mutates ~/.claude), demanding careful review before running
  • Full workflow depends on optional plugins (e.g., superpowers, burp-mcp) that must be installed separately

README quick start

ClaudeBrain

   ____ _                 _      ____            _
  / ___| | __ _ _   _  __| | ___| __ ) _ __ __ _(_)_ __
 | |   | |/ _` | | | |/ _` |/ _ \  _ \| '__/ _` | | '_ \
 | |___| | (_| | |_| | (_| |  __/ |_) | | | (_| | | | | |
  \____|_|\__,_|\__,_|\__,_|\___|____/|_|  \__,_|_|_| |_|

Pentest & bug-bounty knowledge base + AI automation harness

An AI-powered penetration testing and bug-bounty knowledge base and automation harness for Claude Code. It turns an Obsidian vault into an opinionated offensive-security workflow: a searchable wiki of 500+ hacking technique pages, per-vulnerability "hunt" skills, deterministic hooks that fire the right skill at the right moment, and a state-first engagement model that stops you (and the model) from repeating work.

ClaudeBrain is a red-team / bug-bounty second brain built on Andrej Karpathy's LLM Wiki pattern: a persistent, AI-maintained knowledge base the model synthesizes each new source into over time, instead of re-deriving from raw documents on every query. Concretely, an offensive-security wiki, an agentic hunt-skill library, and a Model Context Protocol (MCP) search layer, wired together so Claude Code always checks the knowledge base before it attacks and never repeats a dead end. Think HackTricks or PayloadsAllTheThings, but indexed for semantic search and driven by an autonomous AI agent.

Authorized testing only. Everything here assumes a legal engagement: a signed penetration test, a bug-bounty program in scope, or your own lab / CTF. You are responsible for staying in scope and within the rules of engagement.

If ClaudeBrain saves you time on an engagement, a star helps other pentesters and bug-bounty hunters find it.


Contents

Description

Karpathy LLM based claude harness for PenetrationTesting / Bugbounty using obsidian

Related repositories

Similar projects matched by category, topics, and programming language.

lopopolo
Featured
lopopolo GitHub avatar

harness-engineering

Harness Engineering is a methodology for improving coding agent outputs by carefully crafting the environment around them—providing curated context, tools, and executable constraints that encode an organization’s nonfunctional requirements and cumulative lessons.

AI & Machine LearningAI Agents
2,390
slvDev
Featured
slvDev GitHub avatar

esp32-ai

A 28.9 million parameter language model runs on an $8 ESP32-S3 microcontroller entirely on-device, generating simple stories at about 9.5 tokens per second.

AI & Machine LearningLarge Language Models
1,960
littledivy
Featured
littledivy GitHub avatar

mimic

mimic captures traffic from any iOS or web app and automatically generates a Python client library that lets you call the app's API like a regular library.

AI & Machine Learning
1,482