它附带了一个完整的 500 多页攻击性安全 wiki，支持语义索引并随着每次参与而增长；提供确定性钩子，能在正确时刻触发正确的技能；并通过严格的客户数据边界保护隐私——所有这些都建立在 LLM Wiki 模式之上，实现知识的不断积累。
____ _ _ ____ _
/ ___| | __ _ _ _ __| | ___| __ ) _ __ __ _(_)_ __
| | | |/ _` | | | |/ _` |/ _ \ _ \| '__/ _` | | '_ \
| |___| | (_| | |_| | (_| | __/ |_) | | | (_| | | | | |
\____|_|\__,_|\__,_|\__,_|\___|____/|_| \__,_|_|_| |_|
Pentest & bug-bounty knowledge base + AI automation harness
An AI-powered penetration testing and bug-bounty knowledge base and automation harness for Claude Code. It turns an Obsidian vault into an opinionated offensive-security workflow: a searchable wiki of 500+ hacking technique pages, per-vulnerability "hunt" skills, deterministic hooks that fire the right skill at the right moment, and a state-first engagement model that stops you (and the model) from repeating work.
ClaudeBrain is a red-team / bug-bounty second brain built on Andrej Karpathy's LLM Wiki pattern: a persistent, AI-maintained knowledge base the model synthesizes each new source into over time, instead of re-deriving from raw documents on every query. Concretely, an offensive-security wiki, an agentic hunt-skill library, and a Model Context Protocol (MCP) search layer, wired together so Claude Code always checks the knowledge base before it attacks and never repeats a dead end. Think HackTricks or PayloadsAllTheThings, but indexed for semantic search and driven by an autonomous AI agent.
Authorized testing only. Everything here assumes a legal engagement: a signed penetration test, a bug-bounty program in scope, or your own lab / CTF. You are responsible for staying in scope and within the rules of engagement.
If ClaudeBrain saves you time on an engagement, a star helps other pentesters and bug-bounty hunters find it.
Karpathy LLM based claude harness for PenetrationTesting / Bugbounty using obsidian
根据分类、Topic 和编程语言匹配的相似项目。
Harness Engineering is a methodology for improving coding agent outputs by carefully crafting the environment around them—providing curated context, tools, and executable constraints that encode an organization’s nonfunctional requirements and cumulative lessons.
A 28.9 million parameter language model runs on an $8 ESP32-S3 microcontroller entirely on-device, generating simple stories at about 9.5 tokens per second.
mimic captures traffic from any iOS or web app and automatically generates a Python client library that lets you call the app's API like a regular library.