bugcrowd/HUNT

Health v2 · maintenance only

Adoption not part of the score

2331 stars · 433 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

HUNT Suite is a collection of Burp Suite and OWASP ZAP proxy extensions that identify common parameters vulnerable to vulnerability classes like SQL injection, SSRF, and command injection, and help organize testing methodologies. It alerts testers to suspicious parameters for manual testing rather than performing automated exploitation.

Use cases

• find parameters in web traffic that may be vulnerable to SQL injection or SSRF
• organize my manual bug bounty testing methodology inside Burp Suite
• flag IDOR-prone parameters while proxying requests
• track which methodology steps I've completed during a pentest
• surface debug and logic parameters in HTTP requests
• assist manual testing of web app vulnerability classes in OWASP ZAP

When to choose

• you use Burp Suite or OWASP ZAP for manual web application security testing
• you want parameter-level hints for common vulnerability classes during bug bounty hunting
• you need a structured methodology tracker inside your proxy tool

When to avoid

• you need fully automated vulnerability scanning or exploitation
• you don't use Burp Suite or OWASP ZAP
• you need coverage for XSS, XXE, or file upload classes, which are deprecated in this tool

Facets

plugin · maturity maintenance

security penetration-testing vulnerability-scanning developer-tools security penetration-testing web-development developer-tools cross-platform browser-extension burpsuite owasp-zap bug-bounty web-security-testing manual-testing proxy-extensions jython

Member repositories

For agents

markdown · JSON · MCP: product_card(name="bugcrowd/HUNT")