protectai/vulnhuntr

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

2747 stars · 320 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Vulnhuntr is a Python CLI tool that uses large language models combined with static code analysis to autonomously discover exploitable vulnerabilities in Python codebases. It traces complete call chains from remote user input to server output to find complex, multi-step security flaws that traditional static analyzers miss.

Use cases

• find zero-day vulnerabilities in python projects with llm analysis
• audit open-source python codebases for rce and ssrf bugs
• discover security flaws that static analyzers miss
• hunt for exploitable bugs in ai and llm applications
• trace remote user input through code call chains to find vulnerabilities
• automate vulnerability discovery for bug bounty research
• scan python web apps for xss sqli and lfi issues

When to choose

• you need to audit a Python codebase for remotely exploitable vulnerabilities
• traditional static analysis tools miss complex multi-step attack chains
• you are doing security research or bug bounty hunting on Python projects
• you want to find 0-days in popular AI/LLM applications

When to avoid

• your codebase is not written in Python
• you need guaranteed complete coverage rather than LLM-assisted discovery
• you cannot provide LLM API access or handle the associated cost
• you need to scan non-Python languages like C, Go, or JavaScript

Facets

cli-tool · maturity active

security vulnerability-scanning linter llm-inference nlp security developer-tools artificial-intelligence large-language-models penetration-testing python cli windows vulnerability-discovery zero-shot-analysis llm-security-audit python-code-audit 0day-hunting code-call-chain-analysis security-research responsible-disclosure docker linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="protectai/vulnhuntr")