vmihalis / hacker-bob
A local MCP runtime that attacks what you own and only reports what it proved. 17 CVEs across 9 projects came out of this repo. Install: npx -y hacker-bob@latest install /path/to/project, then run /bob-evaluate target.com
Why this job: topics: security, pentesting
What it does
One was co-reported with AISLE; one credits Bob as an additional reporter. Review the linked receipts.
Get started
npm install --global hacker-bob@latest
hacker-bob install /path/to/your/project
cd /path/to/your/project You need: Node.js 20 or newer; One supported host: Claude Code, Codex, Kimi CLI, or another MCP-capable host; curl and python3
- Maintenance
- Active
- Last commit 2 months ago
- Stars
- 101
- +1 this week
- Licence
- Apache-2.0
- Allows business use
- Downloads for
- None listed
- No release files
- Latest version
- v1.3.5
- Released 5 months ago
- Built with
- JavaScript
- 94% of the code
Is it looked after?
- Contributors
- 3
- Last 90 days
- Issues
- 39% closed
- 19 still open
- Pull requests
- 138 merged
- 8 waiting
- Releases
- 20
- 20 in the last year
Similar repos
| Repo | Stars | Last commit | Licence | Downloads for |
|---|---|---|---|---|
| infobyte / faraday | 6,847 | 11 days ago | GPL-3.0 | Linux |
| 0xSteph / pentest-ai | 1,813 | 6 days ago | MIT | No downloads |
| six2dez / burp-ai-agent | 1,577 | 19 days ago | MIT | No downloads |
More: languages, topics and project record
Languages
- JavaScript 94%
- Python 2%
- C++ 1%
- TypeScript 1%
Topics
- appsec
- claude-code
- cve
- fuzzing
- mcp
- model-context-protocol
- offensive-security
- pentesting
- security
- smart-contract-security
Project record
- JobAI security
- StatusListed
- Commits952
- Forks18
- Watching3
- Stars in 28 days+2
- CreatedMar 31, 2026
- First seen by usNov 7, 2026
- CheckedNov 7, 2026