hacker-bob
Active·★ 100·Apache-2.0·Updated 2026-10-17
Hacker Bob is a self-run offensive security tool designed for authorized testing in CI/CD pipelines or against staging environments. It installs a local Multi-Agent Control Plane (MCP) runtime to coordinate various security evaluation stages, including surface mapping, parallel testing, and reporting.
#Offensive Security#Penetration Testing#AI Agent#CI/CD Integration#Security Automation#Vulnerability Evaluation#Multi-Agent System#Local Execution
01
Features
01Installs a local Multi-Agent Control Plane (MCP) runtime for orchestrating security evaluations.
02Conducts a comprehensive security workflow: surface discovery, authentication, parallel evaluation, verification, grading, and reporting.
03Integrates with CI/CD systems like GitHub Actions for automated security reviews of pull request diffs.
04Compatible with multiple AI agent hosts, including Claude Code, Codex, and Kimi CLI.
05Manages sensitive run data locally and enforces strict authorization for targets and accounts.
02
Compatibility
Node.js
Runtime
Verified via docs
Claude Code
Host CLI
Verified via docs
Codex
Host CLI
Verified via docs
Kimi CLI
Host CLI
Verified via docs
Generic MCP Host
Host CLI
Verified via docs
GitHub Actions
Integration
Verified via docs
03
Quick start
1
$ npx -y hacker-bob@latest install /path/to/your/project
2
$ cd /path/to/your/project
04
Use cases
↳Automated offensive security testing within CI/CD pipelines for continuous vulnerability detection.
↳Performing authorized penetration testing against staging and live production environments.
↳Automated security review of pull request diffs to identify vulnerabilities before merging.
↳Conducting local security reviews of open-source project repositories, with optional Docker isolation.
↳Monitoring and managing multiple concurrent security evaluation sessions via a local dashboard.
05
Alternatives
ptah-extension★ 29
Provider-agnostic AI orchestration for VS Code. Intelligent workspace analysis, Code Execution MCP server, and project-adaptive multi-agent workflows — all natively integrated into VS Code.
zeroshot★ 2.0k
Your autonomous engineering team in a CLI. Point Zeroshot at an issue, walk away, and return to production-grade code. Supports Claude Code, OpenAI Codex, OpenCode, and Gemini CLI.
CyberStrike★ 3.2k
Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models, 7,600+ Ed25519-signed attack skills, 56+ built-in tools, 176+ MCP tools. MITRE ATT&CK, OWASP WSTG, CIS Benchmarks. Post-exploit: Linux/Windows/macOS/AWS/Azure/K8s/CI-CD. Web UI + Cloudflare Tunnel. Your AI red team.
Agenvoy★ 509
Make AI actually work for you - A personal agent that writes its own tools and repairs itself.
lavern★ 315
An agentic law firm. Yours. 67 specialist AI agents that review documents through evidence-backed debate, with mandatory human gates and a 10-pass verification loop. Apache 2.0.
nac★ 284
Give AI agents ambitious work without losing the plot. nac is an open-source harness for long-running tasks, using a central orchestrator, threads, and structured episodes to stay aligned with your intent.
claude-vibe-squad★ 164
Multi-model AI orchestration where behaviour is Markdown, not code. One coordinator routes scoped task packets to 71 role-based specialists across 5 model families (Codex / Claude / Gemini / Grok / Kimi) — each working in an isolated git worktree, each reviewed by a rival family before it lands. One tmux session, no server.
Comments
Log in to leave a comment
No comments yet. Be the first!