github.com/elementalsouls/Claude-BugHunter5.4k

Claude-BugHunter

A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15...

/plugin marketplace add elementalsouls/Claude-BugHunter

40 skills

Android APK Security Pipeline

Decompiles and scans Android APKs for secrets, exposed components and risky intents.

elementalsouls/Claude-BugHunter5.4k

Bugcrowd Reporting

Bugcrowd-specific reporting tactics complementing report-writing: VRT category...

elementalsouls/Claude-BugHunter5.4k

Cloud Iam Deep

Cloud IAM red-team attack chain across AWS, Azure, GCP, focused on EXTERNAL...

elementalsouls/Claude-BugHunter5.4k

Enterprise Vpn Attack

External SSL VPN / remote-access appliance attack matrix, Cisco ASA/AnyConnect...

elementalsouls/Claude-BugHunter5.4k

Evidence Hygiene

Evidence-capture and PoC-redaction discipline for bug-bounty submissions: cookie...

elementalsouls/Claude-BugHunter5.4k

Hunt API Misconfig

Hunt API security misconfiguration, mass assignment, prototype pollution, HTTP verb...

elementalsouls/Claude-BugHunter5.4k

Hunt Aspnet

Hunt ASP.NET-specific surface, ViewState deserialization (signed-only vs encrypted)...

elementalsouls/Claude-BugHunter5.4k

Hunt Ato

Hunt account takeover taxonomy, 9 distinct paths to ATO, plus chains.

elementalsouls/Claude-BugHunter5.4k

Hunt Auth Bypass

Hunting skill for auth bypass vulnerabilities.

elementalsouls/Claude-BugHunter5.4k

Hunt Brute Force

Hunt Missing/Weak Rate Limiting, login brute force, OTP/2FA brute force (10^6...

elementalsouls/Claude-BugHunter5.4k

Hunt Business Logic

Hunting skill for business logic vulnerabilities.

elementalsouls/Claude-BugHunter5.4k

Hunt Cache Poison

Hunting skill for cache poison vulnerabilities.

elementalsouls/Claude-BugHunter5.4k

Hunt Captcha Bypass

Hunt CAPTCHA Bypass, 6 distinct patterns: (1) CAPTCHA field simply omitted from the...

elementalsouls/Claude-BugHunter5.4k

Hunt Cicd

Hunt CI/CD pipeline vulnerabilities, GitHub Actions workflow injection...

elementalsouls/Claude-BugHunter5.4k

Hunt Clickjacking

Hunt Clickjacking, missing X-Frame-Options / CSP frame-ancestors lets an attacker...

elementalsouls/Claude-BugHunter5.4k

Hunt Cloud Misconfig

Hunt cloud / infrastructure misconfigurations.

elementalsouls/Claude-BugHunter5.4k

Hunt Cors

Hunt CORS Misconfiguration, origin-reflection with credentials, null-origin trust...

elementalsouls/Claude-BugHunter5.4k

Hunt Csrf

Hunting skill for csrf vulnerabilities.

elementalsouls/Claude-BugHunter5.4k

Hunt Deserialization

Hunt Insecure Deserialization, Java gadget chains (ysoserial), PHP object injection...

elementalsouls/Claude-BugHunter5.4k

Hunt Dispatch

Skill-set loader for /hunt orchestrator.

elementalsouls/Claude-BugHunter5.4k

Hunt Dom

Hunt client-side DOM vulnerabilities, DOM Clobbering (overwrite JS globals via HTML...

elementalsouls/Claude-BugHunter5.4k

Hunt Exceptional Conditions

Hunt mishandling of exceptional conditions, feed an endpoint malformed/unexpected...

elementalsouls/Claude-BugHunter5.4k

Hunt File Upload

Hunt file upload bugs, RCE via webshell, XSS via SVG/HTML, SSRF via XXE in DOCX, path...

elementalsouls/Claude-BugHunter5.4k

Hunt Fintech Graphql

Hunt fintech-specific GraphQL vulnerabilities: money-movement mutations (transfers...

elementalsouls/Claude-BugHunter5.4k

Hunt Forgot Password

Hunt Forgot Password / Account Recovery Authentication Flaws, 5 distinct patterns: (1)...

elementalsouls/Claude-BugHunter5.4k

Hunt Graphql

Hunting skill for graphql vulnerabilities.

elementalsouls/Claude-BugHunter5.4k

Hunt Grpc

Hunt gRPC vulnerabilities, server reflection enabled (enumerate all services/methods)...

elementalsouls/Claude-BugHunter5.4k

Hunt Host Header

Hunt Host Header Injection, password reset poisoning → ATO, web cache poisoning via...

elementalsouls/Claude-BugHunter5.4k

Hunt HTML Injection

Hunt HTML Injection, user-supplied input is rendered as raw HTML in the response...

elementalsouls/Claude-BugHunter5.4k

Hunt Http Smuggling

Hunt HTTP request smuggling (CL.TE, TE.CL, H2.CL, H2.TE).

elementalsouls/Claude-BugHunter5.4k

Hunt Idor

Hunting skill for idor vulnerabilities.

elementalsouls/Claude-BugHunter5.4k

Hunt Jwt Crypto

Hunt JWT cryptographic failures, alg:none signature-stripping and RS256→HS256...

elementalsouls/Claude-BugHunter5.4k

Hunt K8S

Hunt Kubernetes & Docker, API anonymous access, kubelet 10250 exec (SPDY/WebSocket...

elementalsouls/Claude-BugHunter5.4k

Hunt Laravel

Hunt Laravel specific vulnerabilities, Debug mode leakage (APP_DEBUG=true exposes full...

elementalsouls/Claude-BugHunter5.4k

Hunt Ldap

Hunt LDAP Injection and XPath Injection, authentication bypass, blind char-by-char...

elementalsouls/Claude-BugHunter5.4k

Hunt Lfi

Hunt Local File Inclusion (LFI), Remote File Inclusion (RFI), and Path Traversal, ...

elementalsouls/Claude-BugHunter5.4k

Hunt Mfa Bypass

Hunt MFA / 2FA bypass, 7 distinct patterns.

elementalsouls/Claude-BugHunter5.4k

Hunt Misc

Hunting skill for misc vulnerabilities.

elementalsouls/Claude-BugHunter5.4k

Hunt Nextjs

Hunt Next.js specific vulnerabilities, Server Actions arbitrary function execution...

elementalsouls/Claude-BugHunter5.4k

Hunt Nodejs

Hunt Node.js specific vulnerabilities, Prototype Pollution → RCE chains...

elementalsouls/Claude-BugHunter5.4k