51 Skills Active

BUGGY

buggy.hunt("https://target.com")→ [sqli] signal detectedclaude.triage(finding="blind-sqli")→ [7-gate] passed (7/7)recon.subdomains("target.com")→ [142] active assetsauth.audit_jwt(token="ey...")→ [none-alg] bypass foundbuggy.generate_report(cvss=9.8)→ [hackerone] markdown readyapi.probe_graphql("api.target.com/v1")→ [introspection] enabledm365.enum_users("target.com")→ [pw-spray] safe modemobile.decompile_apk("app.apk")→ [hardcoded-key] leakedbuggy.hunt("https://target.com")→ [sqli] signal detectedclaude.triage(finding="blind-sqli")→ [7-gate] passed (7/7)recon.subdomains("target.com")→ [142] active assetsauth.audit_jwt(token="ey...")→ [none-alg] bypass foundbuggy.generate_report(cvss=9.8)→ [hackerone] markdown readyapi.probe_graphql("api.target.com/v1")→ [introspection] enabledm365.enum_users("target.com")→ [pw-spray] safe modemobile.decompile_apk("app.apk")→ [hardcoded-key] leakedbuggy.hunt("https://target.com")→ [sqli] signal detectedclaude.triage(finding="blind-sqli")→ [7-gate] passed (7/7)recon.subdomains("target.com")→ [142] active assetsauth.audit_jwt(token="ey...")→ [none-alg] bypass foundbuggy.generate_report(cvss=9.8)→ [hackerone] markdown readyapi.probe_graphql("api.target.com/v1")→ [introspection] enabledm365.enum_users("target.com")→ [pw-spray] safe modemobile.decompile_apk("app.apk")→ [hardcoded-key] leaked

[ CLAUDE SECURITY SKILLS ]

51 PRODUCTION SKILLS
FOR BUG HUNTING

> FILTER BY CATEGORY (↕↓)

51 ready-to-use skills for Claude Code + Chat. Built from 574+ HackerOne disclosures. Copy and run directly in your Claude Code terminal.

51 total skills

8 categories

Claude 3.7 powered

100% MIT licensed

/hunt-sqli

SQLi Hunter

web

claude "/hunt-sqli https://target.com" # auto-loads web-hunting patterns

both12 reportsVIEW →

/hunt-xss

XSS Hunter

web

claude "/hunt-xss https://target.com" # auto-loads web-hunting patterns

both174 reportsVIEW →

/hunt-ssrf

SSRF Hunter

web

claude "/hunt-ssrf https://target.com" # auto-loads web-hunting patterns

/hunt-rce

RCE Hunter

web

claude "/hunt-rce https://target.com" # auto-loads web-hunting patterns

/hunt-idor

IDOR Hunter

web

claude "/hunt-idor https://target.com" # auto-loads web-hunting patterns

both26 reportsVIEW →

/hunt-csrf

CSRF Hunter

web

claude "/hunt-csrf https://target.com" # auto-loads web-hunting patterns

/hunt-ssti

SSTI Hunter

web

claude "/hunt-ssti https://target.com" # auto-loads web-hunting patterns

/hunt-xxe

XXE Hunter

web

claude "/hunt-xxe https://target.com" # auto-loads web-hunting patterns

/hunt-file-upload

File Upload Hunter

web

claude "/hunt-file-upload https://target.com" # auto-loads web-hunting patterns

/hunt-cache-poison

Cache Poison Hunter

web

claude "/hunt-cache-poison https://target.com" # auto-loads web-hunting patterns

/hunt-http-smuggling

HTTP Smuggling Hunter

web

claude "/hunt-http-smuggling https://target.com" # auto-loads web-hunting patterns

/hunt-race-condition

Race Condition Hunter

web

claude "/hunt-race-condition https://target.com" # auto-loads web-hunting patterns

/hunt-business-logic

Business Logic Hunter

web

claude "/hunt-business-logic https://target.com" # auto-loads web-hunting patterns

/hunt-graphql

GraphQL Hunter

web

claude "/hunt-graphql https://target.com" # auto-loads web-hunting patterns

/hunt-llm-ai

LLM/AI Hunter

web

claude "/hunt-llm-ai https://target.com" # auto-loads web-hunting patterns

/hunt-dispatch

Dispatch Hunter

web

claude "/hunt-dispatch https://target.com" # auto-loads web-hunting patterns

/hunt-misc

Misc Vuln Hunter

web

claude "/hunt-misc https://target.com" # auto-loads web-hunting patterns

/hunt-aspnet

ASP.NET Hunter

web

claude "/hunt-aspnet https://target.com" # auto-loads web-hunting patterns

/bug-bounty

Bug Bounty Planner

web

claude "/bug-bounty https://target.com" # auto-loads web-hunting patterns

/bb-methodology

BB Methodology

web

claude "/bb-methodology https://target.com" # auto-loads web-hunting patterns

/bb-local-toolkit

Local Toolkit

web

claude "/bb-local-toolkit https://target.com" # auto-loads web-hunting patterns

/security-arsenal

Security Arsenal

web

claude "/security-arsenal https://target.com" # auto-loads web-hunting patterns

/hunt-oauth

OAuth Hunter

auth

claude "/hunt-oauth https://target.com" # auto-loads auth patterns

both19 reportsVIEW →

/hunt-ato

ATO Hunter

auth

claude "/hunt-ato https://target.com" # auto-loads auth patterns

/hunt-auth-bypass

Auth Bypass Hunter

auth

claude "/hunt-auth-bypass https://target.com" # auto-loads auth patterns

/hunt-mfa-bypass

MFA Bypass Hunter

auth

claude "/hunt-mfa-bypass https://target.com" # auto-loads auth patterns

/hunt-saml

SAML Hunter

auth

claude "/hunt-saml https://target.com" # auto-loads auth patterns

/hunt-api-misconfig

API Misconfig Hunter

api

claude "/hunt-api-misconfig https://target.com" # auto-loads api-infra patterns

/hunt-cloud-misconfig

Cloud Misconfig Hunter

api

claude "/hunt-cloud-misconfig https://target.com" # auto-loads api-infra patterns

/hunt-graphql

GraphQL Deep Dive

api

claude "/hunt-graphql https://target.com" # auto-loads api-infra patterns

/hunt-ntlm-info

NTLM Info Hunter

api

claude "/hunt-ntlm-info https://target.com" # auto-loads api-infra patterns

/cloud-iam-deep

Cloud IAM Deep

enterprise

claude "/cloud-iam-deep https://target.com" # auto-loads enterprise patterns

both6 reportsVIEW →

/m365-entra-attack

M365/Entra Attack

enterprise

claude "/m365-entra-attack https://target.com" # auto-loads enterprise patterns

/okta-attack

Okta Attack

enterprise

claude "/okta-attack https://target.com" # auto-loads enterprise patterns

/hunt-sharepoint

SharePoint Hunter

enterprise

claude "/hunt-sharepoint https://target.com" # auto-loads enterprise patterns

/enterprise-vpn-attack

Enterprise VPN Attack

enterprise

claude "/enterprise-vpn-attack https://target.com" # auto-loads enterprise patterns

/vmware-vcenter-attack

VMware vCenter Attack

enterprise

claude "/vmware-vcenter-attack https://target.com" # auto-loads enterprise patterns

/apk-redteam-pipeline

APK Red-Team Pipeline

red

claude "/apk-redteam-pipeline https://target.com" # auto-loads red-team patterns

code1 reportsVIEW →

/supply-chain-attack-recon

Supply Chain Recon

red

claude "/supply-chain-attack-recon https://target.com" # auto-loads red-team patterns

/mid-engagement-ir-detection

IR Detection Awareness

red

claude "/mid-engagement-ir-detection https://target.com" # auto-loads red-team patterns

/redteam-mindset

Red Team Mindset

red

claude "/redteam-mindset https://target.com" # auto-loads red-team patterns

/osint-methodology

OSINT Methodology

recon

claude "/osint-methodology https://target.com" # auto-loads recon patterns

/offensive-osint

Offensive OSINT

recon

claude "/offensive-osint https://target.com" # auto-loads recon patterns

/hunt-subdomain

Subdomain Hunter

recon

claude "/hunt-subdomain https://target.com" # auto-loads recon patterns

/triage-validation

Triage Validation

reporting

claude "/triage-validation https://target.com" # auto-loads reporting patterns

/report-writing

Report Writing

reporting

claude "/report-writing https://target.com" # auto-loads reporting patterns

/evidence-hygiene

Evidence Hygiene

reporting

claude "/evidence-hygiene https://target.com" # auto-loads reporting patterns

/bugcrowd-reporting

Bugcrowd Reporting

reporting

claude "/bugcrowd-reporting https://target.com" # auto-loads reporting patterns

/redteam-report-template

Red Team Report

reporting

claude "/redteam-report-template https://target.com" # auto-loads reporting patterns

/web3-audit

Web3 Smart Contract Audit

specialized

claude "/web3-audit https://target.com" # auto-loads specialized patterns

/meme-coin-audit

Meme Coin Audit

specialized

claude "/meme-coin-audit https://target.com" # auto-loads specialized patterns