Skill library

51 skills across 8 domains

Each skill is a context bundle built from real bug bounty disclosures. Select a domain to browse its skills.

Web Hunting
Deep-dive skills for SQL injection, XSS, SSRF, RCE, business logic, and 15+ other web vulnerability classes
/hunt-sqli/hunt-xss/hunt-ssrf+19 more
22 skills
Auth & Identity
OAuth 2.0 flows, JWT attacks, ATO chains, SAML bypasses, and MFA bypass techniques drawn from 19–40 disclosed reports each.
/hunt-oauth/hunt-ato/hunt-auth-bypass+2 more
5 skills
API & Infrastructure
Mass assignment, JWT/CORS flaws, GraphQL introspection, prototype pollution, cloud misconfiguration, and NTLM leak patterns.
/hunt-api-misconfig/hunt-cloud-misconfig/hunt-graphql+1 more
4 skills
Enterprise Platforms
Attack chains for M365/Entra, Okta, VMware vCenter, SharePoint, IAM privilege escalation, and enterprise VPN lateral movement.
/cloud-iam-deep/m365-entra-attack/okta-attack+3 more
6 skills
Red Team
Full APK red-team pipeline, supply chain recon, IR detection evasion patterns, and red-team mindset for external engagements.
/apk-redteam-pipeline/supply-chain-attack-recon/mid-engagement-ir-detection+1 more
4 skills
Recon & OSINT
5-stage recon pipeline, asset-graph methodology, subdomain enumeration, identity-fabric mapping, and crypto tracing.
/osint-methodology/offensive-osint/hunt-subdomain
3 skills
Reporting & Hygiene
7-Question Gate, report templates for H1/Bugcrowd/Intigriti/Immunefi, CVSS 3.1 scoring, evidence hygiene, and N/A-ratio reduction.
/triage-validation/report-writing/evidence-hygiene+2 more
5 skills
Specialized
Solidity/Rust smart contract audits for DeFi protocols and meme-coin rug-pull pattern detection for Web3 bug bounty.
/web3-audit/meme-coin-audit
2 skills

Ready to install your first skill? Start in minutes.

Browse all 8 attack domains — 51 specialized skills, MIT licensed.

Browse all 8 domainsRead the install guide

Works with Claude Free, Pro, Teams, and Enterprise · MIT License