elementalsouls

elementalsouls/claude-bughunter

71 resources in this repository

GitHub
🎯71

🎯Skills71

🎯bb-methodology🎯Skill

A self-contained Claude skill bundle for authorized bug hunting and red-team work, providing 51 skills, 15 slash commands, and 681 disclosed-report patterns across 24 vulnerability classes with Burp MCP integration and engagement scaffolding.

bb-methodology
🎯web2-recon🎯Skill

A web reconnaissance skill from the claude-bughunter bundle, which provides 51 skills for authorized bug hunting and red-team assessments with 681 disclosed-report patterns across 24 vulnerability classes and Burp MCP integration.

web2-recon
🎯bug-bounty🎯Skill

A bug hunting and red-team skill bundle with 51 skills, 681 disclosed-report patterns across 24 vulnerability classes, enterprise identity and infrastructure attack matrices, Burp MCP integration, and engagement-folder scaffolding.

bug-bounty
🎯hunt-auth-bypass🎯Skill

A self-contained Claude skill bundle for bug hunting and external red-team work, featuring 51 skills, 15 slash commands, and 681 disclosed-report patterns across 24 vulnerability classes. Includes enterprise identity and infrastructure attack matrices, Burp MCP integration, and engagement-folder scaffolding.

hunt-auth-bypass
🎯osint-methodology🎯Skill

Part of claude-bughunter, a 51-skill bundle for authorized bug hunting and red-team engagements that covers web vulnerability detection, enterprise attack matrices, and engagement reporting, with 681 curated disclosed-report patterns across 24 vulnerability classes.

osint-methodology
🎯hunt-subdomain🎯Skill

A drop-in Claude Code skill bundle for bug hunting and external red-team work, containing 51 skills, 15 slash commands, and 681 disclosed-report patterns across 24 vulnerability classes. Includes enterprise identity and infrastructure attack matrices, engagement-folder scaffolding, and Burp MCP integration.

hunt-subdomain
🎯offensive-osint🎯Skill

A Claude Code skill bundle for authorized bug hunting and red-team engagements with 51 skills, 15 slash commands, and 681 disclosed-report patterns across 24 vulnerability classes, including enterprise identity attack matrices and Burp MCP integration.

offensive-osint
🎯report-writing🎯Skill

Helps AI agents draft vulnerability reports using platform-specific templates for HackerOne, Bugcrowd VRT, Intigriti, and Immunefi. Part of the claude-bughunter bundle providing a complete bug hunting workflow from reconnaissance to submission.

report-writing
🎯hunt-rce🎯Skill

A self-contained Claude skill bundle for authorized bug hunting and red-team work, featuring 51 skills, 15 slash commands, and 681 disclosed-report patterns across 24 vulnerability classes. Includes enterprise identity and infrastructure attack matrices, Burp MCP integration, and engagement-folder scaffolding.

hunt-rce
🎯hunt-ssrf🎯Skill

Part of a comprehensive bug hunting and red-team skill bundle featuring 51 skills, 15 slash commands, and 681 disclosed-report patterns across 24 vulnerability classes, with enterprise attack matrices and Burp MCP integration.

hunt-ssrf
🎯hunt-xss🎯Skill

A Claude Code skill bundle for bug hunting and red-team work with 51 skills, 15 slash commands, and 681 disclosed-report patterns across 24 vulnerability classes. Includes XSS-specific detection patterns, chain templates, VRT mappings, and Burp MCP integration for authorized security testing.

hunt-xss
🎯vmware-vcenter-attack🎯Skill

A self-contained Claude Code skill bundle for bug hunting and external red-team work with 51 skills, 15 slash commands, and 681 disclosed-report patterns across 24 vulnerability classes, including enterprise identity attack chains and Burp MCP integration.

vmware-vcenter-attack
🎯web3-audit🎯Skill

A Claude Code skill bundle for authorized bug hunting and external red-team engagements, containing 51 skills, 15 slash commands, and 681 curated disclosed-report patterns across 24 vulnerability classes, with enterprise identity/infrastructure attack matrices and Burp MCP integration.

web3-audit
🎯mid-engagement-ir-detection🎯Skill

Provides SOC-patch and attacker detection methodology for mid-engagement awareness during authorized red-team operations, helping operators identify if defenders have detected testing activity. Part of the claude-bughunter bundle with 51 skills and 681 disclosed-report patterns.

mid-engagement-ir-detection
🎯security-arsenal🎯Skill

A self-contained Claude skill bundle for bug hunting and authorized red-team work, providing 51 skills, 15 slash commands, and 681 disclosed-report patterns across 24 vulnerability classes with enterprise identity and infrastructure attack matrices.

security-arsenal
🎯hunt-saml🎯Skill

A comprehensive bug hunting and authorized red-team skill bundle with 51 skills, 15 slash commands, and 681 disclosed-report patterns across 24 vulnerability classes. Covers web application security, enterprise identity attack chains, Burp MCP integration, and structured reporting workflows.

hunt-saml
🎯bb-local-toolkit🎯Skill

A drop-in skill bundle for bug hunting and external red-team operations, featuring detection patterns, payload tables, and chain templates curated from 681 disclosed HackerOne reports, with Burp Suite MCP integration and engagement-folder scaffolding.

bb-local-toolkit
🎯meme-coin-audit🎯Skill

A self-contained Claude Code skill bundle for bug hunting and authorized red-team work, featuring 51 skills, 15 slash commands, and 681 disclosed-report patterns across 24 vulnerability classes. Includes enterprise identity and infrastructure attack matrices, engagement-folder scaffolding, and Burp MCP integration.

meme-coin-audit
🎯hunt-oauth🎯Skill

Part of claude-bughunter, a skill bundle with 51 skills and 681 disclosed-report patterns across 24 vulnerability classes for bug hunting and red-team work, including enterprise attack matrices and Burp Suite MCP integration.

hunt-oauth
🎯hunt-aspnet🎯Skill

A Claude skill bundle with 51 skills and 681 disclosed-report patterns for authorized bug bounty hunting and external red-team work, covering 24 vulnerability classes, enterprise attack matrices, and engagement reporting workflows.

hunt-aspnet
🎯supply-chain-attack-recon🎯Skill

A skill from claude-bughunter, a self-contained Claude Code skill bundle for authorized bug hunting and red-team work with 51 skills, 15 slash commands, and 681 disclosed-report patterns across 24 vulnerability classes.

supply-chain-attack-recon
🎯evidence-hygiene🎯Skill

Part of claude-bughunter, a 51-skill bundle for authorized bug hunting and red-team engagements that provides evidence management with cookie/PII redaction, report formatting, and proper documentation for security vulnerability disclosures.

evidence-hygiene
🎯redteam-report-template🎯Skill

A skill from claude-bughunter, a self-contained Claude skill bundle for bug hunting and authorized red-team work, featuring 51 skills, 681 disclosed-report patterns across 24 vulnerability classes, and Burp Suite MCP integration.

redteam-report-template
🎯hunt-xxe🎯Skill

A self-contained Claude Code skill bundle for authorized bug hunting and red-team work, providing 51 skills, 15 slash commands, and 681 disclosed-report patterns across 24 vulnerability classes with enterprise identity and infrastructure attack matrices.

hunt-xxe
🎯hunt-ssti🎯Skill

A self-contained Claude skill bundle for authorized bug hunting and red-team work, featuring 51 skills, 15 slash commands, and 681 disclosed-report patterns across 24 vulnerability classes. Includes enterprise identity and infrastructure attack matrices, Burp MCP integration, and engagement-folder scaffolding.

hunt-ssti
🎯hunt-sqli🎯Skill

Part of claude-bughunter, a self-contained skill bundle for bug hunting and authorized red-team work with 51 skills, 15 slash commands, and 681 disclosed-report patterns across 24 vulnerability classes. Includes Burp MCP integration and engagement-folder scaffolding.

hunt-sqli
🎯hunt-dispatch🎯Skill

A comprehensive bug hunting and red-team skill bundle for Claude Code with 51 skills, 15 slash commands, and 681 disclosed-report patterns across 24 vulnerability classes. Covers web app security, enterprise platform attack chains, OWASP/NIST/ATT&CK alignment, and structured reporting with Burp MCP integration.

hunt-dispatch
🎯enterprise-vpn-attack🎯Skill

A Claude Code skill bundle with 51 skills for authorized bug hunting and red-team engagements. Includes 681 disclosed-report patterns across 24 vulnerability classes, enterprise identity and infrastructure attack matrices, engagement scaffolding, and Burp MCP integration.

enterprise-vpn-attack
🎯bugcrowd-reporting🎯Skill

A comprehensive bug hunting and red-team skill bundle for Claude Code with 51 skills, 15 slash commands, and 681 disclosed-report patterns across 24 vulnerability classes. Includes enterprise attack matrices, engagement-folder scaffolding, and Burp MCP integration.

bugcrowd-reporting
🎯hunt-race-condition🎯Skill

A race condition hunting skill from claude-bughunter, a self-contained skill bundle for bug hunting and red-team work with 51 skills, 681 disclosed-report patterns across 24 vulnerability classes, and Burp MCP integration.

hunt-race-condition
🎯hunt-cloud-misconfig🎯Skill

A bug hunting skill for detecting cloud misconfigurations including S3, Lambda, RDS, IAM-in-JS, and metadata SSRF vulnerabilities, part of the claude-bughunter bundle with 51 skills and 681 disclosed report patterns across 24 vulnerability classes.

hunt-cloud-misconfig
🎯hunt-http-smuggling🎯Skill

A Claude Code skill bundle for authorized bug hunting and red-team work with 51 skills, 681 disclosed-report patterns across 24 vulnerability classes, and Burp MCP integration. It includes enterprise identity and infrastructure attack matrices along with engagement-folder scaffolding.

hunt-http-smuggling
🎯triage-validation🎯Skill

Part of claude-bughunter, a 51-skill bundle for authorized bug hunting and red-team work, providing a 7-Question Gate for triage validation, VRT category mapping, severity-request paragraphs, and out-of-scope rebuttal guidance for vulnerability reports.

triage-validation
🎯hunt-idor🎯Skill

A Claude Code skill bundle for bug hunting and red-team work with 51 skills, 15 slash commands, and 681 disclosed-report patterns across 24 vulnerability classes. Includes IDOR-specific detection patterns, chain templates, platform CVE chains, and Burp MCP integration for authorized security testing.

hunt-idor
🎯okta-attack🎯Skill

Provides Okta-specific attack chain patterns, version-fingerprint matrices, and post-credential escalation paths for authorized red-team and bug bounty engagements. Part of the claude-bughunter bundle with 51 skills covering enterprise identity and infrastructure attack surfaces.

okta-attack
🎯hunt-api-misconfig🎯Skill

A comprehensive Claude Code skill bundle for authorized bug hunting and red-team work, featuring 51 skills, 15 slash commands, and 681 disclosed-report patterns across 24 vulnerability classes with Burp MCP integration.

hunt-api-misconfig
🎯cloud-iam-deep🎯Skill

Part of the claude-bughunter skill bundle (51 skills, 681 disclosed-report patterns), this skill focuses on enterprise platform attack chains covering cloud IAM, with current 2024-2026 CVE chains, AADSTS error references, version-fingerprint matrices, and post-credential escalation paths.

cloud-iam-deep
🎯redteam-mindset🎯Skill

A self-contained skill bundle with 51 skills and 15 slash commands for bug hunting and authorized red-team work, featuring 681 disclosed-report patterns across 24 vulnerability classes, enterprise attack matrices, and Burp MCP integration.

redteam-mindset
🎯hunt-file-upload🎯Skill

A self-contained Claude Code skill bundle for authorized bug hunting and red-team work, with 51 skills, 15 slash commands, and 681 disclosed-report patterns across 24 vulnerability classes. Includes enterprise identity and infrastructure attack matrices, Burp MCP integration, and engagement-folder scaffolding.

hunt-file-upload
🎯hunt-mfa-bypass🎯Skill

A self-contained Claude Code skill bundle for authorized bug hunting and red-team work, providing 51 skills, 15 slash commands, and 681 disclosed-report patterns across 24 vulnerability classes with enterprise identity and infrastructure attack matrices.

hunt-mfa-bypass
🎯hunt-sharepoint🎯Skill

A Claude Code skill bundle for bug hunting and red-team engagements, providing 51 skills with 681 disclosed-report patterns across 24 vulnerability classes, enterprise attack matrices, and Burp MCP integration.

hunt-sharepoint
🎯hunt-business-logic🎯Skill

A skill from claude-bughunter, a self-contained Claude Code skill bundle for authorized bug hunting and red-team work with 51 skills, 15 slash commands, and 681 disclosed-report patterns across 24 vulnerability classes.

hunt-business-logic
🎯hunt-cache-poison🎯Skill

A Claude Code skill bundle for bug hunting and red-team engagements, providing 51 skills with 681 disclosed-report patterns across 24 vulnerability classes, Burp MCP integration, and engagement-folder scaffolding.

hunt-cache-poison
🎯hunt-graphql🎯Skill

Part of the claude-bughunter skill bundle with 51 security testing skills and 681 disclosed-report patterns across 24 vulnerability classes, covering web app bug hunting, GraphQL and API security, enterprise platform attacks, and red-team workflows.

hunt-graphql
🎯hunt-llm-ai🎯Skill

A Claude Code skill bundle with 51 skills for authorized bug hunting and external red-team work, featuring 681 disclosed-report patterns across 24 vulnerability classes, enterprise attack matrices, Burp MCP integration, and structured reporting workflows.

hunt-llm-ai
🎯hunt-csrf🎯Skill

A self-contained Claude Code skill bundle for authorized bug hunting and red-team work, providing 51 skills, 15 slash commands, and 681 disclosed-report patterns across 24 vulnerability classes with enterprise identity and infrastructure attack matrices.

hunt-csrf
🎯m365-entra-attack🎯Skill

A collection of 135+ production-ready skills and 2 MCP servers for Claude Code, built by an ex-Meta ML engineer with 12 years of experience and 12 patents, available via plugin marketplace or manual installation.

m365-entra-attack
🎯hunt-ato🎯Skill

Guides AI agents through 9 account takeover attack paths, including credential stuffing, session fixation, and password reset chain exploits, as part of the claude-bughunter security skill bundle.

hunt-ato
🎯hunt-misc🎯Skill

A comprehensive Claude Code skill bundle for authorized bug hunting and red-team work, featuring 51 skills, 15 slash commands, and 681 disclosed-report patterns across 24 vulnerability classes with enterprise attack matrices and Burp MCP integration.

hunt-misc
🎯apk-redteam-pipeline🎯Skill

A self-contained Claude Code skill bundle for bug hunting and external red-team work, featuring 51 skills, 15 slash commands, and 681 disclosed-report patterns across 24 vulnerability classes with engagement-folder scaffolding and Burp MCP integration.

apk-redteam-pipeline
🎯hunt-nodejs🎯Skill

Skill

hunt-nodejs
🎯hunt-nosqli🎯Skill

Skill

hunt-nosqli
🎯hunt-source-leak🎯Skill

Skill

hunt-source-leak
🎯hunt-cicd🎯Skill

Skill

hunt-cicd
🎯hunt-open-redirect🎯Skill

Skill

hunt-open-redirect
🎯hunt-ldap🎯Skill

Skill

hunt-ldap
🎯hunt-brute-force🎯Skill

Skill

hunt-brute-force
🎯hunt-k8s🎯Skill

Skill

hunt-k8s
🎯hunt-tls-network🎯Skill

Skill

hunt-tls-network
🎯hunt-deserialization🎯Skill

Skill

hunt-deserialization
🎯hunt-grpc🎯Skill

Skill

hunt-grpc
🎯hunt-websocket🎯Skill

Skill

hunt-websocket
🎯hunt-dom🎯Skill

Skill

hunt-dom
🎯hunt-host-header🎯Skill

Skill

hunt-host-header
🎯hunt-nextjs🎯Skill

Skill

hunt-nextjs
🎯hunt-lfi🎯Skill

Skill

hunt-lfi
🎯hunt-session🎯Skill

Skill

hunt-session
🎯hunt-laravel🎯Skill

Skill

hunt-laravel
🎯hunt-springboot🎯Skill

Skill

hunt-springboot
🎯hunt-cors🎯Skill

Skill

hunt-cors
🎯hunt-ntlm-info🎯Skill

Skill

hunt-ntlm-info