sanjaysaini1952/BugBounty-Arsenal
Agent
Agent "autopilot-agent" from sanjaysaini1952/BugBounty-Arsenal, covering autopilot agent, pipeline flow, phase 1: scope check, phase 2: reconnaissance and subdomain enumeration (all sources).
sanjaysaini1952/BugBounty-Arsenal
Agent
Identify all endpoints with identifiers.
sanjaysaini1952/BugBounty-Arsenal
Agent
Gather information without sending any requests to the target.
sanjaysaini1952/BugBounty-Arsenal
Agent
Agent "report-writer" from sanjaysaini1952/BugBounty-Arsenal, covering report writer agent, instructions, report template, title and summary.
sanjaysaini1952/BugBounty-Arsenal
Agent
Agent "ssrf-hunter" from sanjaysaini1952/BugBounty-Arsenal, covering ssrf hunter agent, pre-test setup, testing methodology, step 1: basic internal access and test basic ssrf to localhost.
sanjaysaini1952/BugBounty-Arsenal
Agent
Every finding MUST pass ALL 7 questions.
sanjaysaini1952/BugBounty-Arsenal
Agent
For each input, test if input is reflected.
sanjaysaini1952/BugBounty-Arsenal
Command
Command "exploitation-commands" from sanjaysaini1952/BugBounty-Arsenal, covering quick reference: exploitation commands, xss testing, sql injection testing, ssrf testing and using curl with various bypasses.
sanjaysaini1952/BugBounty-Arsenal
Command
Command "recon-commands" from sanjaysaini1952/BugBounty-Arsenal, covering quick reference: recon commands, subdomain enumeration, dns resolution, http probing and port scanning.
sanjaysaini1952/BugBounty-Arsenal
Command
Command "validation-commands" from sanjaysaini1952/BugBounty-Arsenal, covering quick reference: validation & reporting commands, reproduction verification, save request to file and replay, compare responses and impact verification.
sanjaysaini1952/BugBounty-Arsenal
Skill Claude CodeCodex
Skill "api" from sanjaysaini1952/BugBounty-Arsenal, covering api security testing skill — 12 test cases, 160. mass assignment via json (easy), 161. mass assignment via query params (medium), 162. http method confusion (easy) and 163. api versioning bypass (medium).
sanjaysaini1952/BugBounty-Arsenal
Skill Claude CodeCodex
Request password reset for a test account. Inspect the reset token. If predictable (sequential, timestamp-based, weak hash), forge tokens for other accounts.
sanjaysaini1952/BugBounty-Arsenal
Skill Claude CodeCodex
Change price in request body, hidden fields, or API calls. Test: negative prices, zero prices, large discounts.
sanjaysaini1952/BugBounty-Arsenal
Skill Claude CodeCodex
Send X-Forwarded-Host: evil.com or X-Original-URL: /admin. If response is cached and served to other users, report.
sanjaysaini1952/BugBounty-Arsenal
Skill Claude CodeCodex
Check for publicly accessible S3 buckets: curl https://bucket-name.s3.amazonaws.com/. Report open buckets.
sanjaysaini1952/BugBounty-Arsenal
Skill Claude CodeCodex
Test every parameter with: ; ls, | ls, ls , $(ls). Report any command execution.
sanjaysaini1952/BugBounty-Arsenal
Skill Claude CodeCodex
Send Origin: https://evil.com. If response includes Access-Control-Allow-Origin: https://evil.com with Access-Control-Allow-Credentials: true, report credential theft risk.
sanjaysaini1952/BugBounty-Arsenal
Skill Claude CodeCodex
Check if app uses MD5 or SHA1 for password hashing or sensitive data. Report weak algorithm usage.
sanjaysaini1952/BugBounty-Arsenal
Skill Claude CodeCodex
Create a form that auto-submits to /api/v1/user/email or /api/v1/user/password. Test if change succeeds when victim clicks the link.
sanjaysaini1952/BugBounty-Arsenal
Skill Claude CodeCodex
Send O:8:"stdClass":0:{} or crafted serialized string. If error mentions class not found, deserialization is occurring.
sanjaysaini1952/BugBounty-Arsenal
Skill Claude CodeCodex
Send crafted input that causes catastrophic backtracking: aaaaaaaaaaaaaaaaaaaaaaaaaaaaaa! to regex. Report if response time >5s.
sanjaysaini1952/BugBounty-Arsenal
Skill Claude CodeCodex
Upload .php, .jsp, .asp, .sh files. If accepted, report RCE vector.
sanjaysaini1952/BugBounty-Arsenal
Skill Claude CodeCodex
Send {schema{types{name,fields{name,args{name}}}}}. Report full schema disclosure.
sanjaysaini1952/BugBounty-Arsenal
Skill Claude CodeCodex
For every entity the app returns (orders, users, files, profiles), iterate IDs (/api/v1/2, /api/v1/3, ...). Report any accessible resources belonging to another user without authentication changes.