H-mmer/pentest-agents

H-mmer/pentest-agents

Cursor rule Cursor

Reference file for chain-builder agent and autopilot. Do not duplicate this content elsewhere.

H-mmer/pentest-agents

Cursor rule Cursor

These rules are ALWAYS active. Breaking them wastes time and tanks your validity ratio.

H-mmer/pentest-agents

Cursor rule Cursor

ALL agents, skills, and orchestrators that need a username, handle, email, password, token, or cookie for a bug bounty platform MUST read it from these env vars at runtime.

H-mmer/pentest-agents

Cursor rule Cursor

This file is the "do not repeat" register. Every rule below came from a real session where an agent wasted time, got corrected by the user, inflated a report, or missed a bug. These lessons are target-agnostic — they apply to any program.

H-mmer/pentest-agents

Cursor rule Cursor

Reference file for validator agent. Do not duplicate this content elsewhere.

H-mmer/pentest-agents

Cursor rule Cursor

Cursor rule "pentest-agents-payloads" from H-mmer/pentest-agents, covering payload reference, xss payloads, basic, waf bypass and context-specific.

H-mmer/pentest-agents

Cursor rule Cursor

Field-tested techniques from real engagements. Reference file for all hunting agents.

H-mmer/pentest-agents

Cursor rule Cursor

Update this file whenever an engagement proves a vendor has closed a bug class or a fingerprint signature drifts. Entries here prevent re-probing patched vectors across future engagements.

H-mmer/pentest-agents

Cursor rule Cursor

Reference file for all hunter agents when a WAF blocks initial payloads. Do not give up after 3-5 payloads. Work through the categories systematically.