A persistent context and fieldcraft system for AI-assisted bug bounty hunting.
Skill Claude CodeCodex
Analyze a pasted raw HTTP request as a bug-bounty entrypoint. Use when the human pastes a Burp, DevTools, mobile-proxy, curl, or raw HTTP request and asks what to test, what vulnerabilities apply, or to analyze/analyse the request. Routes directly to the request-analysis workflow without recon.
Skill Claude CodeCodex
Recover the operation set, then find the two deltas. Use for "api discovery" and closely related asks.
Skill Claude CodeCodex
What this application does, who may do it, and where the oracle is. Use for "application mapping" and closely related asks.
Skill Claude CodeCodex
Decide whether address space is even the right unit here. Use for "asn and ip discovery" and closely related asks.
Skill Claude CodeCodex
Rank it, argue it, and never rank on the payout. Use for "attack surface prioritization" and closely related asks.
Skill Claude CodeCodex
Map every way in, and every way the way in fails. Use for "authentication surface mapping" and closely related asks.
Skill Claude CodeCodex
Explore one application in a real, authenticated browser session — rendered routes, post-auth surface, runtime network traffic, storage, CSP — and validate client-side hypotheses (DOM XSS sinks, postMessage senders/receivers) with the smallest interactive proof. Use for "browse the app", "explore it logged in"…
Skill Claude CodeCodex
The ground moved twice, and the old method now searches a closed set. Use for "cloud asset discovery" and closely related asks.
Skill Claude CodeCodex
Probe one fingerprinted host (or a named set) for the KNOWN misconfigurations and exposure behaviors of its specific framework — actuator endpoints on Spring Boot, wp-json/debug.log on WordPress, exposed configs per stack — using the.
Skill Claude CodeCodex
What is this built out of, at which version, and how sure are you. Use for "component inventory" and closely related asks.
Skill Claude CodeCodex
Turn an off-playbook, multi-step hunting request into brain-integrated work. Use when the hunter asks for something no single skill or flow covers — a custom pipeline such as "extract JS from the 404 hosts, pull the params, then test them", "chain these three steps", "do X then feed it into Y", or any ad-hoc request…
Skill Claude CodeCodex
Find what is routed but unlinked, and prove the baseline you found it against. Use for "content discovery" and closely related asks.
Skill Claude CodeCodex
The routes that still route, on the host nobody rebuilt. Use for "cross host endpoint reuse" and closely related asks.
Skill Claude CodeCodex
Turn collected evidence into a testable attack surface. Use for "derive properties" and closely related asks.
Skill Claude CodeCodex
The records, and the three "dead" answers that are actually findings. Use for "dns analysis" and closely related asks.
Skill Claude CodeCodex
Re-evaluate one existing HunterStick skill or playbook against user-supplied reports, research, notes, or experiments under knowledge/. Use for "re-evaluate the named skill from knowledge", "use these reports to improve this skill", "ground this vulnerability playbook", or "check whether this research changes our…
Skill Claude CodeCodex
How many assets are actually here, and which name is the stale one. Use for "host correlation and clustering" and closely related asks.
Skill Claude CodeCodex
Which of these actually speak HTTP, and what do they say. Use for "http probing" and closely related asks.
Skill Claude CodeCodex
Scaffold a target brain from the hunter's verbatim scope statement. Use for "initialize a new target", "start a new program", or any requested work naming a target that has no directory yet. Records the scope verbatim, never expands a company name into domains, then STOPS.
Skill Claude CodeCodex
Read the client for what the server will not tell you. Use for "javascript analysis" and closely related asks.
Skill Claude CodeCodex
Which of these names are real, and where they actually live. Use for "live host validation" and closely related asks.
Skill Claude CodeCodex
A small honest delta, cheaply, forever. Use for "monitoring and diff" and closely related asks.
Skill Claude CodeCodex
From a company name to the apexes that are actually theirs. Use for "organization and roots" and closely related asks.
Skill Claude CodeCodex
Read the app before you guess, and measure a delta rather than a presence. Use for "parameter discovery" and closely related asks.