Skill Claude CodeCodex needs its repo
Zimbra SOAP user enum, CVE-2022-37042, SSRF when webmail.
not rated 1.3k
+26 10d ago C SkillSpector: warn 26 tokens
original MIT
1.3kStars on the repository
147Mods indexed here, across every type
10d agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown
Skill Claude CodeCodex
End-to-end Android APK red-team pipeline — automated APK acquisition (Play Store + apkpure + apkmirror fallback), jadx decompilation, secret/URL/JWT/Firebase grep, pinned-cert extraction, exported-component enumeration, Frida runtime instrumentation templates, intent-injection probes. Built from an authorized external…
not rated 1.3k
+26 10d ago A 145 tokens
copy · 88% MIT
Skill Claude CodeCodex needs its repo
Complete bug bounty workflow — recon (subdomain enumeration, asset discovery, fingerprinting, HackerOne scope, source code audit), pre-hunt learning, vuln hunting (30+ classes), A-to-B chaining, AI/LLM testing, bypass tables, language-specific grep, reporting. Use for ANY bug bounty task.
not rated 1.3k
+26 10d ago A ✓ AI review 69 tokens
copy · 84% MIT
Skill Claude CodeCodex
Use at the START of any bug bounty hunting session, when switching targets, or when feeling lost about what to do next. Master orchestrator that combines the 5-phase non-linear hunting workflow with the critical thinking framework (developer psychology, anomaly detection, What-If experiments). Routes to all other…
not rated 1.3k
+26 10d ago A 90 tokens
copy · 91% MIT
bug-bounty
53Skill Claude CodeCodex needs its repo
Master bug bounty orchestrator — full pipeline: recon, pre-hunt learning, vulnerability hunting (30+ classes), A-to-B chaining, AI/LLM testing (ASI01-ASI10), language-specific grep, bypass tables, and reporting (7-question gate, CVSS 3.1, human-tone templates). Use for ANY bug bounty task — starting a new target…
not rated 1.3k
+26 10d ago A ✓ AI review 121 tokens
copy · 86% MIT
Skill Claude CodeCodex
Bugcrowd-specific reporting tactics complementing report-writing: VRT category search-and-fallback strategy when no exact match exists, manual severity override when VRT defaults underrate impact, severity-request paragraph as first body section, OOS-clause rebuttal templates (rate limiting on auth-flow endpoints…
not rated 1.3k
+26 10d ago A 171 tokens
copy · 91% MIT
Skill Claude CodeCodex
GCP/AWS/Azure cloud exploitation -- Cloud Functions, Firestore, Cloud Run, S3, MinIO, Blob Storage, SA keys.
not rated 1.3k
+26 10d ago B SkillSpector: warn 35 tokens
original MIT
Skill Claude CodeCodex
Use when a bounded list of authorized API endpoints needs consistent CORS triage before browser validation.
not rated 1.3k
+26 10d ago A SkillSpector: warn 24 tokens
original MIT
Skill Claude CodeCodex needs its repo
External SSL VPN / remote-access appliance attack matrix — Cisco ASA/AnyConnect, Fortinet FortiGate/FortiOS, Citrix NetScaler/ADC, Palo Alto GlobalProtect, Pulse Secure / Ivanti Connect Secure, SonicWall, F5 Big-IP. Covers version fingerprinting, CVE matrix (2018-2026), AAA backend identification, default credentials…
not rated 1.3k
+26 10d ago A 158 tokens
copy · 88% MIT
Skill Claude CodeCodex
Evidence-capture and PoC-redaction discipline for bug-bounty submissions: cookie redaction protocol (which fields to mask, Preview annotation / Burp panel hiding / DevTools workflow), PII black-bar discipline (what to mask in other-user data — names, emails, phones, faces — vs what is safe to leave — usernames, trace…
not rated 1.3k
+26 10d ago A 190 tokens
copy · 86% MIT
Skill Claude CodeCodex
Use when protected HTTP routes return 401 or 403.
not rated 1.3k
+26 10d ago A SkillSpector: warn 20 tokens
original MIT
Skill Claude CodeCodex needs its repo
Hunt API security misconfiguration — mass assignment, JWT attacks, prototype pollution, HTTP verb tampering. Mass assignment: send {isadmin:true, role:admin, verified:true} on profile/account/reset endpoints — server blindly applies. JWT: alg=none, weak HMAC bruteforce, kid path traversal, JWK injection, token…
not rated 1.3k
+26 10d ago C SkillSpector: warn 193 tokens
original MIT
hunt-aspnet
61Skill Claude CodeCodex
Hunt ASP.NET-specific surface — ViewState deserialization (signed-only vs encrypted), machineKey recovery, dual-parser MAC-bypass anti-pattern, request-validator bypass, trace.axd/elmah.axd disclosure, load-balanced ViewState cross-node failures, SafeControl enumeration via reflection, customErrors mode=Off…
not rated 1.3k
+26 10d ago A SkillSpector: warn 98 tokens
original MIT
hunt-ato
62Skill Claude CodeCodex needs its repo
Hunt account takeover taxonomy — 9 distinct paths to ATO, plus chains. Paths: (1) password reset flaws (host-header injection redirects token, predictable/numeric token, Referer leak, no-expiry/reuse), (2) email change without re-auth, (3) OAuth account-link CSRF, (4) MFA bypass (per hunt-mfa-bypass), (5) session…
not rated 1.3k
+26 10d ago B SkillSpector: warn 245 tokens
original MIT
Skill Claude CodeCodex
Hunting skill for auth bypass vulnerabilities. Built from 12 public bug bounty reports across SAML XSW / parser-differential (GitHub Enterprise CVE-2025-25291/25292), SAML signature stripping (Uber, Rocket.Chat, samlify CVE-2025-47949), SAML domain enforcement bypass via control characters (HackerOne 2024)…
not rated 1.3k
+26 10d ago A SkillSpector: warn 172 tokens
original MIT
Skill Claude CodeCodex
Hunt broken function-level authorization via verb drift, route shadowing, and transport gaps.
not rated 1.3k
+26 10d ago A SkillSpector: warn 25 tokens
original MIT
Skill Claude CodeCodex
Hunt Missing/Weak Rate Limiting — login brute force, OTP/2FA brute force (10^6 keyspace), password-reset-token brute, credential stuffing, username/email enumeration via error-string / status-code / timing differences, weak password policy, missing CAPTCHA, IP-based rate-limit bypass via X-Forwarded-For and friends…
not rated 1.3k
+26 10d ago B SkillSpector: warn 127 tokens
original MIT
Skill Claude CodeCodex
Hunting skill for business logic vulnerabilities. Built from 12 public bug bounty reports. Covers coupon-race-stacking (Instacart, Stripe, Reverb), negative-quantity-in-cart price tampering (Upserve, Eternal/Zomato), decimal/fraction price-field overflow (Shipt), client-side checkout amount trust on PayPal redirect…
not rated 1.3k
+26 10d ago D 119 tokens
original MIT
Skill Claude CodeCodex
Hunting skill for cache poison vulnerabilities. Built from 10 public bug bounty reports including X-Forwarded-Host poisoning, X-HTTP-Method-Override / GCS cache, reflected→stored XSS via cache, classic Omer-Gil Web Cache Deception, Cloudflare Cache Deception Armor bypass, session-token cache deception, Akamai…
not rated 1.3k
+26 10d ago B SkillSpector: warn 123 tokens
original MIT
hunt-cicd
68Skill Claude CodeCodex
Hunt CI/CD pipeline vulnerabilities — GitHub Actions workflow injection (pullrequesttarget Pwnrequest + ${{ }}-into-shell), self-hosted runner poisoning, OIDC trust-policy abuse, Jenkins script-console RCE and CVE-2024-23897 file read, GitLab CI runner-token registration, Terraform state file leakage, artifact/log…
not rated 1.3k
+26 10d ago B SkillSpector: warn 118 tokens
original MIT
Skill Claude CodeCodex
Hunt cloud / infrastructure misconfigurations. AWS: public S3 buckets (s3:GetObject anonymous), permissive bucket policies (PutObjectAcl public-write), exposed CloudFront origin, public Lambda function URL, public RDS snapshot, IAM credentials in JS bundles, AWS metadata accessible via SSRF. GCP: public GCS buckets…
not rated 1.3k
+26 10d ago B SkillSpector: warn 197 tokens
original MIT
hunt-cors
70Skill Claude CodeCodex
Hunt CORS Misconfiguration — origin-reflection with credentials, null-origin trust, subdomain-regex bypass (unanchored vs unescaped-dot vs prefix-only), pre-flight (OPTIONS) gating bypass, postMessage origin checks. High only when an attacker-controlled origin can perform a CREDENTIALED cross-origin read of sensitive…
not rated 1.3k
+26 10d ago A SkillSpector: warn 99 tokens
original MIT
hunt-csrf
71Skill Claude CodeCodex
Hunting skill for csrf vulnerabilities. Built from 15 public bug bounty reports including modern variants — SameSite=Lax sibling-subdomain bypass (Argo CD CVE-2024-22424), GraphQL mutations-via-GET (GitLab $3,370), framework-wide CSRF middleware disabled (Stripe Dashboard $5,000), path-traversal CSRF-token bypass…
not rated 1.3k
+26 10d ago D 188 tokens
original MIT
Skill Claude CodeCodex
Hunt Insecure Deserialization — Java gadget chains (ysoserial), PHP object injection (phpggc), Python pickle RCE, .NET BinaryFormatter, Ruby Marshal.load, JNDI/Log4Shell. RCE via deserialization is almost always Critical. Use when target runs Java, PHP serialization, Python pickle, .NET, or Ruby on Rails.
not rated 1.3k
+26 10d ago A SkillSpector: warn 79 tokens
original MIT
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: