Download

Skill UI

Browse and discover 15857+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Bug Hunting , found 18 results

Default Newest Most Downloaded

Red Team Recon Toolkit

sickn33/antigravity-awesome-skills

Centralizes proven red team methodologies into an automated reconnaissance and vulnerability discovery workflow that sequences asset discovery, live host validation, fingerprinting, content hunting, and exploit surface analysis for bug bounty and defensive assessments.

Red Team Recon Methodology

red-team-tools-and-methodology

sickn33/antigravity-awesome-skills

Provides red team workflows combining subdomain enumeration, live host discovery, technology fingerprinting, XSS hunting, API fuzzing, and automated recon scripting to support bug bounty hunters and security researchers.

Web Application Security Testing Workflow

web-security-testing

sickn33/antigravity-awesome-skills

This comprehensive workflow guides users through a multi-phase process for assessing web application security. It is designed to systematically test for common vulnerabilities listed in the OWASP Top 10, including SQL injection, XSS, broken authentication, and access control issues. Ideal for professional penetration testing, security auditing, and bug bounty hunting.

YARA-X Rule Crafting

yara-rule-authoring

trailofbits/skills

Guides writing high-quality YARA-X detection rules for malware hunting, covering naming conventions, string selection, performance tuning, migrations from legacy YARA, and reducing false positives when authoring, reviewing, or debugging signatures.

Red Team Recon Methodology

red-team-tools-and-methodology

zebbern/claude-code-guide

Provides red team workflows combining subdomain enumeration, live host discovery, technology fingerprinting, XSS hunting, API fuzzing, and automated recon scripting to support bug bounty hunters and security researchers.

Exploiting Broken Link Hijacking Vulnerabilities

exploiting-broken-link-hijacking

mukul975/Anthropic-Cybersecurity-Skills

This skill provides a comprehensive methodology for discovering and exploiting broken link hijacking vulnerabilities. By spidering a target site and extracting all external scripts, domains, and references, the skill checks the DNS and domain registration status. It is crucial for conducting subdomain takeover testing, supply-chain security reviews of third-party resources, and advanced bug bounty hunting.

CSP Bypass Techniques and Exploitation

performing-content-security-policy-bypass

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide for web security professionals detailing advanced techniques to bypass Content-Security-Policy (CSP) headers. It covers exploiting weaknesses such as unsafe-inline/unsafe-eval, JSONP endpoints, base-uri, and nonce/hash gaps. Used during penetration testing or bug bounty hunting to achieve Cross-Site Scripting (XSS) or data exfiltration even when CSP is implemented.

Security Vulnerability Bounty Hunting

security-bounty-hunter

affaan-m/everything-claude-code

A guide for security researchers focused on finding exploitable, remote-reachable vulnerabilities for bug bounties or responsible disclosure. It emphasizes high-signal flaws such as SSRF, RCE, and SQL injection, while guiding users through the professional triage and PoC creation process for penetration testing.

File Upload Vulnerability Checklist

offensive-file-upload

SnailSploit/Claude-Red

A comprehensive checklist and methodology for penetration testing file upload endpoints. Covers critical vulnerabilities such as MIME type bypass, extension bypass, magic byte manipulation, path traversal, and stored XSS. Essential for web application security assessment and bug bounty hunting, guiding testers through basic testing to advanced exploitation techniques like Null Byte injection and double extensions.

GraphQL Security Vulnerability Assessment

offensive-graphql

SnailSploit/Claude-Red

A comprehensive checklist designed for assessing the security posture of GraphQL endpoints. It covers advanced vulnerabilities such as introspection abuse, IDOR, query depth/complexity DoS, injection attacks (SQLi/NoSQLi), and authorization bypass mechanisms. Essential for professional penetration testing and bug bounty hunting.

Insecure Direct Object Reference Testing

SnailSploit/Claude-Red

This comprehensive checklist guides penetration testers through discovering Insecure Direct Object References (IDOR). It covers techniques like object ID enumeration, horizontal and vertical privilege escalation, and parameter manipulation. Use it for web application pentests and bug bounty hunting to identify broken access control vulnerabilities.

Open Redirect Testing Methodology Guide

offensive-open-redirect

SnailSploit/Claude-Red

This comprehensive checklist guides users through identifying and exploiting open redirect vulnerabilities in web applications. It covers parameter identification, advanced bypass techniques (e.g., URL encoding, CRLF injection), and chaining the vulnerability with other flaws like OAuth or SSRF. Ideal for web application penetration testing and bug bounty hunting.

Language