Download

Skill UI

Browse and discover 18950+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Hunting , found 180 results

Default Newest Most Downloaded

MFA and 2FA Bypass Testing

hunt-mfa-bypass

sickn33/agentic-awesome-skills

Offensive security skill for hunting MFA and 2FA bypass flaws: workflow skipping, OTP replay, response tampering, prefix-oracle guessing, and race conditions on verification endpoints. Requires written authorization.

Misc Vulnerability Hunting

sickn33/agentic-awesome-skills

A comprehensive skill for identifying miscellaneous security vulnerabilities like access control failures, information disclosure, and misconfigurations. Based on 225 public bug bounty reports, it helps hunters target SaaS platforms, identity flows, and internal APIs to find high-value issues.

Node.js Vulnerability Hunting

sickn33/agentic-awesome-skills

This skill helps identify and exploit specific vulnerabilities in Node.js applications. It covers techniques like prototype pollution, Express trust proxy abuse, and template engine SSTI. Users must have explicit authorization before testing. It includes fingerprinting, detection, and exploitation chains for critical security issues.

NoSQL Injection Hunting

sickn33/agentic-awesome-skills

Guides authorized security testers through identifying and exploiting NoSQL injection vulnerabilities in MongoDB, Redis, and Elasticsearch, including auth bypass, blind injection, data extraction, and automation with nosqlmap.

OAuth Vulnerability Hunting

sickn33/agentic-awesome-skills

Hunting methodology for OAuth vulnerabilities from 22 bug bounty reports, covering redirect_uri bypass, CSRF state, nonce replay, referrer leakage, and mobile deep link attacks for authorized security assessments.

Open Redirect Vulnerability Hunting

hunt-open-redirect

sickn33/agentic-awesome-skills

Methodology for hunting open redirect flaws in web apps: parameter discovery, bypass payloads, DOM-based sinks, OAuth auth-code theft chains and SSRF escalation. Docs-only, for authorized bug bounty and pentest use.

Race Condition Vulnerability Hunting

hunt-race-condition

sickn33/agentic-awesome-skills

A specialized security skill for identifying and exploiting race condition vulnerabilities in web applications. Focuses on synchronized request attacks, double-spending, and bypassing access controls. Requires explicit authorization and defensive guidance protocols before execution.

Remote Code Execution Hunting

sickn33/agentic-awesome-skills

A skill for identifying Remote Code Execution (RCE) vulnerabilities across web applications and infrastructure. Based on bug bounty reports, it guides users to test command injection, template injection, and configuration flaws on admin consoles, APIs, and supply chain targets. Requires explicit authorization for ethical testing.

Session Management Vulnerability Hunting

sickn33/agentic-awesome-skills

This skill identifies session management vulnerabilities like session fixation, failure to invalidate sessions after logout or password changes, and weak session ID generation. It is designed for authorized security assessments to prevent Account Takeover (ATO) and unauthorized access. Users must obtain explicit written permission before testing targets.

Hunting SharePoint On-Prem Farms

hunt-sharepoint

sickn33/agentic-awesome-skills

Assess on-premises Microsoft SharePoint Server farms (2013/2016/2019/Subscription Edition) during authorized red-team or bug-bounty work: fingerprint versions via response headers, map exposed endpoints such as ToolPane.aspx and Authentication.asmx, and prioritize permanently unpatched legacy CVEs.

Source Code Leak Hunting

hunt-source-leak

sickn33/agentic-awesome-skills

Authorized security testing skill for hunting exposed source maps, .env files, .git directories, and Swagger/OpenAPI specs to uncover leaked credentials, internal endpoints, and auth logic gaps in web targets.

SQL Injection Hunting Skill

sickn33/agentic-awesome-skills

Offensive security skill for hunting SQL injection flaws under written authorization. Covers injection confirmation, UNION column enumeration, reflected-column discovery, and data dumping, plus high-value targets like search, filter, and report endpoints.

Prev 1 2 3...11 12 131415 Next

Language