Claude Skills Online Marketplace

Provide systematic methodologies for identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities in web applications.

Hunt JWT cryptographic failures

Hunt Kubernetes & Docker

Hunt Laravel specific vulnerabilities

Hunt LDAP Injection and XPath Injection

Hunt Local File Inclusion (LFI), Remote File Inclusion (RFI), and Path Traversal

Hunt LLM/AI feature bugs

Hunt MFA / 2FA bypass

Hunting skill for misc vulnerabilities. Reference for authorized role, token and workflow-boundary reviews. Historical source count is not independently verified.

Hunt Next.js specific vulnerabilities

Hunt Node.js specific vulnerabilities

Hunt NoSQL Injection

Hunt NTLM/Negotiate information disclosure on internet-reachable IIS/SharePoint/Exchange.

Hunting skill for oauth vulnerabilities. Built from 19 public bug bounty reports. Use when hunting oauth on any target.

Hunt Open Redirect

Hunting skill for race condition vulnerabilities.

Hunt vector-store / embedding-layer weaknesses in RAG pipelines (OWASP LLM08 Vector and Embedding Weaknesses)

Hunting skill for rce vulnerabilities. Built from 67 public bug bounty reports. Use when hunting rce on any target.

Hunt SAML / SSO attacks.

Hunt Session Management vulnerabilities