Hunt shadow / zombie / undocumented API surface (OWASP API9 Improper Inventory Management)
Claude Skills Online Marketplace
Security
20 of 834
Hunt Microsoft SharePoint Server (2013/2016/2019/Subscription Edition) on-prem farms
Hunt source code and build artifact leakage
Discover a single-page-app's hidden backend API from its public JS bundle, then test that API for broken access control / missing authentication.
Hunt Spring Boot specific vulnerabilities
Hunting skill for sqli vulnerabilities.
Hunting skill for ssrf vulnerabilities.
Hunt server-side template injection (SSTI) across Jinja2 (Flask/Django), Twig (Symfony), Freemarker (Java), ERB (Rails), Spring, Velocity, Mako, Thymeleaf, Smarty.
Hunting skill for subdomain takeover vulnerabilities.
Hunt TLS/SSL and DNS misconfigurations
Hunt WebSocket vulnerabilities
Hunting skill for xss vulnerabilities.
Hunting skill for xxe vulnerabilities.
Hunt API security misconfiguration
Hunt ASP.NET-specific surface
Hunt account takeover taxonomy
Hunting skill for auth bypass vulnerabilities.
Hunt Missing/Weak Rate Limiting
Hunting skill for business logic vulnerabilities.
Hunting skill for cache poison vulnerabilities.