Hunt laravel
Hunt Laravel specific vulnerabilities
Skills for your AI
Security skills for your AI
Hunt ldap
Hunt LDAP Injection and XPath Injection
Hunt lfi
Hunt Local File Inclusion (LFI), Remote File Inclusion (RFI), and Path Traversal
Hunt llm ai
This skill is for educational purposes or authorized security assessments only.
Hunt mfa bypass
This skill is for educational purposes or authorized security assessments only.
Hunt misc
Hunting skill for misc vulnerabilities. Built from 225 public bug bounty reports. Use when hunting misc on any target.
Hunt nextjs
Hunt Next.js specific vulnerabilities
Hunt nodejs
Hunt Node.js specific vulnerabilities
Hunt nosqli
This skill is for educational purposes or authorized security assessments only.
Hunt ntlm info
Hunt NTLM/Negotiate information disclosure on internet-reachable IIS/SharePoint/Exchange.
Hunt oauth
Hunting skill for oauth vulnerabilities. Built from 19 public bug bounty reports. Use when hunting oauth on any target.
Hunt open redirect
This skill is for educational purposes or authorized security assessments only.
Hunt race condition
Hunting skill for race condition vulnerabilities.
Hunt rag vector
Hunt vector-store / embedding-layer weaknesses in RAG pipelines (OWASP LLM08 Vector and Embedding Weaknesses)
Hunt rce
Hunting skill for rce vulnerabilities. Built from 67 public bug bounty reports. Use when hunting rce on any target.
Hunt saml
This skill is for educational purposes or authorized security assessments only.
Hunt session
Hunt Session Management vulnerabilities
Hunt shadow api
Hunt shadow / zombie / undocumented API surface (OWASP API9 Improper Inventory Management)
Hunt sharepoint
Hunt Microsoft SharePoint Server (2013/2016/2019/Subscription Edition) on-prem farms
Hunt source leak
Hunt source code and build artifact leakage
Hunt spa api
Discover a single-page-app's hidden backend API from its public JS bundle, then test that API for broken access control / missing authentication.
Hunt springboot
Hunt Spring Boot specific vulnerabilities
Hunt sqli
Hunting skill for sqli vulnerabilities.
Hunt ssrf
Hunting skill for ssrf vulnerabilities.