Bug Bounty (Grade F)针对 Claude AI 的安全测试技能，已通过安全检测。等级 F。完整的漏洞赏金工作流——侦察（子域枚举、资产发现、指纹识别、HackerOne 范围、源码审计），pre-hu

How it works?

The tool follows a 6‑phase, non‑linear workflow: recon → map & rank → hunt → validate → report, with scope enforced in code and a 7‑Question Gate before any finding is submitted. There are two ways to drive the workflow: 1. **Plain English** – Describe what you’re testing, and the relevant skill loads are automatically applied. 2. **/hunt scaffold + cbh CLI** – Provides an engagement‑folder structure, state management, and orchestration. Documentation includes a usage guide, a worked example, a 6‑phase architecture diagram, and a skill‑to‑phase mapping, plus the cbh command‑line interface.

Asked by Linda Petersen · Nov 16, 2025

什么东西在里面?

包裹包含82个技能，根据主题自动加载，无需显式调用。覆盖范围包括： - Web应用程序狩猎（13个技能：XSS、SQLi、SSRF、IDOR、LFI、SSTI、XXE、CSRF、CORS、open-redirect等） - 认证与身份（7个技能：auth-bypass、session、OAuth、SAML、MFA-bypass、ATO） - API与基础设施（15个技能：GraphQL、gRPC、WebSocket、API-misconfig、host-header、RCE） - 高级并发（6个技能：race-condition、HTTP smuggling、序列化、缓存中毒） - Framework特定（4个技能：Next.js、Node.js、Laravel、Spring Boot） - 企业身份与云（3个技能：M365/Entra、Okta、云IAM-深） - 基础设施与-appliance（4个技能：VMware vCenter、企业VPN、SharePoint、ASP.NET/NTLM） - 红队技巧（4个技能：红队心态、 APK管道、供应链recon、mid-engagement IR） - 探索与OSINT（4个技能：web2-recon、offensive-osint、subdomain） - 工作流程、报告与专业（11个技能：方法论、排查验证、证据卫生、VRT-aware报告） 在docs/skills.md中可以查找完全可搜索的目录。该包还带了15个斜线命令（例如，/hunt、/recon、/report）和一个确定性的参与引擎，根据目标的攻击面映射每个发现到适当的技能

Asked by Lucas Petit · Nov 12, 2025

What is this?

claude-bughunter is a drop-in skill bundle for the Claude Code skills system. Install once and Claude Code stops being a chatbot and starts behaving like a senior bug‑hunting researcher or red‑team operator: it knows the techniques, the chain templates, the VRT mappings, the platform CVE chains, and the hygiene — and it stays in scope. Four layers stack: Think — bb‑methodology + redteam‑mindset: the 5‑phase non‑linear workflow, critical‑thinking framework, and red‑team operator discipline. Hunt webapps — 48 hunt‑skills curated from 681 disclosed HackerOne reports: per‑class detection patterns, payloads, bypass tables, and chain templates. Hit the perimeter — enterprise platform chains (M365/Entra, Okta, vCenter, SSL‑VPN appliances, SharePoint, cloud IAM): current 2024–2026 CVE chains + post‑credential escalation. Ship it — triage‑validation + reporting + evidence‑hygiene: the 7‑Question Gate, VRT‑aware severity, OOS rebuttals, PII redaction, and red‑team deliverables. All triggered automatically by topic — describe what you're testing in plain English and the relevant skill loads. No invocation by name.

Asked by Mohammed Al-Amin · Oct 29, 2025