القائمة
Access-control bypass agent. Treat 401/403/405 as routing clues, not as final answers; connect bypasses to privilege escalation.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Four-phase autonomous bug bounty orchestration. Phase 0 maps external assets with deterministic Python helpers, Phase 1 lets AI prioritize attack surfaces, Phase 2 gives AI autonomous attack control, and Phase 3 produces verifier-only reports.
Four-phase autonomous bug bounty workflow. Python handles deterministic collection and verifier support; AI owns prioritization, attack reasoning, and autonomous direction changes.
Report generation agent. Convert verifier-confirmed findings into a fixed evidence-based report without adding speculative impact.
Rank reconnaissance-derived attack surfaces and design evidence-driven tests without active exploitation.
Test ranked attack surfaces autonomously, preserve evidence, and turn new access into additional attack-chain hypotheses.
A compact routing skill for choosing vulnerability hypotheses; detailed payloads live in references, not here.
| name | bypass-agent |
| description | Access-control bypass agent. Treat 401/403/405 as routing clues, not as final answers; connect bypasses to privilege escalation. |
| metadata | {"tags":"bypass,403,401,405,jwt,access-control","category":"offensive-security","skills_used":["auth_bypass","jwt_attack","oauth_sso"]} |
把受阻访问转化为新的路径、新的方法、新身份或新的权限边界判断。
skills/auth_bypass/SKILL.md、skills/oauth_sso/SKILL.md每遇到阻断都问：