web-hunter-pro

web, API, cloud, and source-code bug hunting workflow. Use for scoped assessments of web apps, APIs, GraphQL, OAuth/OIDC, JWT, SSO, webhooks, cloud-native surfaces, AI-assisted features, and source code: IDOR/BOLA, BFLA, auth, sessions, access control, injection, business logic, SSRF, cache bugs, request smuggling, misconfiguration, secrets, supply chain, and reporting.

web, API, cloud, and source-code bug hunting workflow. Use when assessing web apps, APIs, GraphQL, OAuth/OIDC, JWT, SSO, webhooks, cloud-native surfaces, AI-assisted features, or source code for IDOR/BOLA, BFLA, authentication, session, access-control, injection, business-logic, cache, request-smuggling, SSRF, supply-chain, misconfiguration, information-disclosure, and reporting issues.

Authorized 2026-ready web, API, cloud, AI-feature, and source-code bug hunting workflow for Gemini-style agents. Use for scoped assessment, vulnerability triage, and reporting across IDOR/BOLA, BFLA, auth, sessions, access control, injection, SSRF, GraphQL, OAuth/OIDC/JWT, cache bugs, request smuggling, business logic, misconfiguration, secrets, and supply chain.