메뉴
이 저장소의 skills
SkillsMP는 ankitsingh015/HuntMCP에서 47개의 skill을 수집했습니다. skill을 열어 소스와 세부 정보를 확인하세요.
ankitsingh015/HuntMCP수집된 skill 47개 중 7개를 표시합니다.
XXE/XML technique list -- classic, blind OOB, error-based, parameter entities, billion laughs, XInclude, XSLT, and XXE in SVG/DOCX/XLSX/PPTX/RSS/SOAP formats -- plus the SSRF/file-read/port-scan escalations XXE enables. Converted from master-pentest-prompt.md…
원문 언어: 영어
Conventions for writing HuntMCP's own Claude Code Skills, especially the ongoing conversion of knowledge/master-pentest-prompt.md's [PHASE N] sections into .claude/skills/<topic>/SKILL.md files. Use this before creating or editing any file under…
원문 언어: 영어
Path traversal encodings, the file-upload bypass matrix (extension/MIME/magic-byte checks), and file-format-specific attacks (SVG/DOCX/XLSX XXE, PDF launch actions, polyglot images). Converted from master-pentest-prompt.md Phase 6. Use on any file-upload…
원문 언어: 영어
How to load prior knowledge before testing a target -- public bug-bounty report learning, offensive skill-file references, the Lessons Registry feedback loop, and tech-stack-based keyword lookup into it. Converted from master-pentest-prompt.md Phases…
원문 언어: 영어
Full-spectrum recon technique list (subdomains, JS mining, history, dorks, cloud storage, internet-exposure scanners, DNS) and the 8-category JavaScript intelligence-mining checklist. Converted from master-pentest-prompt.md Phases 1/1.5. Use during…
원문 언어: 영어
HTTP request smuggling and desync technique list, including the 2025-26 "HTTP/1.1 must die" desync-endgame classes (0.CL, CL.0, H2.TE, TE.TE chunk extensions, response queue poisoning, dangling-byte, browser-powered desyncs). Converted from…
원문 언어: 영어
Tool-separation doctrine (what's allowed to touch the live target vs. research-only) and a curl flag cheat sheet for manual PoC/verification work. Converted from master-pentest-prompt.md Phase 0.7. Use whenever an agent needs to hand-craft a curl request…
원문 언어: 영어