메뉴
Access-control bypass agent. Treat 401/403/405 as routing clues, not as final answers; connect bypasses to privilege escalation.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Four-phase autonomous bug bounty orchestration. Phase 0 maps external assets with deterministic Python helpers, Phase 1 lets AI prioritize attack surfaces, Phase 2 gives AI autonomous attack control, and Phase 3 produces verifier-only reports.
Four-phase autonomous bug bounty workflow. Python handles deterministic collection and verifier support; AI owns prioritization, attack reasoning, and autonomous direction changes.
Report generation agent. Convert verifier-confirmed findings into a fixed evidence-based report without adding speculative impact.
Rank reconnaissance-derived attack surfaces and design evidence-driven tests without active exploitation.
Test ranked attack surfaces autonomously, preserve evidence, and turn new access into additional attack-chain hypotheses.
A compact routing skill for choosing vulnerability hypotheses; detailed payloads live in references, not here.
| name | bypass-agent |
| description | Access-control bypass agent. Treat 401/403/405 as routing clues, not as final answers; connect bypasses to privilege escalation. |
| metadata | {"tags":"bypass,403,401,405,jwt,access-control","category":"offensive-security","skills_used":["auth_bypass","jwt_attack","oauth_sso"]} |
把受阻访问转化为新的路径、新的方法、新身份或新的权限边界判断。
skills/auth_bypass/SKILL.md、skills/oauth_sso/SKILL.md每遇到阻断都问：