bughunterpro

星标3

分支1

更新时间2026年5月8日 13:03

Authorized 2026-ready web, API, cloud, AI-feature, and source-code bug hunting workflow for Gemini-style agents. Use for scoped assessment, vulnerability triage, and reporting across IDOR/BOLA, BFLA, auth, sessions, access control, injection, SSRF, GraphQL, OAuth/OIDC/JWT, cache bugs, request smuggling, business logic, misconfiguration, secrets, and supply chain.

安装

用 Codex 或 Claude 帮你安装复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。

来源

sector-b79

sector-b79/web-hunter-pro

打开 GitHub 仓库查看创作者相关仓库

下载

相关职业SOC

基于 SOC 职业分类

信息安全分析师计算机与数学类职业·SOC 15-1212

文件资源管理器

2 个文件

SKILL.md

readonly

name	bughunterpro
description	Authorized 2026-ready web, API, cloud, AI-feature, and source-code bug hunting workflow for Gemini-style agents. Use for scoped assessment, vulnerability triage, and reporting across IDOR/BOLA, BFLA, auth, sessions, access control, injection, SSRF, GraphQL, OAuth/OIDC/JWT, cache bugs, request smuggling, business logic, misconfiguration, secrets, and supply chain.

Load GEMINI.md in this folder and follow the BugHunterPro method.

同仓库更多 Skills

同仓库

bughunterpro

sector-b79/web-hunter-pro

web, API, cloud, and source-code bug hunting workflow. Use for scoped assessments of web apps, APIs, GraphQL, OAuth/OIDC, JWT, SSO, webhooks, cloud-native surfaces, AI-assisted features, and source code: IDOR/BOLA, BFLA, auth, sessions, access control, injection, business logic, SSRF, cache bugs, request smuggling, misconfiguration, secrets, supply chain, and reporting.

2026-05-083

bughunterpro

sector-b79/web-hunter-pro

web, API, cloud, and source-code bug hunting workflow. Use when assessing web apps, APIs, GraphQL, OAuth/OIDC, JWT, SSO, webhooks, cloud-native surfaces, AI-assisted features, or source code for IDOR/BOLA, BFLA, authentication, session, access-control, injection, business-logic, cache, request-smuggling, SSRF, supply-chain, misconfiguration, information-disclosure, and reporting issues.

2026-05-083