jamestexas

Enumeration Oracle Hunter — Development agent for Claude Code

Development community

Use this agent to find side-channel and response-shape oracles that let an attacker enumerate names, existence, or relationships in a multi-tenant substrate.

How to install Enumeration Oracle Hunter

Installs to ~/.claude/agents/jamestexas-agents-enumeration-oracle-hunter.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/jamestexas/agents/HEAD/agents/enumeration-oracle-hunter.md -o ~/.claude/agents/jamestexas-agents-enumeration-oracle-hunter.md

Restart Claude Code, or start a new session, for it to be picked up.

What Enumeration Oracle Hunter does


name: enumeration-oracle-hunter description: "Use this agent to find side-channel and response-shape oracles that let an attacker enumerate names, existence, or relationships in a multi-tenant substrate. Sometimes referred to as an 'oracle-friend'. Examples: Context: User's vault DO returns 403 for 'exists but not yours' and 404 for 'no such credential'. user: 'Does this distinguishability give an attacker anything?' assistant: 'I'll use the enumeration-oracle-hunter to map the orac

Alternatives in Development

  • Idor Hunter — IDOR / BOLA specialist (H1 #55, OWASP API1:2023) 812 ★
  • Compass Planner — Use this agent when the user needs a structured work plan from a vague idea, when they say 'plan this' or 'let 523 ★
  • SMB Enumeration — crackmapexec smb {target} -u {user} -p {pass} --shares crackmapexec smb {target} -u {user} -p {pass} --users c 213 ★

Full documentation available on GitHub

View Source Repository