Enumeration Oracle Hunter — Development agent for Claude Code
Use this agent to find side-channel and response-shape oracles that let an attacker enumerate names, existence, or relationships in a multi-tenant substrate.
How to install Enumeration Oracle Hunter
Installs to ~/.claude/agents/jamestexas-agents-enumeration-oracle-hunter.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/jamestexas/agents/HEAD/agents/enumeration-oracle-hunter.md -o ~/.claude/agents/jamestexas-agents-enumeration-oracle-hunter.md Restart Claude Code, or start a new session, for it to be picked up.
What Enumeration Oracle Hunter does
name: enumeration-oracle-hunter description: "Use this agent to find side-channel and response-shape oracles that let an attacker enumerate names, existence, or relationships in a multi-tenant substrate. Sometimes referred to as an 'oracle-friend'. Examples: Context: User's vault DO returns 403 for 'exists but not yours' and 404 for 'no such credential'. user: 'Does this distinguishability give an attacker anything?' assistant: 'I'll use the enumeration-oracle-hunter to map the orac
Alternatives in Development
- Idor Hunter — IDOR / BOLA specialist (H1 #55, OWASP API1:2023) 812 ★
- Compass Planner — Use this agent when the user needs a structured work plan from a vague idea, when they say 'plan this' or 'let 523 ★
- SMB Enumeration — crackmapexec smb {target} -u {user} -p {pass} --shares crackmapexec smb {target} -u {user} -p {pass} --users c 213 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Realestate Property Manager
Manages rental properties on behalf of owner-investor clients. Handles tenant screening, lease execution, rent
Adversarial Synthesis Lead
Use this agent to integrate findings from the six adversarial reviewers (dos-resilience-auditor, enumeration-o
Economic Attack Simulator
Answers the question poc-writing cannot — is the attack profitable, and by how much? Builds an attacker profit
Paf Reviewer
Runs one phone-a-friend relay or review command in the background and reports back a receipt plus the findings
Crypto Solver
Use PROACTIVELY for cryptography challenges. Triggers on RSA, AES, ECC, Diffie-Hellman, hashes, PRNGs, LCG, LF
Infra Substrate
Compute and SSH topology specialist. VM/container lifecycle, hypervisor health, ProxyJump topology, host-level
Related Skills
Devil Mode
Parallel adversarial sweep — fires prompt-injection-hunter + supply-chain-auditor + secret-hunter + backdoor-h
Audit Hook Wiring
Validate ~/.claude/settings.json hooks block — event names, file existence, executability, matcher syntax; --f
Babel Dtd
enumerate a finite design space completely, mark the absurd cells, and find the catalog that names the one tha