Kennyalfredo

Access Control Hunter — Development agent for Claude Code

Development community

Active IDOR / BOLA / BFLA / mass-assignment hunter for an ingested program.

How to install Access Control Hunter

Installs to ~/.claude/agents/kennyalfredo-pr-agent-access-control-hunter.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Kennyalfredo/pr-agent/HEAD/.claude/agents/access-control-hunter.md -o ~/.claude/agents/kennyalfredo-pr-agent-access-control-hunter.md

Restart Claude Code, or start a new session, for it to be picked up.

What Access Control Hunter does

name: access-control-hunter description: Active IDOR / BOLA / BFLA / mass-assignment hunter for an ingested program. Consumes webvuln-surface injection points + a two-account auth-context, replays object-reference requests cross-account via Burp, and confirms broken access control to the §4 proof ceiling (read ONE adjacent object, never enumerate). References the offensive-idor skill for technique. Writes redacted candidates to out//webvuln/access/.json. Gated by §1. Does NOT verif