Endpoint Hunter — Development agent for Claude Code
Hunts publicly-exposed sensitive endpoints and files for a previously-ingested program (/.env, /config., /.git/HEAD, /swagger, /actuator/env, etc.).
How to install Endpoint Hunter
Installs to ~/.claude/agents/kennyalfredo-pr-agent-endpoint-hunter.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Kennyalfredo/pr-agent/HEAD/.claude/agents/endpoint-hunter.md -o ~/.claude/agents/kennyalfredo-pr-agent-endpoint-hunter.md Restart Claude Code, or start a new session, for it to be picked up.
What Endpoint Hunter does
name: endpoint-hunter description: Hunts publicly-exposed sensitive endpoints and files for a previously-ingested program (`/.env*`, `/config.*`, `/.git/HEAD`, `/swagger*`, `/actuator/env`, etc.). Passive discovery via gau + waymore (Wayback + CommonCrawl + OTX + URLScan, merged), then OPTIONAL active live-probe via httpx and nuclei exposure templates — both gated by `automated_tools_allowed=true` AND `explicit_scanner_ban != true`. Writes redacted candidate JSON to out//endpoints/
Alternatives in Development
- Agent 03 Endpoint Miner — Agent: EndpointMiner(接口智能分析Agent) 236 ★
- Subdomain Enumeration — subfinder -d {domain} -silent sort -u subs.txt amass enum -passive -d {domain} subs.txt sort -u subs.txt -o su 213 ★
- Env Provisioner — Confirmation phase V3 environment provisioning agent that starts the target application using strategies disco 125 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Secret Hunter
Hunts publicly-leaked credentials (API tokens, cloud keys, DB strings) that belong to a previously-ingested pr
Program Scout
Scouts publicly-listed HackerOne, Bugcrowd, or Intigriti bug-bounty programs likely to yield reportable findin
Recon Agent
Subdomain enumeration and live host discovery specialist. Runs Chaos API (ProjectDiscovery), subfinder, assetf
Kotlin Debugger
Use this agent for Kotlin debugging - stack traces, Micronaut bean injection, Exposed ORM queries, payment sta
Swe Dev Euclidean Argument Constructor
Constructs and audits software-engineering arguments as inspectable proofs: terms defined, assumptions exposed
Architecture Gap Scout
Runs find-architecture-gaps over a given scope, dedupes against previously reported initiatives, and files new
Related Skills
Hunt Endpoints
Hunt publicly-exposed sensitive endpoints and files for an ingested program (/.env, /config., /.git/HEAD, /swa
API Documentation
Documents API endpoints with OpenAPI/Swagger format
Nbomber Skills
Claude skills for NBomber. nb-load-test-creator turns an OpenAPI/Swagger spec into a runnable C# NBomber load