Zp Class Hunter — Development agent for Claude Code
ZeroProtocol single-class vulnerability hunter.
How to install Zp Class Hunter
Installs to ~/.claude/agents/maramharsha-zeroprotocol-zp-class-hunter.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/MaramHarsha/ZeroProtocol/HEAD/.claude/agents/zp-class-hunter.md -o ~/.claude/agents/maramharsha-zeroprotocol-zp-class-hunter.md Restart Claude Code, or start a new session, for it to be picked up.
What Zp Class Hunter does
name: zp-class-hunter description: ZeroProtocol single-class vulnerability hunter. Use to hunt exactly one vulnerability class against one in-scope host in an isolated context - xss, sqli, idor, authz, ssrf, rce-ssti, xxe-lfi, upload, jwt-oauth, graphql, api, cors, cache-poison, smuggling, race, takeover, cloud, mobile, web3. Loads that class's zp-* skill, meets its depth floor, writes a coverage record, and returns either a reproduced finding or an evidenced not-applicable. Requires a confi
Alternatives in Development
- Recon Ranker — Attack surface ranking agent 4.5k ★
- Idor Hunter — IDOR / BOLA specialist (H1 #55, OWASP API1:2023) 812 ★
- Conversion Funnel Analyst — Read-only analyst that pulls funnel metrics (signups → first upload → first download → paid) week-over-week an 324 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Dynamic Verifier
静的解析結果を動的に検証するエージェント。SQLi/XSS/Auth/CSRF/SSRF/File検証対応。
Chain Builder
Exploit chain builder. Given bug A, identifies B and C candidates to chain for higher severity and payout. Kno
Zp Surface Probe
ZeroProtocol active surface probe for ONE host. Use to find out what is actually alive on a single in-scope ho
Ssrf Hunter
Active SSRF hunter for an ingested program. Consumes webvuln-surface injection points (ssrf_likely params + UR
XSS Hunter
Active XSS hunter for an ingested program. Consumes webvuln-surface injection points (reflected params + DOM s
Invariant Catcher
Hunts for vulnerability patterns in smart contract codebases using Horus (DB/). Language-agnostic — works with
Related Skills
Oob
Out-of-band orchestrator — confirm BLIND SSRF/XXE/SQLi/RCE/Log4Shell by correlating interactsh callbacks to th
Hunt
Start hunting on a target — loads scope, reads disclosed reports, picks best attack surface based on tech stac
Vibesec
Helps write secure code by preventing common vulnerabilities including IDOR, XSS, SQL injection, SSRF, and wea