Oob — Development skill for Claude Code
Out-of-band orchestrator — confirm BLIND SSRF/XXE/SQLi/RCE/Log4Shell by correlating interactsh callbacks to the payload that fired them.
How to install Oob
Installs to ~/.claude/skills/awarexone-agentic-bug-hunter-oob/SKILL.md
mkdir -p ~/.claude/skills/awarexone-agentic-bug-hunter-oob && curl -fsSL https://raw.githubusercontent.com/Awarexone/Agentic-Bug-Hunter/HEAD/commands/oob.md -o ~/.claude/skills/awarexone-agentic-bug-hunter-oob/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Oob does
description: Out-of-band orchestrator — confirm BLIND SSRF/XXE/SQLi/RCE/Log4Shell by correlating interactsh callbacks to the payload that fired them. Usage: /oob --payloads [--class ssrf,sqli] | /oob --listen | /oob --correlate inter.jsonl --payloads-file p.json
/oob
Confirm **blind** vulnerabilities that have no in-band signal. Wraps ProjectDiscovery's `interactsh-client`: generates payloads embedding a unique OOB hostname per injection point, then correlates inbound DN
Alternatives in Development
- Src Hunter Skill — 实战 SRC / 众测 / Bug bounty 漏洞挖掘 Claude Code skill — 19 个攻击类 playbook、305 个结构化 payload、263 个 WAF/EDR 绕过、2887 份 Ha 602 ★
- Skillforge — The ultimate meta-skill for generating best-in-class Claude Code skills 559 ★
- Engage.Deliver — Execute Phase 3 - Delivery and Payload Deployment 348 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
0x002132 Skills Bugbounty Hunt File Upload
Hunt file upload bugs — RCE via webshell, XSS via SVG/HTML, SSRF via XXE in DOCX, path traversal via filename.
Hunt Ssrf
Active SSRF hunt for an ingested program. Consumes webvuln-surface seeds (ssrf_likely params + URL-accepting i
Domxss
Confirm DOM XSS in a real headless browser — injects canary payloads into params + URL fragment and only repor
Context Cooler
Context Cooler — eliminate token burn with the coolest MCP on the net. Sandboxed exec in 11 languages, FTS5 se
Axguard Inject
Injection and RCE sinks — eval, exec, pickle, shell, child_process. Usage: /axguard-inject [path]
Salesforce Oob Evaluator
A Claude skill that evaluates Salesforce business requirements against Out-of-the-Box (OOB) native features ,
Related Agents
Zp Class Hunter
ZeroProtocol single-class vulnerability hunter. Use to hunt exactly one vulnerability class against one in-sco
Cacador Injecao
Caçador do domínio de injeção na auditoria NIST — SQL, NoSQL, comando de SO, path traversal, SSTI, XSS refleti
Dynamic Verifier
静的解析結果を動的に検証するエージェント。SQLi/XSS/Auth/CSRF/SSRF/File検証対応。