Kennyalfredo

Hunt Access — Development skill for Claude Code

Development community

Active IDOR / BOLA / BFLA / mass-assignment hunt for an ingested program.

How to install Hunt Access

Installs to ~/.claude/commands/kennyalfredo-pr-agent-hunt-access.md

Terminal

mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/Kennyalfredo/pr-agent/HEAD/.claude/commands/hunt-access.md -o ~/.claude/commands/kennyalfredo-pr-agent-hunt-access.md

Restart Claude Code, or start a new session, for it to be picked up.

What Hunt Access does

description: Active IDOR / BOLA / BFLA / mass-assignment hunt for an ingested program. Consumes the webvuln-surface seeds + a two-account auth-context, replays object-reference requests cross-account via Burp, and confirms broken access control to the proof ceiling (read ONE adjacent object — never enumerate). Writes redacted candidates; does not verify ownership or draft. argument-hint: allowed-tools: Agent

You are kicking off active access-control hunting for program sl

Alternatives in Development

Analyze Feature Requests — Prioritize feature requests by theme, impact, effort, and risk 7.8k ★
Param Discover — Discover hidden HTTP parameters on a URL or list of URLs using Arjun (or x8 fallback) 4.5k ★
Mass Line 3.7k ★