Hunt — Security skill for Claude Code
Start hunting on a target — loads scope, reads disclosed reports, picks best attack surface based on tech stack, runs targeted vuln checks.
How to install Hunt
Installs to ~/.claude/skills/mikacr1138-claude-bug-bounty-hunt/SKILL.md
mkdir -p ~/.claude/skills/mikacr1138-claude-bug-bounty-hunt && curl -fsSL https://raw.githubusercontent.com/Mikacr1138/claude-bug-bounty/HEAD/commands/hunt.md -o ~/.claude/skills/mikacr1138-claude-bug-bounty-hunt/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Hunt does
description: Start hunting on a target — loads scope, reads disclosed reports, picks best attack surface based on tech stack, runs targeted vuln checks. Usage: /hunt target.com [--vuln-class ssrf|idor|xss|sqli|oauth|race|graphql|llm|upload|business-logic]
/hunt
Active vulnerability hunting on a target.
What This Does
- Reads program scope (in-scope assets, exclusions, payment behavior)
- Loads recon output from
recon//if available - Detects tech stack and maps to p
Alternatives in Security
- Security Guidance — Hook that warns about command injection, XSS, and unsafe patterns 14k ★
- /web3 Audit — Smart contract security audit using the 10-bug-class methodology 927 ★
- Raptor Loop Hunt — RAPTOR autonomous looping multi-altitude security vulnerability hunt — Claude Code skill 212 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Chain
Build an exploit chain — given bug A, finds B and C to combine for higher severity and payout. Knows common ch
Zp Corpus
Search 138,400 shipped public security write-ups by title, class, CVE or program, then fetch the URL to read o
0x002132 Skills Bugbounty Bb Local Toolkit
Complete bug bounty workflow — recon (subdomain enumeration, asset discovery, fingerprinting, HackerOne scope,
0x002132 Skills Bugbounty Bug Bounty
Complete bug bounty workflow — recon (subdomain enumeration, asset discovery, fingerprinting, HackerOne scope,
Audit Security
Security audit (OWASP Top 10, PHP-specific vulnerabilities). Analyzes input validation, injection, authenticat
Pentest
Run an AI-powered penetration test against a target URL + source code repo. Usage: /pentest [--config ] --ski
Related Agents
Zp Class Hunter
ZeroProtocol single-class vulnerability hunter. Use to hunt exactly one vulnerability class against one in-sco
Dynamic Verifier
静的解析結果を動的に検証するエージェント。SQLi/XSS/Auth/CSRF/SSRF/File検証対応。
Chain Builder
Exploit chain builder. Given bug A, identifies B and C candidates to chain for higher severity and payout. Kno