S1N6H

0x002132 Skills Bugbounty Hunt Aspnet — Development skill for Claude Code

Development community

Hunt ASP.NET-specific surface — ViewState deserialization (signed-only vs encrypted), machineKey recovery, dual-parser MAC-bypass anti-pattern, request-validator bypass, trace.axd/elmah.axd disclosure.

How to install 0x002132 Skills Bugbounty Hunt Aspnet

Installs to ~/.claude/skills/s1n6h-bug-bounty-skills-0x002132-skills-bugbounty-hunt-aspnet/SKILL.md

Terminal

mkdir -p ~/.claude/skills/s1n6h-bug-bounty-skills-0x002132-skills-bugbounty-hunt-aspnet && curl -fsSL https://raw.githubusercontent.com/S1N6H/Bug-Bounty-Skills/HEAD/skills/0x002132-skills-bugbounty-hunt-aspnet.md -o ~/.claude/skills/s1n6h-bug-bounty-skills-0x002132-skills-bugbounty-hunt-aspnet/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What 0x002132 Skills Bugbounty Hunt Aspnet does

name: hunt-aspnet description: Hunt ASP.NET-specific surface — ViewState deserialization (signed-only vs encrypted), machineKey recovery, dual-parser MAC-bypass anti-pattern, request-validator bypass, trace.axd/elmah.axd disclosure, load-balanced ViewState cross-node failures, SafeControl enumeration via reflection, customErrors mode=Off stack-trace leaks, classic Webforms .aspx/.asmx/.svc surface. Built for ASP.NET Webforms + WCF + SharePoint farms. sources: github, authorized-engagement re

Alternatives in Development

Bypass 403 — Probe a 403/401 endpoint with the most-paid bypass tricks (header injection, path encoding, method swap, WAF f 4.5k ★
Hermes Claude Auth — Claude Code OAuth bypass for hermes-agent 374 ★
Termly CLI — Mobile companion for Claude Code, Gemini CLI & OpenCode 296 ★