S1N6H

0x002132 Skills Bugbounty Hunt Ato — Development skill for Claude Code

Development community

Hunt account takeover taxonomy — 9 distinct paths to ATO, plus chains.

How to install 0x002132 Skills Bugbounty Hunt Ato

Installs to ~/.claude/skills/s1n6h-bug-bounty-skills-0x002132-skills-bugbounty-hunt-ato/SKILL.md

Terminal

mkdir -p ~/.claude/skills/s1n6h-bug-bounty-skills-0x002132-skills-bugbounty-hunt-ato && curl -fsSL https://raw.githubusercontent.com/S1N6H/Bug-Bounty-Skills/HEAD/skills/0x002132-skills-bugbounty-hunt-ato.md -o ~/.claude/skills/s1n6h-bug-bounty-skills-0x002132-skills-bugbounty-hunt-ato/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What 0x002132 Skills Bugbounty Hunt Ato does

name: hunt-ato description: "Hunt account takeover taxonomy — 9 distinct paths to ATO, plus chains. Paths: (1) password reset flaws (host header injection redirects token to attacker, predictable token, token leaked in referer, race condition on reset link), (2) email change without re-auth, (3) OAuth account-link CSRF, (4) MFA bypass (per hunt-mfa-bypass), (5) session-fixation, (6) JWT manipulation, (7) password change without step-up (chain with password oracle), (8) social-recovery questi

Alternatives in Development

Breach Check — HIBP k-anonymity check on a password wordlist 4.5k ★
License — Check that every Python source file carries the required SPDX Apache-2.0 license header 1.1k ★
Claudecode — Open Source ClaudeCode Leaked 1k ★