0x002132 Skills Bugbounty Hunt Auth Bypass — Development skill for Claude Code
Hunting skill for auth bypass vulnerabilities.
How to install 0x002132 Skills Bugbounty Hunt Auth Bypass
Installs to ~/.claude/skills/s1n6h-bug-bounty-skills-0x002132-skills-bugbounty-hunt-auth-bypass/SKILL.md
mkdir -p ~/.claude/skills/s1n6h-bug-bounty-skills-0x002132-skills-bugbounty-hunt-auth-bypass && curl -fsSL https://raw.githubusercontent.com/S1N6H/Bug-Bounty-Skills/HEAD/skills/0x002132-skills-bugbounty-hunt-auth-bypass.md -o ~/.claude/skills/s1n6h-bug-bounty-skills-0x002132-skills-bugbounty-hunt-auth-bypass/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What 0x002132 Skills Bugbounty Hunt Auth Bypass does
name: hunt-auth-bypass description: Hunting skill for auth bypass vulnerabilities. Built from 4 public bug bounty reports. Use when hunting auth bypass on any target. sources: github report_count: 4
Crown Jewel Targets
Auth bypass is consistently one of the highest-paying vulnerability classes in bug bounty because it directly violates the most fundamental security control. High-value targets include:
- SSO/SAML implementations at enterprise SaaS companies (Slack, Okta, OneLogi
Alternatives in Development
- Bypass 403 — Probe a 403/401 endpoint with the most-paid bypass tricks (header injection, path encoding, method swap, WAF f 4.5k ★
- /hunt — Active vulnerability hunting on a target 1.8k ★
- Src Hunter Skill — 实战 SRC / 众测 / Bug bounty 漏洞挖掘 Claude Code skill — 19 个攻击类 playbook、305 个结构化 payload、263 个 WAF/EDR 绕过、2887 份 Ha 602 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
0x002132 Skills Bugbounty Hunt Business Logic
Hunting skill for business logic vulnerabilities. Built from 7 public bug bounty reports. Use when hunting bus
0x002132 Skills Bugbounty Hunt Cache Poison
Hunting skill for cache poison vulnerabilities. Built from 4 public bug bounty reports. Use when hunting cache
Claude Bug Bounty — Plugin Guide
This repo is a Claude Code plugin for professional bug bounty hunting across HackerOne, Bugcrowd, Intigriti, a
Hermes Claude Auth
Claude Code OAuth bypass for hermes-agent
Desktop Electron
Desktop application hunting — Electron / Tauri / WebView2. Static binary inspection + IPC fuzzing + proxied tr
Scope
Check if a target asset is in scope for the program before hunting or submitting. Reads program scope page, ch
Related Agents
Report Writer
Bug bounty report writer. Generates professional H1/Bugcrowd/Intigriti/Immunefi reports. Impact-first writing,
Auth Payment Agent
Deep-dive OAuth/OIDC, WebAuthn/FIDO2/passkeys, Apple/Google/Samsung Pay, IAP receipt validation, 3DS 2.x bypas
Chain Builder
Exploit chain builder. Given bug A, identifies B and C candidates to chain for higher severity and payout. Kno