S1N6H

0x002132 Skills Bugbounty Hunt Auth Bypass — Development skill for Claude Code

Development community

Hunting skill for auth bypass vulnerabilities.

How to install 0x002132 Skills Bugbounty Hunt Auth Bypass

Installs to ~/.claude/skills/s1n6h-bug-bounty-skills-0x002132-skills-bugbounty-hunt-auth-bypass/SKILL.md

Terminal
mkdir -p ~/.claude/skills/s1n6h-bug-bounty-skills-0x002132-skills-bugbounty-hunt-auth-bypass && curl -fsSL https://raw.githubusercontent.com/S1N6H/Bug-Bounty-Skills/HEAD/skills/0x002132-skills-bugbounty-hunt-auth-bypass.md -o ~/.claude/skills/s1n6h-bug-bounty-skills-0x002132-skills-bugbounty-hunt-auth-bypass/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What 0x002132 Skills Bugbounty Hunt Auth Bypass does


name: hunt-auth-bypass description: Hunting skill for auth bypass vulnerabilities. Built from 4 public bug bounty reports. Use when hunting auth bypass on any target. sources: github report_count: 4

Crown Jewel Targets

Auth bypass is consistently one of the highest-paying vulnerability classes in bug bounty because it directly violates the most fundamental security control. High-value targets include:

  • SSO/SAML implementations at enterprise SaaS companies (Slack, Okta, OneLogi

Alternatives in Development

  • Bypass 403 — Probe a 403/401 endpoint with the most-paid bypass tricks (header injection, path encoding, method swap, WAF f 4.5k ★
  • /hunt — Active vulnerability hunting on a target 1.8k ★
  • Src Hunter Skill — 实战 SRC / 众测 / Bug bounty 漏洞挖掘 Claude Code skill — 19 个攻击类 playbook、305 个结构化 payload、263 个 WAF/EDR 绕过、2887 份 Ha 602 ★

Full documentation available on GitHub

View Source Repository