S1N6H

0x002132 Skills Bugbounty Hunt File Upload — Development skill for Claude Code

Development community

Hunt file upload bugs — RCE via webshell, XSS via SVG/HTML, SSRF via XXE in DOCX, path traversal via filename.

How to install 0x002132 Skills Bugbounty Hunt File Upload

Installs to ~/.claude/skills/s1n6h-bug-bounty-skills-0x002132-skills-bugbounty-hunt-file-upload/SKILL.md

Terminal

mkdir -p ~/.claude/skills/s1n6h-bug-bounty-skills-0x002132-skills-bugbounty-hunt-file-upload && curl -fsSL https://raw.githubusercontent.com/S1N6H/Bug-Bounty-Skills/HEAD/skills/0x002132-skills-bugbounty-hunt-file-upload.md -o ~/.claude/skills/s1n6h-bug-bounty-skills-0x002132-skills-bugbounty-hunt-file-upload/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What 0x002132 Skills Bugbounty Hunt File Upload does

name: hunt-file-upload description: "Hunt file upload bugs — RCE via webshell, XSS via SVG/HTML, SSRF via XXE in DOCX, path traversal via filename. Bypass tables (10 techniques): double extension (shell.php.jpg if server checks last ext only), magic bytes spoofing (PNG header on PHP), null byte (shell.php\0.jpg), case (PHP, .Php, .pHP), .htaccess upload to enable execution, SVG with , HTML/SVG XSS, DOCX with embedded XXE, ZIP slip (../../../etc/passwd in archive), polyglot files. Det

Alternatives in Development

Oob — Out-of-band orchestrator — confirm BLIND SSRF/XXE/SQLi/RCE/Log4Shell by correlating interactsh callbacks to th 4.5k ★
Computer Forensics — Digital forensics analysis and investigation techniques 479 ★
Engage.Memory — Cross-engagement pattern memory — recall prior techniques, record confirmed findings, housekeeping 348 ★