agentic-bug-hunter
A Claude Code plugin for bug bounty hunters, bundling skills for reconnaissance, vulnerability hunting such as IDOR, SSRF and XSS, black-box audits of deployed AI agents, and CI/CD pipeline security.
19 skills5.8k
@shuvonsec- 5,772Stars earned
- 1Plugin
- 19Skills
- 9Agents
- 42Commands
- 3Hooks
Plugins
1@shuvonsecSkills
19agentic-app-audit
Black-box security audit of a DEPLOYED AI agent (not the MCP server behind it) — tool-call hijacking, cross-session memory…
@shuvonsecargus
Argus — the all-seeing scanner suite. Six automated scanners for high-value web + LLM bug classes — CORS misconfiguration (origin…
@shuvonsecbb-methodology
Use at the START of any bug bounty hunting session, when switching targets, or when feeling lost about what to do next. Master…
@shuvonsecbug-bounty
Complete bug bounty workflow — recon, pre-hunt learning, vulnerability hunting (IDOR, SSRF, XSS, auth bypass, CSRF, race…
@shuvonseccicd-security
CI/CD pipeline security hunting — GitHub Actions workflow injection, secret exfiltration, self-hosted runner poisoning,…
@shuvonsecclient-reverse
Client-side request-signing and anti-bot token reversal for bug bounty — when a request carries a…
@shuvonseccloud-pentest
Post-access cloud exploitation for AWS, GCP, and Azure — what to do AFTER you obtain credentials or reach a metadata endpoint.…
@shuvonseccredential-attack
Password spray methodology for bug bounty — when to do it vs web-vuln hunting, the wordlist-gen + breach-check + osint-employees…
@shuvonsecgraphql-audit
GraphQL security hunting — introspection abuse, field suggestion enumeration (clairvoyance), batching DoS, IDOR via aliasing,…
@shuvonsecllm-redteam
LLM application red-teaming — prompt injection (direct + indirect), jailbreak, system-prompt leak, data exfiltration, guardrail…
@shuvonsecmcp-server-audit
Security audit of Model Context Protocol (MCP) servers — tool poisoning, prompt injection via tool descriptions and results,…
@shuvonsecmeme-coin-audit
Meme coin and token security audit — rug pull detection (honeypot, hidden mint, fee manipulation, LP lock bypass), Solana SPL…
@shuvonsecAgents
9autopilot
AgentAutonomous hunt loop agent. Runs the full hunt cycle (scope → recon → rank → hunt → validate → report) without stopping for…
@shuvonsecchain-builder
AgentExploit chain builder. Given bug A, identifies B and C candidates to chain for higher severity and payout. Knows all major chain…
@shuvonseccredential-hunter
AgentAutonomous credential-attack pipeline runner. Chains /wordlist-gen + /osint-employees + /breach-check (data-prep stages, runs…
@shuvonsecrecon-agent
AgentSubdomain enumeration and live host discovery specialist. Runs Chaos API (ProjectDiscovery), subfinder, assetfinder, dnsx, httpx,…
@shuvonsecrecon-ranker
AgentAttack surface ranking agent. Takes recon output and hunt memory, produces a prioritized attack plan. Ranks by IDOR likelihood,…
@shuvonsecreport-writer
AgentBug bounty report writer. Generates professional H1/Bugcrowd/Intigriti/Immunefi reports. Impact-first writing, human tone, no…
@shuvonsectoken-auditor
AgentFast meme coin and token security auditor. Checks 8 token-specific bug classes (hidden mint, honeypot, fee manipulation, LP lock…
@shuvonsecvalidator
AgentFinding validator. Runs the 7-Question Gate and 4-gate checklist on a described finding. Kills weak/theoretical findings fast…
@shuvonsecweb3-auditor
AgentSmart contract security auditor. Checks 10 bug classes in order of frequency (accounting desync 28%, access control 19%,…
@shuvonsecCommands
42arsenal
CommandShow which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from…
@shuvonsecautopilot
CommandRun autonomous hunt loop on a target — scope check → recon → rank surface → hunt → validate → report with configurable…
@shuvonsecbreach-check
CommandHIBP k-anonymity check on a password wordlist. Enriches each password with its breach count, ranks DESC. Free API (no key), only…
@shuvonsecbypass-403
CommandProbe a 403/401 endpoint with the most-paid bypass tricks (header injection, path encoding, method swap, WAF fingerprint,…
@shuvonsecchain
CommandBuild an exploit chain — given bug A, finds B and C to combine for higher severity and payout. Knows common chain patterns:…
@shuvonseccloud-recon
CommandSweep cloud assets for a target — public S3/Azure/GCP buckets via S3Scanner and cloud_enum, plus CloudFlare-bypassed origin IPs…
@shuvonseccors
CommandScan an endpoint for CORS misconfiguration — arbitrary-origin reflection, null-origin trust, credential exposure, suffix/prefix…
@shuvonseccrlf
CommandTest for CRLF / HTTP response-splitting and host-header injection — Set-Cookie injection, cache poisoning, reset-poisoning.…
@shuvonsecdashboard
CommandLaunch the local Hunt Dashboard — one live view of leads, recon surface, findings, reports, screenshot galleries, and the memory…
@shuvonsecdomxss
CommandConfirm DOM XSS in a real headless browser — injects canary payloads into params + URL fragment and only reports when the browser…
@shuvonsechunt
CommandActive vulnerability hunt against a target by invoking bughunter/tools/hunt.py (which calls vuln_scanner.sh against…
@shuvonsecintel
CommandOn-demand intelligence fetch for a target — CVEs, disclosed reports, new features. Wraps learn.py + hunt memory context. Usage:…
@shuvonsecIs this you? Claim your profilePut a plugin at the top of Plugins, from $9