VerifiedPlugin
claude-osint
8 Claude skills · 100+ recon capabilities · 80 secret-regex patterns · 80+ dorks · 9 read-only credential validators · 27 attack-path templates · ~10,000 lines of structured tradecraft.
10 skills2.6k
@elementalsoulsSecurity
Plugin
claude-bughunter
A self-contained Claude skill bundle for bug hunting and external red-team work · 83 skills · 15 slash commands · 681 disclosed-report patterns (433 now individually cited & auditable) across 24 core vulnerability classes · enterprise identity +
Plugin Signal96/100Strong
maintained100
capable96
documented100
adopted78
Install on Claude Code
> /plugin marketplace add elementalsouls/Claude-BugHunter> /plugin install claude-bughunter@elementalsouls
Stats
4,605
Stars
692
Forks
Active
Maintenance
Python
Language
MIT
License
20h ago
Last commit
4mo ago
Created
Repo: elementalsouls/Claude-BugHunter
In this plugin
- skills
- apk-redteam-pipeline
- bb-local-toolkit
- bb-methodology
- bug-bounty
- bugcrowd-reporting
- cloud-iam-deep
- enterprise-vpn-attack
- evidence-hygiene
- hunt-api-misconfig
- hunt-aspnet
- hunt-ato
- hunt-auth-bypass
- hunt-brute-force
- hunt-business-logic
- hunt-cache-poison
- hunt-captcha-bypass
- hunt-cicd
- hunt-clickjacking
- hunt-cloud-misconfig
- hunt-cors
- hunt-csrf
- hunt-deserialization
- hunt-dispatch
- hunt-dom
- hunt-exceptional-conditions
- hunt-file-upload
- hunt-fintech-graphql
- hunt-forgot-password
- hunt-graphql
- hunt-grpc
- hunt-host-header
- hunt-html-injection
- hunt-http-smuggling
- hunt-idor
- hunt-jwt-crypto
- hunt-k8s
- hunt-laravel
- hunt-ldap
- hunt-lfi
- hunt-llm-ai
- hunt-mfa-bypass
- hunt-misc
- hunt-nextjs
- hunt-nodejs
- hunt-nosqli
- hunt-ntlm-info
- hunt-oauth
- hunt-open-redirect
- hunt-race-condition
- hunt-rag-vector
- hunt-rce
- hunt-saml
- hunt-session
- hunt-shadow-api
- hunt-sharepoint
- hunt-source-leak
- hunt-spa-api
- hunt-springboot
- hunt-sqli
- hunt-ssrf
- hunt-ssti
- hunt-subdomain
- hunt-tls-network
- hunt-websocket
- hunt-xss
- hunt-xxe
- ios-redteam-pipeline
- m365-entra-attack
- meme-coin-audit
- mid-engagement-ir-detection
- offensive-osint
- okta-attack
- osint-methodology
- recon-scope-triage
- redteam-mindset
- redteam-report-template
- report-writing
- security-arsenal
- supply-chain-attack-recon
- triage-validation
- vmware-vcenter-attack
- web2-recon
- web3-audit
- commands
What's inside
Skill(83 skills)
/apk-redteam-pipelineEnd-to-end Android APK red-team pipeline — automated APK acquisition (Play Store + apkpure + apkmirror fallback), jadx decompilation, secret/URL/JWT/Firebase grep, pinned-cert extraction, exported-component enumeration, Frida runtime instrumentation templates, intent-injection/bb-local-toolkitLocal-tooling companion to the bug-bounty orchestrator — carries the SAME complete bug-bounty workflow, but reach for THIS variant when you also need to resolve where tools, wordlists, and clones are installed on the local machine (jhaddix, SecLists, trufflehog, ffuf, dalfox,/bb-methodologyUse at the START of any bug bounty hunting session, when switching targets, or when feeling lost about what to do next. Master orchestrator that combines the 5-phase non-linear hunting workflow with the critical thinking framework (developer psychology, anomaly detection,
- /bug-bounty
- /bugcrowd-reporting
- /cloud-iam-deep
- /enterprise-vpn-attack
- /evidence-hygiene
- /hunt-api-misconfig
- /hunt-aspnet
- /hunt-ato
- /hunt-auth-bypass
- /hunt-brute-force
- /hunt-business-logic
- /hunt-cache-poison
- /hunt-captcha-bypass
- /hunt-cicd
- /hunt-clickjacking
- /hunt-cloud-misconfig
- /hunt-cors
- /hunt-csrf
- /hunt-deserialization
- /hunt-dispatch
- /hunt-dom
- /hunt-exceptional-conditions
- /hunt-file-upload
- /hunt-fintech-graphql
- /hunt-forgot-password
- /hunt-graphql
- /hunt-grpc
- /hunt-host-header
- /hunt-html-injection
- /hunt-http-smuggling
- /hunt-idor
- /hunt-jwt-crypto
- /hunt-k8s
- /hunt-laravel
- /hunt-ldap
- /hunt-lfi
- /hunt-llm-ai
- /hunt-mfa-bypass
- /hunt-misc
- /hunt-nextjs
- /hunt-nodejs
- /hunt-nosqli
- /hunt-ntlm-info
- /hunt-oauth
- /hunt-open-redirect
- /hunt-race-condition
- /hunt-rag-vector
- /hunt-rce
- /hunt-saml
- /hunt-session
- /hunt-shadow-api
- /hunt-sharepoint
- /hunt-source-leak
- /hunt-spa-api
- /hunt-springboot
- /hunt-sqli
- /hunt-ssrf
- /hunt-ssti
- /hunt-subdomain
- /hunt-tls-network
- /hunt-websocket
- /hunt-xss
- /hunt-xxe
- /ios-redteam-pipeline
- /m365-entra-attack
- /meme-coin-audit
- /mid-engagement-ir-detection
- /offensive-osint
- /okta-attack
- /osint-methodology
- /recon-scope-triage
- /redteam-mindset
- /redteam-report-template
- /report-writing
- /security-arsenal
- /supply-chain-attack-recon
- /triage-validation
- /vmware-vcenter-attack
- /web2-recon
- /web3-audit
Command(15 commands)
/autopilotRun autonomous hunt loop on a target — scope check → recon → rank surface → hunt → validate → report with configurable checkpoints. Usage: /autopilot target.com [--paranoid|--normal|--yolo]/chainBuild an exploit chain — given bug A, finds B and C to combine for higher severity and payout. Knows common chain patterns: IDOR→ATO, SSRF→cloud metadata, XSS→ATO, open redirect→OAuth theft, S3→bundle→secret→OAuth. Usage: /chain/huntActive vulnerability hunting. Two-track dispatcher — asks Red Team vs WAPT, hands off to hunt-dispatch skill and sibling commands. Usage: /hunt target.com | /hunt *.target.com | /hunt targets.txt [--vuln-class X] [--source-code P] [--chrome]
README
claude-bughunter
A self-contained Claude skill bundle for bug hunting and external red-team work · 83 skills · 15 slash commands · 681 disclosed-report patterns (433 now individually cited & auditable) across 24 core vulnerability classes · enterprise identity + infrastructure attack matrices · engagement-folder scaffolding · Burp MCP integration · battle-tested across authorized red-team and bug-hunting engagements, plus public training platforms (DVWA, OWASP Juice Shop, Hacker101, testphp.vulnweb.com).
Built by Sachin Sharma — Bug Hunting & GenAI Security Research.
What is this?
claude-bughunter is a drop-in skill bundle for the Claude Code skills system. Install once and Claude Code stops being a chatbot and starts behaving like a senior bug-hunting researcher or red-team operator: it knows the techniques, the chain templates, the VRT mappings, the platform CVE chains, and the hygiene — and it stays in scope.
Four layers stack:
- Think —
bb-methodology+redteam-mindset: the 5-phase non-linear workflow, critical-thinking framework, and red-team operator discipline. - Hunt webapps — 58
hunt-*skills curated from 681 disclosed HackerOne reports: per-class detection patterns, payloads, bypass tables, and chain templates. - Hit the perimeter — enterprise platform chains (M365/Entra, Okta, vCenter, SSL-VPN appliances, SharePoint, cloud IAM): current 2024–2026 CVE chains + post-credential escalation.
- Ship it —
triage-validation+ reporting +evidence-hygiene: the 7-Question Gate, VRT-aware severity, OOS rebuttals, PII redaction, and red-team deliverables.
All triggered automatically by topic — describe what you're testing in plain English and the relevant skill loads. No invocation by name.
Quickstart
Option A — install as a Claude Code plugin (recommended). From inside Claude Code:
/plugin marketplace add elementalsouls/Claude-BugHunter
/plugin install claude-bughunter@elementalsouls
All 83 skills + 15 commands load namespaced under claude-bughunter: and update when you bump the plugin version — no files copied into ~/.claude/.
Option B — copy install (no plugin system / pin to a clone):
git clone https://github.com/elementalsouls/Claude-BugHunter.git
cd Claude-BugHunter
# macOS / Linux
bash scripts/install.sh
# Windows (PowerShell)
pwsh ./scripts/install.ps1
Both copy the skills + commands into ~/.claude/ (macOS/Linux) or %USERPROFILE%\.claude\ (Windows) and wire the hunt engagement scaffolder.
What each install path gives you:
| Path | 83 skills + 15 slash commands | cbh CLI | hunt scaffolder |
|---|---|---|---|
| A — plugin | ✅ namespaced under claude-bughunter: | ➕ separate pipx install | ❌ clone-only |
| B — copy install | ✅ copied into ~/.claude/ | ✅ from the clone | ✅ from the clone |
The plugin is the fastest path to the skills + slash commands. The terminal-native
cbh runner installs standalone — pipx install git+https://github.com/elementalsouls/Claude-BugHunter
— so plugin users can add it without a full clone (see cbh CLI).
The hunt engagement scaffolder ships with the clone (Option B).
That's it. Open Claude Code and describe what you're testing in plain English — the right skill loads automatically, no invocation by name:
> Testing acme.com — an in-scope HackerOne target. Run recon and rank the surface.
⟳ loading skills: web2-recon, offensive-osint, bb-methodology …
→ subdomain enum (subfinder + crt.sh) … 47 hosts
→ live hosts (httpx) … 12 · tech fingerprint … 6 distinct stacks
→ ranked surface: api.acme.com (GraphQL, introspection ON) ← start here
auth.acme.com (OAuth, SSO) ← hunt-oauth
Next: want me to probe the GraphQL introspection + OAuth redirect_uri?
→ Full Installation guide · Usage guide · searchable skill catalog.
The block above is an illustrative transcript. To record a real demo of your own session:
asciinema rec demo.cast→ upload to asciinema.org and drop the badge here.
Runs on multiple agent harnesses
The skills are plain Agent Skills — the same SKILL.md format that Claude Code · OpenCode · OpenAI Codex CLI · Hermes Agent · Google AntiGravity all load. One command installs them everywhere:
# macOS / Linux
bash scripts/install.sh --all --burp-mcp
# Windows (PowerShell)
pwsh ./scripts/install.ps1 -All -BurpMcp
| Harness | Target Skill Directory | Flag |
|---|---|---|
| Claude Code (baseline) | ~/.claude/skills/ | (default) |
| OpenCode | reads ~/.claude/skills/ & ~/.agents/skills/ | (default) / --agents |
| OpenAI Codex CLI | ~/.agents/skills/ | --agents |
| Hermes Agent | ~/.hermes/skills/ | --hermes |
| Google AntiGravity | ~/.gemini/config/skills/ | --antigravity |
--all (-All) detects installed harnesses and copies skills to each harness's path (~/.claude/skills, ~/.agents/skills, ~/.hermes/skills, ~/.gemini/config/skills); --burp-mcp (-BurpMcp) wires the Burp MCP server into each. The full knowledge layer ports to all five — the slash commands and /hunt engine stay Claude-Code-only by design.
Star History
Chart is self-hosted — regenerate with python3 scripts/gen_star_history.py (needs gh auth login).
Refreshes automatically each day via .github/workflows/star-history.yml.
Scope — what this bundle is for, and what it isn't
This bundle covers the external attack surface — anything reachable from the internet without first compromising an internal endpoint.
In scope
- Bug bounty hunting — web apps, APIs, SaaS, GraphQL, OAuth, JWT, file upload, IDOR, SSRF, RCE chains
- Web application pentesting — full hunt-* coverage of OWASP-mapped bug classes + discipline rules
- External red-team engagements — initial-access against internet-facing enterprise estate: M365 / Entra ID, Okta-as-IdP, SharePoint on-prem (ToolShell + legacy SOAP), VMware vCenter / Workspace ONE, SSL VPN appliances (Cisco / Fortinet / Citrix / Palo Alto / Pulse / SonicWall / F5), Android APK red-team, supply-chain recon
- Cloud misconfig + post-credential escalation — public S3, IMDS chains, STS AssumeRole, cross-account confused-deputy
- Recon + OSINT — subdomain enum, identity-fabric mapping, certificate transparency, JS analysis, secret scanning
- Reporting — H1, Bugcrowd (VRT-aware), Intigriti, Immunefi, plus client-facing red-team deliverable format
Out of scope (deliberate — not gaps, design decisions)
- Internal Active Directory attacks — BloodHound, Kerberoasting, ASREProast, DCSync, Pass-the-Hash, AD CS abuse, ntlmrelayx, Responder, PetitPotam, etc. Different operational risk profile; needs different tooling and judgment. Future bundle, not this one.
- C2 frameworks — Cobalt Strike, Sliver, Mythic, Havoc, BRC4 tradecraft. Out of scope for external-only engagement model.
- Post-exploit / persistence / lateral — Mimikatz/comsvcs LSASS dumping, golden/silver tickets, named-pipe impersonation, persistence (registry, scheduled tasks, WMI events, COM hijacking), token theft. These start after the perimeter has already broken — different bundle territory.
- Evasion — AMSI bypass, ETW patching, AV/EDR bypass. Tied to C2 tradecraft above.
- iOS pentesting / hardware / RF / ICS — out of scope by design.
- Binary exploitation / kernel pwn / browser internals — different skill universe.
If you're running an internal red team that includes domain-takeover chains via Kerberos or lateral movement, this bundle won't help you in those phases — and we'd rather say that up front than have you find out mid-engagement. The external surface handoff to internal-RT tooling (Impacket, NetExec, CrackMapExec, Rubeus, Certify, BloodHound) is intentionally outside our scope. Coverage for internal AD and post-exploit may come in a future update.
What's inside
83 skills, auto-loaded by topic — no invocation by name. Coverage across the external attack surface:
| Category | # | Examples |
|---|---|---|
| Hunt — web app vuln classes | 58 | XSS, SQLi, SSRF, IDOR, LFI, SSTI, XXE, CSRF, CORS, open-redirect, SharePoint, ASP.NET/NTLM |
| Enterprise platform attack ★ | 10 | M365/Entra, Okta, cloud-IAM-deep, vCenter, enterprise VPN, APK/iOS red-team pipelines, supply-chain recon |
| Reporting & validation | 6 | triage-validation, evidence-hygiene, report-writing, bugcrowd-reporting |
| Recon & OSINT | 5 | web2-recon, offensive-osint, osint-methodology, recon-scope-triage |
| Methodology & mindset | 4 | bb-methodology, bug-bounty, redteam-mindset, bb-local-toolkit |
Full searchable catalog → docs/skills.md. Also ships 15 slash commands (/hunt, /recon, /report, …) and a deterministic engagement engine (engine/) that maps a target's attack surface and routes each finding to the skill that handles it.
How it works
A 6-phase, non-linear workflow — recon → map & rank → hunt → validate → report — with scope enforced in code and a 7-Question Gate before anything is submitted. Two ways to drive it:
- Plain English — describe what you're testing and the relevant skill loads automatically.
/huntscaffold +cbhCLI — engagement-folder structure, state, and orchestration.
→ Usage guide & worked example · 6-phase architecture & skill-to-phase map · cbh CLI
Authorization
These skills are intended for assets you own or have written authorization to assess (bug-bounty in-scope assets, pentest engagement letters, CTF challenges, your own infrastructure).
The skills include validation gates that auto-trigger when you point Claude at unverified third-party targets — triage-validation's 7-Question Gate explicitly asks whether the asset is in scope (Q3) and on the program's accepted-impact list (Q2). The bugcrowd-reporting skill includes researcher-side hygiene (Bugcrowdninja alias, account-state restoration, friendly-tester posture) that signals legitimate authorized testing to the target's fraud team.
The bundle explicitly excludes: weaponizing 0-days against unauthorized targets, post-exploitation tooling, malware development, mass-targeting infrastructure. See SECURITY.md for the full posture.
File tree
More plugins by @elementalsouls.
View @elementalsouls’s profile@elementalsoulsFAQ
claude-bughunter is a Claude Code plugin with 83 hand-picked skills for security work, indexed on Flowy. Install it with the command on its page. It includes apk-redteam-pipeline, bb-local-toolkit, bb-methodology. Its skills do not fire on their own yet. Request auto-invocation to have Flowy route them as you prompt. Free and open source.
- What is claude-bughunter?
- A self-contained Claude skill bundle for bug hunting and external red-team work · 83 skills · 15 slash commands · 681 disclosed-report patterns (433 now individually cited & auditable) across 24 core vulnerability classes · enterprise identity +
- How do I install claude-bughunter?
- Run these in Claude Code: /plugin marketplace add elementalsouls/Claude-BugHunter then /plugin install claude-bughunter@elementalsouls. Then prompt normally.
- Does claude-bughunter auto-invoke its skills?
- Not yet. It is indexed on Flowy as a plain plugin. Request auto-invocation on its page and Flowy will route its skills for you as you prompt.
- Is claude-bughunter free?
- Yes. Flowy is free and open source, with nothing gated. You can read every skill in full before you install.
Is this plugin yours?
Claim it with GitHubSubmit a pluginPromote it