Skip to content
Security
Command

/pickup

Pick up a previous hunt on a target — shows hunt history, untested endpoints, and memory-informed suggestions. Usage: /pickup target.com

From plugin
agentic-bug-hunter
5.9k42 skills9 agents42 commands3 hooks
$ npx -y skills add awarexone/agentic-bug-hunter --agent claude-code

Command definition

pickup.md
description: Pick up a previous hunt on a target — shows hunt history, untested endpoints, and memory-informed suggestions. Usage: /pickup target.com

/pickup

Pick up where you left off on a target.

> **Renamed from `/resume`** — `/resume` is a reserved Claude Code command. Use `/pickup` to continue a previous hunt.

What This Does

1. Reads the target profile from `hunt-memory/targets/<target>.json` 2. Shows hunt history (sessions, findings, payouts) 3. Lists untested endpoints from last recon 4. Suggests techniques based on tech stack + pattern DB 5. Asks: continue hunting or re-run recon?

Usage

/pickup target.com

Output

PICKUP: target.com
═══════════════════════════════════════

Hunt History:
  Sessions:    3
  Last hunt:   2026-03-24
  Total time:  2h 00m
  Findings:    1 confirmed (IDOR, $1500 paid)

Untested Surface:
  3 endpoints from last recon:
  1. /api/v2/users/{id}/export
  2. /api/v2/users/{id}/share
  3. /api/v2/users/{id}/history

Memory Suggestions:
  Tech stack [Next.js, GraphQL, PostgreSQL] matches 2 targets
  where you found auth bypass. Try introspection → mutation pattern.

Actions:
  [r] Continue hunting untested endpoints
  [n] Re-run recon first (surface may have changed)
  [s] Show full hunt journal for this target

If No Previous Hunt

No previous hunt data for target.com.
Run /recon target.com first, then /hunt target.com.
Read more
@awarexone
Ships withagentic-bug-hunter

AI-powered bug bounty hunting toolkit that works with or without subscription.

5.9k25 skills9 agents
Get the whole plugin

Stars on GitHub

Momentum

stars in total
5.9k
Star history of awarexone/agentic-bug-hunter on GitHub, a chart by star-history.com

Other commands on agentic-bug-hunter.

arsenal

arsenal

Command

Show which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from…

autopilot

autopilot

Command

Run autonomous hunt loop on a target — scope check → recon → rank surface → hunt → validate → report with configurable…

breach-check

breach-check

Command

HIBP k-anonymity check on a password wordlist. Enriches each password with its breach count, ranks DESC. Free API (no key), only…

bypass-403

bypass-403

Command

Probe a 403/401 endpoint with the most-paid bypass tricks (header injection, path encoding, method swap, WAF fingerprint,…

chain

chain

Command

Build an exploit chain — given bug A, finds B and C to combine for higher severity and payout. Knows common chain patterns:…

cloud-recon

cloud-recon

Command

Sweep cloud assets for a target — public S3/Azure/GCP buckets via S3Scanner and cloud_enum, plus CloudFlare-bypassed origin IPs…

More commands from other plugins.

deslop-reborn

deslop-reborn

Command

One iteration of the IronClaw Reborn de-slop loop — take ONE Reborn crate, fan out parallel review sub-agents (thermo-nuclear…

@nearai@nearaiInstall Command
audit

audit

Command

Audit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open…

@trailofbits@trailofbitsInstall Command
arsenal

arsenal

Command

Show which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from…

@shuvonsec@shuvonsecInstall Command