Look for unvalidated webhook endpoints
Hunting skill for business logic vulnerabilities.
Browse reusable instructions for your AI tools. Copy and customize a prompt, or download a skill for a supported agent.

Hunting skill for business logic vulnerabilities.
Hunting skill for cache poison vulnerabilities.
Hunt CAPTCHA Bypass
Hunt CI/CD pipeline vulnerabilities
Hunt Clickjacking
Hunt cloud / infrastructure misconfigurations.
Hunt CORS Misconfiguration
Hunting skill for csrf vulnerabilities.
Hunt Insecure Deserialization
Skill-set loader for /hunt orchestrator.
Hunt client-side DOM vulnerabilities
Hunt mishandling of exceptional conditions
Hunt file upload bugs
Hunt fintech-specific GraphQL vulnerabilities
Hunt Forgot Password / Account Recovery Authentication Flaws
Hunting skill for graphql vulnerabilities.
Hunt gRPC vulnerabilities
Hunt Host Header Injection
Hunt HTML Injection
Hunt HTTP request smuggling (CL.TE, TE.CL, H2.CL, H2.TE).
Hunting skill for idor vulnerabilities. Built from 26 public bug bounty reports. Use when hunting idor on any target.
Hunt JWT cryptographic failures
Hunt Kubernetes & Docker
Hunt Laravel specific vulnerabilities
Try another platform, a broader search, or fewer filters.
Explore all resourcesResource formats: Prompts are ready to copy into a conversation. Skills install into the compatible agent shown on their page.
How it worksInclude the instructions, intended platforms, author, and license. Submissions are reviewed before publication.