Browse reusable instructions for your AI tools. Copy and customize a prompt, or download a skill for a supported agent.
Hunt LDAP Injection and XPath Injection
Hunt Local File Inclusion (LFI), Remote File Inclusion (RFI), and Path Traversal
Hunt LLM/AI feature bugs
Hunt MFA / 2FA bypass
Hunting skill for misc vulnerabilities. Reference for authorized role, token and workflow-boundary reviews. Historical source count is not independently verified.
Hunt Next.js specific vulnerabilities
Hunt Node.js specific vulnerabilities
Hunt NoSQL Injection
Hunt NTLM/Negotiate information disclosure on internet-reachable IIS/SharePoint/Exchange.
Hunt Open Redirect
Hunting skill for race condition vulnerabilities.
Hunt vector-store / embedding-layer weaknesses in RAG pipelines (OWASP LLM08 Vector and Embedding Weaknesses)
Hunting skill for rce vulnerabilities. Built from 67 public bug bounty reports. Use when hunting rce on any target.
Hunt SAML / SSO attacks.
Hunt Session Management vulnerabilities
Hunt shadow / zombie / undocumented API surface (OWASP API9 Improper Inventory Management)
Hunt source code and build artifact leakage
Discover a single-page-app's hidden backend API from its public JS bundle, then test that API for broken access control / missing authentication.
Hunt Spring Boot specific vulnerabilities
Hunting skill for sqli vulnerabilities.
Hunting skill for ssrf vulnerabilities.
Hunt server-side template injection (SSTI) across Jinja2 (Flask/Django), Twig (Symfony), Freemarker (Java), ERB (Rails), Spring, Velocity, Mako, Thymeleaf, Smarty.
Hunting skill for subdomain takeover vulnerabilities.
Hunt TLS/SSL and DNS misconfigurations
Try another platform, a broader search, or fewer filters.
Explore all resourcesResource formats: Prompts are ready to copy into a conversation. Skills install into the compatible agent shown on their page.
How it worksInclude the instructions, intended platforms, author, and license. Submissions are reviewed before publication.