Browse reusable instructions for your AI tools. Copy and customize a prompt, or download a skill for a supported agent.
Hunt file upload bugs
Hunt fintech-specific GraphQL vulnerabilities
Hunt Forgot Password / Account Recovery Authentication Flaws
Hunting skill for graphql vulnerabilities.
Hunt gRPC vulnerabilities
Hunt Host Header Injection
Hunt HTML Injection
Hunt HTTP request smuggling (CL.TE, TE.CL, H2.CL, H2.TE).
Hunting skill for idor vulnerabilities. Built from 26 public bug bounty reports. Use when hunting idor on any target.
Hunt JWT cryptographic failures
Hunt Kubernetes & Docker
Hunt Laravel specific vulnerabilities
Hunt LDAP Injection and XPath Injection
Hunt Local File Inclusion (LFI), Remote File Inclusion (RFI), and Path Traversal
Hunt LLM/AI feature bugs
Hunt MFA / 2FA bypass
Hunting skill for misc vulnerabilities. Reference for authorized role, token and workflow-boundary reviews. Historical source count is not independently verified.
Hunt Next.js specific vulnerabilities
Hunt Node.js specific vulnerabilities
Hunt NoSQL Injection
Hunt NTLM/Negotiate information disclosure on internet-reachable IIS/SharePoint/Exchange.
Hunt Open Redirect
Hunting skill for race condition vulnerabilities.
Hunt vector-store / embedding-layer weaknesses in RAG pipelines (OWASP LLM08 Vector and Embedding Weaknesses)
Try another platform, a broader search, or fewer filters.
Explore all resourcesResource formats: Prompts are ready to copy into a conversation. Skills install into the compatible agent shown on their page.
How it worksInclude the instructions, intended platforms, author, and license. Submissions are reviewed before publication.