Browse reusable instructions for your AI tools. Copy and customize a prompt, or download a skill for a supported agent.
Hunting skill for rce vulnerabilities. Built from 67 public bug bounty reports. Use when hunting rce on any target.
Hunt SAML / SSO attacks.
Hunt Session Management vulnerabilities
Hunt shadow / zombie / undocumented API surface (OWASP API9 Improper Inventory Management)
Hunt source code and build artifact leakage
Discover a single-page-app's hidden backend API from its public JS bundle, then test that API for broken access control / missing authentication.
Hunt Spring Boot specific vulnerabilities
Hunting skill for sqli vulnerabilities.
Hunting skill for ssrf vulnerabilities.
Hunt server-side template injection (SSTI) across Jinja2 (Flask/Django), Twig (Symfony), Freemarker (Java), ERB (Rails), Spring, Velocity, Mako, Thymeleaf, Smarty.
Hunting skill for subdomain takeover vulnerabilities.
Hunt TLS/SSL and DNS misconfigurations
Hunt WebSocket vulnerabilities
Hunting skill for xss vulnerabilities.
Hunting skill for xxe vulnerabilities.
End-to-end iOS red-team pipeline
Microsoft 365 / Entra ID red-team attack chain
Meme coin and token security audit
Methodology for detecting client SOC patches, attacker activity, and security-state changes that occur DURING a red-team engagement
Okta-as-IdP red-team attack chain
Comprehensive OSINT methodology for external red-team operations and authorized attack-surface assessments.
Triage ASM/recon output for ownership before testing
Red-team operator discipline
Client-facing red-team deliverable format
Try another platform, a broader search, or fewer filters.
Explore all resourcesResource formats: Prompts are ready to copy into a conversation. Skills install into the compatible agent shown on their page.
How it worksInclude the instructions, intended platforms, author, and license. Submissions are reviewed before publication.