myurikanao/src-hunter-skill · Archived
npx skills add https://github.com/myurikanao/src-hunter-skill
实战 SRC / 众测 / Bug bounty 漏洞挖掘工作流 skill。包含：5 阶段方法论（intake → recon → enum → hunt → report）、19 个攻击类 playbook（SQLi/XSS/RCE/SSRF/IDOR/CSRF/Path Traversal/File Upload/SSTI/XXE/Race/HTTP Smuggling/OAuth/JWT/SAML/GraphQL/Mobile/LLM/DoS）、305 个结构化 payload、263 个 WAF/EDR 绕过变体、2887 份 HackerOne 真实 High/Critical 已披露案例、88,636 份 WooYun 案例统计、国产 OA / 中间件指纹库、银行 / 电信行业垂直 playbook。当用户提到 "src 挖洞 / src 漏洞挖掘 / bug bounty / 众测 / hackerone / 漏洞赏金 / SRC / 任意 X 漏洞 / 渗透测试" 或问"如何挖某个目标 / 怎么测某个 API / 如何绕过 WAF" 时触发。
This repository is archived — consider an actively maintained alternative.
Fetch dependency source code to give AI agents deeper implementation context.
1.1K installsSrcwalk is the agent's code navigator: one tree-sitter CLI for repo maps, token-aware large-fil…
223 installsFetch source code for npm, PyPI, or crates.io packages and GitHub/GitLab repos to provide AI ag…
91 installsLoad this skill when debugging behavior in external libraries by reading local OpenSrc mirrors …
83 installsRelated neighbors and high-traction skills in the same topics — useful to compare before installing.
Hunt for exploitable, bounty-worthy security issues in repositories. Focuses on remotely reacha…
7.1K installsAutomatically monitors OKX Flash Earn, Fixed Earn and Flexible Earn opportunities, sends push n…
2.4K installsSearch domains, compare prices, find promo codes, get purchase recommendations. Use when user w…
1.9K installsPrecision-first adversarial bug hunting for runtime, logic, data, concurrency, and security def…
724 installsSearch and extract contact information for people or companies including names, phone numbers, …
395 installsDeclared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.
main