A Claude 代码 skill bundle 为 bug hunting、external red-团队 work — 71 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus 企业级 identity + infrastructure attack matrices.GitHub 2,739 ⭐ / 421 Fork,主要使用 Python 开发。标签:ai-security,anthropic,application-sec……
项目介绍
A Claude 代码 skill bundle 为 bug hunting、external red-团队 work — 71 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus 企业级 identity + infrastructure attack matrices.
核心功能
- Think — `bb-methodology` + `redteam-mindset`: the 5-phase non-linear workflow, critical-thinking framework, and red-team operator discipline. - Hunt webapps — 48 `hunt-*` skills curated from 681 disclosed HackerOne reports: per-class detection patterns, payloads, bypass tables, and chain templates. - Hit the perimeter — enterprise platform chains (M365/Entra, Okta, vCenter, SSL-VPN appliances, SharePoint, cloud IAM): current 2024–2026 CVE chains + post-credential escalation. - Ship it — `triage-validation` + reporting + `evidence-hygiene`: the 7-Question Gate, VRT-aware severity, OOS rebuttals, PII redaction, and red-team deliverables.
使用指南
Four layers stack: - Think — `bb-methodology` + `redteam-mindset`: the 5-phase non-linear workflow, critical-thinking framework, and red-team operator discipline. - Hunt webapps — 48 `hunt-*` skills curated from 681 disclosed HackerOne reports: per-class detection patterns, payloads, bypass tables, and chain templates. - Hit the perimeter — enterprise platform chains (M365/Entra, Okta, vCenter, SSL-VPN appliances, SharePoint, cloud IAM): current 2024–2026 CVE chains + post-credential escalation. - Ship it — `triage-validation` + reporting + `evidence-hygiene`: the 7-Question Gate, VRT-aware severity, OOS rebuttals, PII redaction, and red-team deliverables. All triggered automatically by topic — describe what you're testing in plain English and the relevant skill loads. No invocation by name.
项目信息
| 项目 | 信息 |
|---|---|
| 项目名称 | elementalsouls/Claude-BugHunter |
| Star 数 | 2,739 |
| Fork 数 | 421 |
| 编程语言 | Python |
| 开源协议 | NOASSERTION |
| 创建时间 | 2026-05-05 |
| 最近更新 | 2026-06-16 |
| 主题标签 | ai-security、anthropic、application-security、bug-bounty、bugbounty |
项目地址
GitHub 仓库:<https://github.com/elementalsouls/Claude-BugHunter>
> 完整 URL:[https://github.com/elementalsouls/Claude-BugHunter](https://github.com/elementalsouls/Claude-BugHunter)
如需查看完整源码、安装命令、使用示例、API 文档,请直接访问上方项目地址。所有信息均以 GitHub 仓库为准。