src-hunter
Bug-bounty/SRC vulnerability-hunting workflow: five-phase methodology (intake, recon, enumeration, hunt, report) with attack playbooks for SQLi, XSS, RCE, SSRF, IDOR, CSRF, path traversal, and file upload.
⚠️ AUTHORIZED USE ONLY
This skill is for educational purposes or authorized security assessments only.
You must have explicit, written permission from the system owner before using this tool.
Misuse of this tool is illegal and strictly prohibited.
Mandatory confirmation gate
Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:
1. Ask the user to state the exact target URL, IP, account, or resource.
2. Ask the user to confirm written authorization and the permitted scope.
3. Show the exact command(s) and explain their expected effect.
4. Wait for explicit confirmation in the current conversation.
Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
When to Use
- Hunting vulnerabilities in bug-bounty programs within program policy.
- Following a disciplined methodology instead of ad-hoc testing.
何时使用本 skill
关键词命中：
- "src 挖洞" / "src 漏洞" / "src 测试" / "Security Response Center"
- "bug bounty" / "漏洞赏金" / "众测"
- "hackerone" / "h1" / "bugcrowd" / "intigriti" / "yeswehack"
- "如何挖 / 怎么测 / 怎么打 + 某目标 / 某接口 / 某参数"
- "WAF 绕过" / "绕过 WAF" / "WAF bypass"
- "任意账号 / 任意修改 / 任意删除 / 任意操作" 类越权
- "密码重置" / "找回密码" 类逻辑
- "未授权访问" / "默认凭据" / "Actuator" / "Spring 暴露" / "Redis 未授权"
- 用户给一个 URL 或 AP
Subscribers only
The full skill, its 86 bundled files and every download is included with every paid Complete AI plan.
Details
| Source | zhaoxuya520/reverse-skill |
|---|---|
| License | MIT |
| Risk label | offensive ("critical" means the skill may run commands or touch files — read before use) |
| Files | SKILL.md, references/README.en.md, references/README.md, references/dictionaries/00-index.md, references/dictionaries/chinese-srcfingerprints.md, references/dictionaries/default-credentials-cn.md, references/industry/00-index.md, references/industry/banking-finance.md, references/industry/telecom-isp.md, references/methodology/00-index.md, references/methodology/01-attack-priority.md, references/methodology/02-bypass-toolkit.md, references/methodology/03-evidence-discipline.md, references/methodology/04-control-gap-hunting.md, references/methodology/05-srctimebox-priority.md, references/payloader/by-category/intranet/adcs攻击.md, references/payloader/by-category/intranet/exchange攻击.md, references/payloader/by-category/intranet/sharepoint攻击.md, references/payloader/by-category/intranet/信息收集.md, references/payloader/by-category/intranet/免杀与规避.md, references/payloader/by-category/intranet/凭证窃取.md, references/payloader/by-category/intranet/域渗透攻击.md, references/payloader/by-category/intranet/权限提升.md, references/payloader/by-category/intranet/权限维持.md, references/payloader/by-category/intranet/横向移动.md, references/payloader/by-category/intranet/隧道代理.md, references/payloader/by-category/web/ai安全.md, references/payloader/by-category/web/api安全.md, references/payloader/by-category/web/csrf跨站请求伪造.md, references/payloader/by-category/web/jwt安全.md, references/payloader/by-category/web/lfi-rfi文件包含.md, references/payloader/by-category/web/rce远程代码执行.md, references/payloader/by-category/web/sql-nosql注入.md, references/payloader/by-category/web/ssrf服务端请求伪造.md, references/payloader/by-category/web/ssti模板注入.md, references/payloader/by-category/web/websocket安全.md, references/payloader/by-category/web/xss跨站脚本.md, references/payloader/by-category/web/xxe实体注入.md, references/payloader/by-category/web/业务逻辑漏洞.md, references/payloader/by-category/web/云安全漏洞.md, references/payloader/by-category/web/供应链攻击.md, references/payloader/by-category/web/原型链污染.md, references/payloader/by-category/web/开放重定向.md, references/payloader/by-category/web/文件漏洞.md, references/payloader/by-category/web/框架漏洞.md, references/payloader/by-category/web/点击劫持.md, references/payloader/by-category/web/缓存与cdn安全.md, references/payloader/by-category/web/认证漏洞.md, references/payloader/by-category/web/请求走私.md, references/payloader/index.md, references/payloader/tools/web渗透.md, references/payloader/tools/windows渗透.md, references/payloader/tools/信息收集.md, references/payloader/tools/内网渗透.md, references/payloader/tools/凭证窃取.md, references/payloader/tools/域渗透.md, references/payloader/tools/密码攻击.md, references/payloader/tools/权限提升.md, references/payloader/tools/漏洞利用.md, references/payloader/tools/系统命令.md, references/payloader/tools/红队工具.md, references/payloader/tools/编码解码.md, references/payloader/tools/隧道代理.md, references/payloader/waf-bypass.md, references/playbooks/00-index.md, references/playbooks/api-rest.md, references/playbooks/arbitrary-x-authz.md, references/playbooks/dos.md, references/playbooks/file-upload.md, references/playbooks/graphql.md, references/playbooks/http-smuggling.md, references/playbooks/info-disclosure.md, references/playbooks/intranet-postexp.md, references/playbooks/llm-prompt-injection.md, references/playbooks/logic-flaws.md, references/playbooks/mobile.md, references/playbooks/oauth-saml-jwt.md, references/playbooks/path-traversal.md, references/playbooks/race-conditions.md, references/playbooks/rce.md, references/playbooks/sqli.md, references/playbooks/ssrf-cache-host.md, references/playbooks/unauth-access.md, references/playbooks/xss.md, references/templates/report-submission.md, references/tools/mcp-jshook.md |
| Added | 2026-08-25 |