skills.rest
bpnrockstar
bpnrockstarCOMMUNITY
Explore all skills by this author →
GitHub

hunt-grpc

Identifies and exploits gRPC vulnerabilities including server reflection and missing authentication.

Updated Jul 1, 2026
Search Tags:#security#exploitation#network#gRPC#vulnerability scanning
One-click install
npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill hunt-grpc-bpnrockstar
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-grpc
Source: https://github.com/bpnrockstar/UnifiedBugHunter/tree/main/skills/hunt-grpc
Command: npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill hunt-grpc-bpnrockstar

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of identifying and exploiting gRPC vulnerabilities, such as server reflection, missing authentication, and plaintext gRPC over HTTP/2, saving time and reducing manual errors in security assessments.

Core Features & Use Cases

  • gRPC Vulnerability Scanning: Identifies common gRPC vulnerabilities like server reflection, missing authentication, and plaintext gRPC.
  • Service Enumeration: Enumerates all services and methods using gRPC reflection.
  • Method Testing: Tests authentication requirements and performs various exploit attempts.
  • Proto File and Schema Discovery: Discovers and analyzes protobuf files and schemas.
  • Transcoding Attacks: Identifies and tests gRPC-Web and grpc-gateway transcoding vulnerabilities.
  • HTTP/2 Rapid Reset DoS: Checks for and tests HTTP/2 Rapid Reset DoS (CVE-2023-44487) vulnerabilities.
  • Use Case: Use this Skill to automatically scan a gRPC service for vulnerabilities, perform exploitation, and generate a report.

Quick Start

Use the hunt-grpc skill to scan the gRPC service running on the target server 'example.com'.

Frequently Asked Questions about hunt-grpc

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan a gRPC service for vulnerabilities like server reflection and missing authentication?▼

gRPC vulnerability scanning identifies security issues like server reflection, missing authentication, and plaintext gRPC over HTTP/2. It automates service enumeration, method testing, and protobuf schema discovery to reduce manual errors during security assessments.

What is the best way to discover protobuf files and schemas during a gRPC security audit?▼

The best way to discover protobuf files and schemas is by using gRPC reflection. This technique enumerates all available services and methods, allowing you to extract and analyze proto schemas to identify potential security weaknesses.

Can I test for HTTP/2 Rapid Reset DoS vulnerabilities in my gRPC application?▼

Yes, you can test for HTTP/2 Rapid Reset DoS vulnerabilities, specifically CVE-2023-44487, in gRPC applications. Automated scanning checks for this protocol-level flaw to determine if your service is susceptible to denial of service attacks.

How do gRPC-Web and grpc-gateway transcoding attacks work?▼

gRPC-Web and grpc-gateway transcoding attacks exploit vulnerabilities introduced when translating HTTP/1 requests to gRPC over HTTP/2. Testing these vectors identifies misconfigurations in the transcoding layer that could bypass authentication or expose internal methods.

Does gRPC vulnerability scanning require specific tools or libraries to run?▼

Yes, gRPC vulnerability scanning requires various tools and libraries for scanning, exploitation, and reporting. Your environment must support these dependencies to automate service enumeration, method testing, and schema discovery effectively.

Related Skills

Explore More Software Engineering Skills→
uphiagouphiago
1.1k

cms-detection

Identify CMS, frameworks, and server software of live web hosts.

Community
Intermediate
igbuendigbuend
8

sarif-issue-reporter

Analyze SARIF 2.1.0 files to generate vulnerability reports with CVSS scoring.

Community
Advanced
zebbernzebbern
4.5k

Pentest Commands

Provide command references for Nmap, Metasploit, Nikto, SQLMap, Hydra, and John the Ripper.

Community
Advanced
NickCrewNickCrew
29

owasp-top-10

Identify OWASP Top 10 security vulnerabilities in web applications.

Community
Advanced