Identify gRPC security vulnerabilities via reflection enumeration and authentication bypass testing.
npx skills add https://github.com/Skobyn/talon --skill hunt-grpc-skobyn
Please help me install this Agent Skill. Skill: hunt-grpc Source: https://github.com/Skobyn/talon/tree/main/skills/hunt-grpc Command: npx skills add https://github.com/Skobyn/talon --skill hunt-grpc-skobyn
This Skill uncovers gRPC vulnerabilities through detailed enumeration and exploitation guides, ensuring that critical security gaps in gRPC implementations are identified and mitigated.
Run the hunt-grpc skill to begin identifying vulnerabilities in a gRPC service at https://target-url.
High-intent search queries and answers about installing and using this skill.
gRPC service enumeration uses reflection to list and describe every service and method within a target gRPC server. This technique exposes internal endpoints and unauthorized services via introspection.
gRPC authentication bypass testing identifies missing authentication controls on internal services. It exposes vulnerabilities by attempting to access methods lacking proper auth verification, revealing critical security gaps.
Detect proto file leakage and unauthorized gRPC service exposure by leveraging reflection enumeration and server output inspection. This identifies leaked proto definitions and exposed services requiring mitigation.
Yes, grpcurl is required to perform gRPC security auditing and vulnerability detection. The assessment process relies on grpcurl for reflection enumeration and manual inspection of server outputs.
Yes, you can test gRPC authentication bypass without knowing proto definitions by leveraging reflection enumeration. This technique extracts service definitions directly from the target server at runtime.
EntroVyxIdentify and validate Kubernetes and Docker security misconfigurations.
flavien-iaAudit Next.js and T3 stack applications for security vulnerabilities across twelve categories.
cyberpunk042Identify and describe AICP network surfaces including port mappings and MCP transport.
AcczdyAutomates API security testing across REST, GraphQL, and gRPC endpoints for OWASP Top 10 vulnerabilities.
