Identifies and validates privilege escalation, session persistence, and authentication logic flaws.
npx skills add https://github.com/pdparchitect/rook --skill hunt-misc-pdparchitect
Please help me install this Agent Skill. Skill: hunt-misc Source: https://github.com/pdparchitect/rook/tree/main/skills/hunt-misc Command: npx skills add https://github.com/pdparchitect/rook --skill hunt-misc-pdparchitect
This skill addresses the difficulty of identifying complex, non-obvious security vulnerabilities like privilege escalation, session persistence, and logic flaws that automated scanners frequently miss.
Use the hunt-misc skill to audit the current repository for privilege escalation and authentication logic flaws.
High-intent search queries and answers about installing and using this skill.
You can detect authentication logic flaws by systematically analyzing role boundaries, invitation flows, and internal API infrastructures. This approach validates complex session persistence and SAML signature bypass issues that automated scanners frequently miss.
Constructing multi-step exploit chains involves combining security primitives like soft-delete failures and SAML signature bypasses. This chain composition reveals complex vulnerabilities across identity providers and internal APIs during systematic security audits.
Automated security scanners frequently miss privilege escalation and authentication logic flaws because they lack systematic analysis of role boundaries and invitation flows. A structured 12-step hunting approach is required to produce actionable security reports.
A security audit for complex vulnerabilities produces actionable security reports detailing identified privilege escalation, session persistence, and authentication logic flaws. It validates findings across multi-tenant SaaS platforms and internal API infrastructures.
jcastillotxAutomate API fuzzing across REST, GraphQL, and SOAP endpoints.
zebbernEnumerate Windows privileges and misconfigurations to identify privilege escalation vectors.
cybersecwomanDetect SAML vulnerabilities including XML Signature Wrapping and NameID manipulation.
frogguguguguExecute SCA, SAST, DAST, and secret detection scans to report vulnerabilities.
