hunt-misc

Name: hunt-misc
Availability: InStock
Author: pdparchitect

Identifies and validates privilege escalation, session persistence, and authentication logic flaws.

13|2|Updated Jun 1, 2026

Search Tags:#authentication #reconnaissance #security audit #privilege escalation #bug hunting #vulnerability research

Ready to run

npx skills add https://github.com/pdparchitect/rook --skill hunt-misc-pdparchitect

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: hunt-misc
Source: https://github.com/pdparchitect/rook/tree/main/skills/hunt-misc
Command: npx skills add https://github.com/pdparchitect/rook --skill hunt-misc-pdparchitect

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the difficulty of identifying complex, non-obvious security vulnerabilities like privilege escalation, session persistence, and logic flaws that automated scanners frequently miss.

Core Features & Use Cases

Methodological Hunting: Provides a structured, 12-step approach to auditing role boundaries, invitation flows, and internal API surfaces.
Chain Composition: Enables the construction of multi-step exploit chains by combining primitives like soft-delete failures and SAML signature bypasses.
Use Case: Use this skill to audit a multi-tenant SaaS platform for privilege escalation by testing role-based access control boundaries and invitation verification logic.

Quick Start

Use the hunt-misc skill to audit the current repository for privilege escalation and authentication logic flaws.

Frequently Asked Questions about hunt-misc

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I find privilege escalation vulnerabilities in multi-tenant SaaS platforms?▼

You can detect authentication logic flaws by systematically analyzing role boundaries, invitation flows, and internal API infrastructures. This approach validates complex session persistence and SAML signature bypass issues that automated scanners frequently miss.

What is the best way to audit internal API surfaces for complex security vulnerabilities?▼

Constructing multi-step exploit chains involves combining security primitives like soft-delete failures and SAML signature bypasses. This chain composition reveals complex vulnerabilities across identity providers and internal APIs during systematic security audits.

Can I use this to test role boundaries and invitation flows for authentication logic flaws?▼

Automated security scanners frequently miss privilege escalation and authentication logic flaws because they lack systematic analysis of role boundaries and invitation flows. A structured 12-step hunting approach is required to produce actionable security reports.

When should I not rely on automated scanners for vulnerability research?▼

A security audit for complex vulnerabilities produces actionable security reports detailing identified privilege escalation, session persistence, and authentication logic flaws. It validates findings across multi-tenant SaaS platforms and internal API infrastructures.