Detect Next.js 13/15 vulnerabilities including Server Actions auth bypass and Image Optimization SSRF.
npx skills add https://github.com/uphiago/recon-skills --skill hunt-nextjs
Please help me install this Agent Skill. Skill: hunt-nextjs Source: https://github.com/uphiago/recon-skills/tree/main/redteam/hunt-nextjs Command: npx skills add https://github.com/uphiago/recon-skills --skill hunt-nextjs
This Skill solves the problem of identifying hard-to-detect, framework-specific vulnerabilities in Next.js 13/15 and React SSR applications that generic web scanners miss, reducing the risk of missing critical flaws like auth bypasses, SSRF, and data leakage during authorized security assessments.
Use the hunt-nextjs skill to scan a target Next.js application for Server Actions auth bypass, Image SSRF, and Middleware bypass vulnerabilities, then validate findings with out-of-band callbacks to confirm exploitability.
High-intent search queries and answers about installing and using this skill.
Next.js middleware path bypass occurs when static asset paths inadvertently skip authentication checks. You can hunt for this vulnerability by fingerprinting Next.js-specific endpoints and testing middleware routing against disclosed framework advisories.
Next.js Image Optimization SSRF is a high-severity flaw where the /_next/image endpoint is manipulated to access internal resources. You detect it by targeting this endpoint to achieve cloud metadata exfiltration during authorized red team engagements.
Yes, you can test for ISR cache poisoning on Next.js 13 and 15. The skill specifically identifies cache poisoning flaws by applying endpoint fingerprinting techniques and official framework advisories to validate critical data leakage impacts.
The best way to hunt for RSC payload leakage in React SSR frameworks is to map targeted attack surfaces like __NEXT_DATA__ endpoints. This process uncovers sensitive user data exfiltration risks specific to Next.js server-side rendered applications.
This skill detects only Next.js specific flaws rather than generic web vulnerabilities. It identifies framework-specific weaknesses like debug endpoint exposure and RSC payload leakage that generic web scanners typically miss during penetration tests.
RifteoBuild a structured penetration testing engagement brief with scope and rules of engagement.
bpnrockstarDetect SSRF, auth bypass, and data leakage in Next.js applications.
jokken79Intercept, modify, and analyze HTTP traffic to identify web application vulnerabilities.
4lermanAudit web applications, APIs, and infrastructure for security vulnerabilities.
