hunt-schema-enumeration
CommunityUncover hidden API schemas via error message hints
System Documentation
What problem does it solve?
This Skill solves the critical gap of unknown API structure during black-box penetration testing, where hidden database tables, fields, and endpoints are not visible through standard reconnaissance but are frequently leaked via uncaught validation and error responses from target servers.
Core Features & Use Cases
- Multi-framework schema enumeration: Supports PostgREST (Supabase), Zod, FastAPI, GraphQL, and generic REST APIs to extract schema hints from framework-specific error messages.
- Context-aware fuzzing: Generates targeted wordlists from JS bundle analysis, domain-specific patterns, and common naming conventions to efficiently discover hidden resources.
- Use Case: When testing a fintech SaaS application's REST API, this Skill can map the entire user, billing, and transaction schema in minutes by analyzing error responses to fuzzed requests, eliminating hours of manual guesswork.
Quick Start
Use the hunt-schema-enumeration skill to map the full database schema of the target Supabase API at https://target.supabase.co using the provided anon key, then identify all hidden tables and fields exposed via error hints.
Dependency Matrix
Required Modules
None requiredComponents
Standard package💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: hunt-schema-enumeration Download link: https://github.com/uphiago/recon-skills/archive/main.zip#hunt-schema-enumeration Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 536,000+ vetted skills library on demand.