skills.rest
AKasem1
AKasem1COMMUNITY
Explore all skills by this author →
WebsiteGitHub

web2-vuln-classes

Map observed web behaviors to Web2 vulnerability classes and generate validation-focused hunting plans.

Updated Aug 23, 2026
Search Tags:#web security#bug bounty#idor#mfa bypass#vulnerability triage#ssrf bypass#sso attacks
One-click install
npx skills add https://github.com/AKasem1/claude-bug-bounty --skill web2-vuln-classes-akasem1
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: web2-vuln-classes
Source: https://github.com/AKasem1/claude-bug-bounty/tree/main/skills/web2-vuln-classes
Command: npx skills add https://github.com/AKasem1/claude-bug-bounty --skill web2-vuln-classes-akasem1

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It solves the challenge of quickly understanding which Web2 vulnerability class matches an observed behavior and how to validate it for reporting and payout readiness.

Core Features & Use Cases

  • Bug class reference for real hunting: Covers 20 Web2 vulnerability domains including IDOR, broken auth/access control, XSS, SSRF (with 11 IP bypass techniques), SQLi, business logic flaws, race conditions, OAuth/OIDC, file upload (10 bypass techniques), GraphQL, LLM/AI agentic risks (OWASP ASI 2026 ASI01–ASI10), API misconfiguration, ATO taxonomy, SSTI, subdomain takeover, cloud/infra misconfigs, HTTP request smuggling, cache poisoning/deception, MFA bypass (7 patterns), and SAML/SSO attacks (XSW, comment injection, signature stripping).
  • Root-cause + detection patterns + bypass tables: Provides testing checklists, common variants, and chaining opportunities to help you move from suspicion to evidence.
  • Exploit/validation playbooks: Includes targeted payload ideas, impact escalation logic, and “triage rules” to determine when findings are informational vs bounty-worthy.

Quick Start

Use the web2-vuln-classes skill when you suspect an IDOR, upload bypass, SSRF, or ATO path and need a structured plan to test, escalate, and document it for a professional bug report.

Frequently Asked Questions about web2-vuln-classes

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify the correct Web2 vulnerability class from an observed behavior?▼

To identify the correct Web2 vulnerability class, map the observed web application behavior to known detection patterns across 20 domains like IDOR, SSRF, and XSS, then generate a validation-focused hunting plan to confirm the root cause.

What is the best way to triage and escalate SSRF bypass techniques for bug bounty reports?▼

The best way to triage SSRF bypass techniques is to apply 11 documented IP bypass methods, use provided payload guidance, and follow impact escalation logic to determine if the finding is bounty-worthy or merely informational.

How do I validate MFA bypass and SSO attack patterns like XSW or signature stripping?▼

To validate MFA bypass and SSO attacks, apply the 7 MFA bypass patterns and SSO techniques like XSW, comment injection, and signature stripping, using targeted exploit playbooks to gather evidence and prioritize payout-ready reports.

Does this cover API, GraphQL, and AI-enabled LLM agentic security risks?▼

Yes, it covers API misconfigurations, GraphQL vulnerabilities, and LLM/AI agentic risks mapped to OWASP ASI 2026 ASI01–ASI10, providing testing checklists and chaining opportunities for these modern web surfaces.

When should I use file upload bypass techniques during web vulnerability triage?▼

You should use file upload bypass techniques when you suspect restricted file upload mechanisms, applying the 10 documented bypass methods to validate the flaw and assess its impact for professional bug bounty reporting.

Related Skills

Explore More Education & Research Skills→
dreadnodedreadnode
11

vuln-kb

Map security testing signals to CWE vulnerability references and test strategies.

Official
Intermediate
jinyimeng01jinyimeng01
54

report-agent

Generate HackerOne-format vulnerability reports from validated security findings.

Community
Advanced
vitoropereiravitoropereira

Cross-Site Scripting and HTML Injection Testing

Detect stored, reflected, and DOM-based XSS and HTML injection vulnerabilities in web applications.

Community
Advanced
jinyimeng01jinyimeng01
54

dependency-cve

Fingerprint application frameworks and library versions to identify vulnerable dependencies.

Community
Intermediate