feat: add 8 new hunt-* skills (LLM injection, JWT confusion, GraphQL, OAuth/OIDC, cloud SSRF, WebSocket, supply chain, race conditions)#30
Open
sseshachala wants to merge 1 commit into
Conversation
…urfaces New skills: - hunt-llm-injection: prompt injection, indirect injection, MCP tool hijacking, exfil via markdown - hunt-jwt-confusion: RS256→HS256 confusion, none bypass, kid injection, jwks_uri spoofing - hunt-graphql: IDOR, batching bypass, SQL injection in args, SSRF via resolvers, subscriptions - hunt-oauth-oidc: redirect_uri bypass, CSRF, PKCE downgrade, dynamic client registration - hunt-ssrf-cloud: AWS IMDSv1/v2, GCP metadata, Azure IMDS, K8s SA tokens, IAM exfil - hunt-websocket: CSWSH, auth bypass on upgrade, WS message injection, IDOR on channels - hunt-supply-chain: dependency confusion, GH Actions workflow injection, CDN SRI gaps - hunt-race-conditions: double spend, coupon reuse, OTP bypass, state machine attacks Each skill follows the standard format: frontmatter ≤1024 chars, body ≤500 lines, Crown Jewel Targets → Attack Surface Signals → Methodology → Automation → Chain Table → Validation. Addresses issue elementalsouls#14.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds 8 new hunt skills covering modern attack surfaces. Motivated by issue #14.
hunt-llm-injectionhunt-jwt-confusionhunt-graphqlhunt-oauth-oidchunt-ssrf-cloudhunt-websockethunt-supply-chainhunt-race-conditionsFormat compliance
Relationship to existing skills
hunt-ssrf-cloudcomplementshunt-ssrf(cloud metadata paths + post-exploitation with harvested IAM creds)hunt-oauth-oidccomplementshunt-oauth(adds PKCE downgrade, dynamic client registration, OIDC-specific attacks)hunt-race-conditionscomplementshunt-race-condition(adds HTTP/2 single-packet technique, state machine bypass, fintech double-spend)hunt-websocketadds CSWSH PoC HTML, Socket.IO-specific techniques, WS message injectionContext
These skills will be integrated into Conduct AI's Security Loop — an automated security testing pipeline. Guard policies will be contributed back to the repo as patterns emerge from real engagements.