Src Hunter
- 591 repo stars
- Updated May 24, 2026
- MyuriKanao/src-hunter-skill
A bug-bounty and pentesting playbook plugin: 19 attack-class playbooks, 305 structured payloads, 263 WAF/EDR bypass variants, and thousands of real HackerOne/WooYun case references.
About
src-hunter is a Claude Code security plugin for real-world SRC and bug-bounty vulnerability hunting. It packs 19 attack-class playbooks, 305 structured payloads, 263 WAF/EDR bypass variants, thousands of real HackerOne cases, WooYun historical statistics, and a component-fingerprint database, with a lean SKILL.md that routes into a progressively split mega-playbook. A solo builder or bug-bounty hunter reaches for it to run structured web-app vulnerability testing and WAF-bypass workflows from the agent.
- 19 attack-class playbooks
- 305 structured payloads
- 263 WAF/EDR bypass variants
- 2887 HackerOne + 88k WooYun case references
Src Hunter by the numbers
- Data as of Jul 28, 2026 (Skillselion catalog sync)
/plugin marketplace add MyuriKanao/src-hunter-skillAdd your badge
Show developers this marketplace is listed on Skillselion. Paste this into your README.
| repo stars | ★ 591 |
|---|---|
| Last updated | May 24, 2026 |
| Repository | MyuriKanao/src-hunter-skill ↗ |
What it does
A bug-bounty and pentesting playbook plugin: 19 attack-class playbooks, 305 structured payloads, 263 WAF/EDR bypass variants, and thousands of real HackerOne/WooYun case references.
Who is it for?
Bug-bounty hunters and pentesters running structured web-app attacks
Skip if: Teams needing defensive-only tooling or non-security work
What you get
- vulnerability findings
- exploit payloads
Plugins in this marketplace
1 plugin - install individually after you add the marketplace.
