hunt-dispatch

仓库创建 2026年5月5日最近提交 4 天前SkillHot 收录 20 天前

▸ 精选理由

统一调度技能集，简化 redteam/wapt 模式切换。

▸ 风险提示

可能触发目标指纹扫描，避免未授权测试

这个 Skill 做什么

根据模式和指纹选择并加载合适的渗透/攻击技能集。

在 /hunt 流程里先给目标做指纹识别，再根据结果挑选并加载合适的攻击技能集合（比如 Red Team 或 WAPT，并区分 blackbox/greybox）。这是后台的技能集加载器，不是直接给用户用的，而是当 /hunt 确认模式后自动触发。特点是以指纹驱动平台路由，保证用对技能打对靶。

▸ 展开 SKILL.md 英文原文

Skill-set loader for /hunt orchestrator. Fingerprints the target, picks the right platform attack skills, and loads the Red Team or WAPT skill set. Use when /hunt has just received a mode answer (redteam or wapt + blackbox|greybox) and needs to load the appropriate skills and print the taxonomy. Not for direct user invocation.

自动化集成调度指纹技能加载通用

3.1k

Stars

480

Forks

仓库内 Skill

+245

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/elementalsouls/Claude-BugHunter/main/skills/hunt-dispatch/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/elementalsouls/Claude-BugHunter/main/skills/hunt-dispatch/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

# hunt-dispatch

skill-set loader for `/hunt`. one concept (which skills to load), one place.

invocation contract:

```
hunt-dispatch mode=redteam
hunt-dispatch mode=wapt box=blackbox
hunt-dispatch mode=wapt box=greybox
```

## step 1 — fingerprint (red team only)

fingerprint **every** live host, not just the apex. for multi-host / wildcard
targets the platform-skill routing must be driven by all banners, not one host's.

use `-L` (follow redirects) — identity-provider and CDN signals
(`login.microsoftonline.com`, `okta`, `auth0`, CDN banners) routinely sit
behind a 30x, so a no-redirect `curl -sI` silently misses those matches. pull
both headers and the landing-page HTML (`__NEXT_DATA__`,

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有