버그 탐사 및 외부 레드팀 작업을 위한 독립형 Claude 스킬 번들 · 83가지 스킬 · 15개의 슬래시 명령 · 681개의 공개 보고 패턴 (433개는 개별적으로 인용 및 감사 가능) 24개 핵심 취약점 클래스 · 엔터프라이즈 아이덴티티 + 인프라 공격 매트릭스 · 참여 폴더 스캐폴딩 · Burp MCP 통합 · 허가된 레드팀 및 버그 헌팅 참여, 그리고 공개 교육 플랫폼(DVWA, OWASP Juice Shop, Hacker101, testphp.vulnweb.com)에서 실전 검증됨.

Sachin Sharma가 제작함 — 버그 헌팅 및 생성형 AI 보안 연구.

후원

    

---

이게 뭐야?

claude-bughunter는 Claude Code 기술 시스템의 드롭인 스킬 번들입니다. 한 번 설치하면 Claude Code는 더 이상 챗봇이 아니고, 시니어 버그 사냥 연구원이나 레드팀 운영자처럼 행동하기 시작합니다: 기술, 체인 템플릿, VRT 매핑, 플랫폼 CVE 체인, 위생 체계를 알고 있으며 범위 내에 머무릅니다.

네 개의 층이 쌓입니다:

• Think — bb-methodology + redteam-mindset: 5단계 비선형 워크플로우, 비판적 사고 프레임워크, 그리고 레드팀 운영자 규율.

claude-bughunter

A self-contained Claude skill bundle for bug hunting and external red-team work · 83 skills · 15 slash commands · 681 disclosed-report patterns (433 now individually cited & auditable) across 24 core vulnerability classes · enterprise identity + infrastructure attack matrices · engagement-folder scaffolding · Burp MCP integration · battle-tested across authorized red-team and bug-hunting engagements, plus public training platforms (DVWA, OWASP Juice Shop, Hacker101, testphp.vulnweb.com).

Built by Sachin Sharma — Bug Hunting & GenAI Security Research.

SPONSORED BY

    

---

What is this?

claude-bughunter is a drop-in skill bundle for the Claude Code skills system. Install once and Claude Code stops being a chatbot and starts behaving like a senior bug-hunting researcher or red-team operator: it knows the techniques, the chain templates, the VRT mappings, the platform CVE chains, and the hygiene — and it stays in scope.

Four layers stack:

• Think — bb-methodology + redteam-mindset: the 5-phase non-linear workflow, critical-thinking framework, and red-team operator discipline.
• Hunt webapps — 58 hunt-* skills curated from 681 disclosed HackerOne reports: per-class detection patterns, payloads, bypass tables, and chain templates.
• Hit the perimeter — enterprise platform chains (M365/Entra, Okta, vCenter, SSL-VPN appliances, SharePoint, cloud IAM): current 2024–2026 CVE chains + post-credential escalation.
• Ship it — triage-validation + reporting + evidence-hygiene: the 7-Question Gate, VRT-aware severity, OOS rebuttals, PII redaction, and red-team deliverables.

All triggered automatically by topic — describe what you’re testing in plain English and the relevant skill loads. No invocation by name.

---

Quickstart

Option A — install as a Claude Code plugin (recommended). From inside Claude Code:

/plugin marketplace add elementalsouls/Claude-BugHunter
/plugin install claude-bughunter@elementalsouls

All 83 skills + 15 commands load namespaced under claude-bughunter: and update when you bump the plugin version — no files copied into ~/.claude/.

Option B — copy install (no plugin system / pin to a clone):