Share Sign in

Claude Skills

Hunt Auth

Encod3d-Sec/TORCH

Auth bypass and ATO hunting - legacy protocol matrix (XMLRPC, SharePoint /_vti_bin/, EWS, Citrix, etc.), JWT manipulation, password reset poisoning, SAML auth bypass, session fixation. Wiki-first, FIND schema output.

★ 322 Synced 2 hours ago View SKILL.md

At a glance

Manual install Python Auth required Actively maintained
Install git clone --depth 1 https://github.com/Encod3d-Sec/TORCH cp -r TORCH/skills/hunt/hunt-auth ~/.claude/skills/hunt-auth
Can use Not declared by the author

Setup, runtime and requirements describe Encod3d-Sec/TORCH, the repo this skill ships in.

Also in Encod3d-Sec/TORCH

View the repo
Arsenal Data & Analytics

Wiki-first "what do I use" lookup - pick the automated TOOL (wiki/tools/), then the PAYLOAD/technique (wiki/payloads/ + wiki/cheatsheets/),...

Bb Workflow Marketing

Autonomous bug-bounty campaign driver. Runs a full programme end to end with no operator approvals - the deterministic driver (scripts/campa...

Campaign Health Marketing

Health check for the bb/pt/ctf workflow driver subsystem - verifies everything is in place so every machine runs the same. Checks vault-cont...

Chrome Devtools Browser

Bring up a REAL, visible, interactive chromium on the Kali VM that the operator logs into (Smart-ID / Mobile-ID / any manual auth or MFA/CAP...

Claude Md Improver

OFFLINE FALLBACK for the claude-md-management plugin - prefer that plugin when it is installed. Audit and improve CLAUDE.md files - scan for...

Coverage

Show per-asset vuln-class coverage gaps for the active engagement so nothing in scope is skipped. Use when asked "coverage", "what haven't w...

Ctf Box

Boot-to-root methodology for a full machine (THM/HTB/PG/CTF box, "get user.txt+root.txt", "root the box", "foothold to root"). Enforces basi...

Ctf Category

CTF challenge router - fingerprint a challenge (file type / prompt / artifacts) into its category (pwn, rev, crypto, forensics, stego, web,...

Ctf Workflow Marketing

Autonomous CTF / boot-to-root campaign driver. Runs a box end to end with no operator approvals - the deterministic driver (scripts/campaign...

Delegate

Autonomous sub-agent hand-off for a fiddly, fully-specified exploit-compile / escalation RUN - the main agent stays on strategy and the boar...

Disclosure

Drive responsible disclosure of a proven finding to a CVE. Package the report, find the vendor contact, report privately, coordinate a timel...

Evidence

Evidence hygiene before any FIND moves to Completed or enters a report. Cookie redaction, PII black-bar, HAR sanitization, screenshot metada...