hunt-auth-bypass

SkillSecurity

Lets your agent hunt for authentication bypass vulnerabilities using techniques from real bug bounty reports.

Available today. Use it from your connected AI after setup.

Connect ahel once, and every AI you use reads what you have installed.

Then ask your AI: use the hunt-auth-bypass skill

About this capability

Hunting skill for auth bypass vulnerabilities. Built from 12 public bug bounty reports across SAML XSW / parser-differential (GitHub Enterprise CVE-2025-25291/25292), SAML signature stripping (Uber, Rocket.Chat, samlify CVE-2025-47949), SAML domain enforcement bypass via control characters (HackerOn

Signals

GitHub stars
4k
Forks
668
Last commit
Sep 2026
Advanced
Catalog kind
skill
Gateway key
hunt-auth-bypass
Source
github.com/elementalsouls/claude-bughunter