Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →elementalsouls/hunt-oauth
Hunting skill for oauth vulnerabilities. Built from 19 public bug bounty reports.
Passed 21 of 25 test cases with the skill, and 18 of 25 without it.
3 fixed18 passed either way4 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 3 test cases the skill fixed. Same model, same prompt, with and without the skill.
When an application allows account creation without immediate email verification, what API flow flaw permits skipping the verification step using OAuth?
| Checked | Without skill | With skill |
|---|---|---|
| Explains calling the token exchange endpoint directly with unverified account credentials | Missed | Passed |
The instructions your model reads when the skill loads.
OAuth vulnerabilities are among the highest-value bug classes in web security because they directly enable account takeover, session theft, and authentication bypass — the trifecta that programs pay most for.
Highest-value targets:
Asset types that pay most:
/oauth/authorize, /connect/authorize)/oauth/token)push_notification_webview, custom scheme URIs)/auth/callback, /oauth/callback)Typical payouts: $500–$20,000+ depending on program; account takeover findings often hit max bounty.
/oauth/authorize
/oauth/token
/connect/authorize
/auth/callback
/oauth/callback
/login?redirect_uri=
/signin?next=
/auth?return_to=
/oauth/redirect
/push_notification_webview
Location: https://accounts.example.com/oauth/...
test cases passed, vs 18 / 25 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.