API Fuzzing For Bug Bounty

davila7/claude-code-templates

This is a focused template for API security testing during bug bounty hunts. It covers fuzzing REST, SOAP, and GraphQL endpoints with techniques for finding authentication bypasses, IDOR vulnerabilities, and API-specific attack vectors. You'll need Burp Suite, wordlists like SecLists, and basic Python scripting skills. Originally from sickn33's antigravity collection and now maintained by davila7, it passed Gen Agent Trust Hub's audit but got warnings from Socket and failed Snyk's checks. If you're actively hunting for API bugs and want a structured approach to enumeration and exploitation, this gives you a solid starting framework rather than building attack patterns from scratch.

GitHub stars

30.2K

last updated

Aug 21, 2026

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language

Recommended

More Backend & APIs

1API Integration Specialistdavila7/claude-code-templatesExpert in integrating third-party APIs with proper authentication, error handling, rate limiting, and retry logic. Use when integrating REST APIs, GraphQL endpo0skills.sh installs

2firebase-data-connectfirebase/agent-skillsBuilds and deploys Firebase SQL Connect (aka Firebase Data Connect) backends with PostgreSQL securely. Use when designing schemas with tables and relations, wri0skills.sh installs

3supabase-expertgeorgekhananaev/claude-skills-vaultProduction-grade Supabase expertise for commercial applications. Covers database design, RLS policies, authentication (SSO/SAML, MFA, SSR), Edge Functions, Real0skills.sh installs

4api-generatinghuangjia2019/claude-code-engineeringGenerate API endpoint code and documentation from specifications. Use when the user wants to create new API endpoints, generate route handlers, scaffold REST AP0skills.sh installs

5Python Backend Architecture Reviewrknall/claude-skillsComprehensive design architecture review for Python backend applications. Use this skill when users ask you to review, analyze, or provide feedback on backend a0skills.sh installs

6xrk-authsunflowermm/XRK-AGT当你需要解释/排查 HTTP 或 WebSocket 的 401、127 回环例外、API Key 机制时使用；确保业务层不重复鉴权。0skills.sh installs