Api Fuzzing Bug Bounty
This is a comprehensive offensive security skill for finding vulnerabilities in REST, SOAP, and GraphQL APIs during authorized bug bounty work. It covers the full workflow from reconnaissance through Swagger docs and Kiterunner to exploiting IDORs, authentication bypasses, and injection flaws. The GraphQL section is especially detailed with introspection queries, batching attacks for rate limit bypass, and schema enumeration techniques. Includes specific payloads for SQL injection in JSON, XXE attacks, SSRF via PDF exports, and a solid collection of 403 bypass tricks. The tables and checklists make it easy to reference during actual assessments. Only use this on systems you're explicitly authorized to test.
- skills.sh installs
- 570
- GitHub stars
- 43.1K
- last updated
- Jul 14, 2026
Install
$ npx -y skills add sickn33/antigravity-awesome-skills --skill api-fuzzing-bug-bounty --agent claude-codeInstalls into .claude/skills of the current project.
Files
⚠️ AUTHORIZED USE ONLY This skill is for educational purposes or authorized security assessments only. You must have explicit, written permission from the system owner before using this tool. Misuse of this tool is illegal and strictly prohibited.
Mandatory confirmation gate Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:
- Ask the user to state the exact target URL, IP, account, or resource.
- Ask the user to confirm written authorization and the permitted scope.
- Show the exact command(s) and explain their expected effect.
- Wait for explicit confirmation in the current conversation.
Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.
API Fuzzing for Bug Bounty
Purpose
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/sickn33/antigravity-awesome-skills
- Categories
- Backend & APIs, Debugging
- First seen
- Jun 3, 2026
More from sickn33/antigravity-awesome-skills
All 708- Web Artifacts Builder566
- Ui Visual Validator565
- Context Optimization561
- Codex Review560
- Memory Systems559
- Email Sequence557
- Subagent Driven Development557
- Cpp Pro556
- Frontend Slides553
- Customer Support547
- Cc Skill Continuous Learning544
- Code Review Excellence543
- Skill Seekers543
- Trigger Dev539
- Avalonia Viewmodels Zafiro538
- Network Engineer536
- Onboarding Cro535
- Programmatic Seo535
- Using Git Worktrees535
- Obsidian Clipper Template Creator534
- Verification Before Completion534
- Form Cro530
- Avalonia Zafiro Development529
- Documentation Generation Doc Generate528
Recommended
More Backend & APIs
auth0-fastify-apiauth0/agent-skillsUse when protecting Fastify API endpoints with JWT Bearer token validation or scope checks. Integrates @auth0/auth0-fastify-api for stateless APIs receiving acc562skills.sh installs
grpc-service-developmentaj-geddes/useful-ai-promptsBuild high-performance gRPC services with Protocol Buffers, bidirectional streaming, and microservice communication. Use when building gRPC servers, defining se532skills.sh installs
supabase-helpyoanbernabeu/supabase-pentest-skillsQuick reference for all Supabase security audit skills with usage examples and command overview.525skills.sh installs
supabase-extract-service-keyyoanbernabeu/supabase-pentest-skillsCRITICAL - Detect if the Supabase service_role key is leaked in client-side code. This is a P0 severity issue.500skills.sh installsdatabase-performance-debuggingaj-geddes/useful-ai-promptsDebug database performance issues through query analysis, index optimization, and execution plan review. Identify and fix slow queries.499skills.sh installs