Business Logic Hunting is a Quality skill for Claude Code, published by H-mmer in pentest-agents.
Business Logic Hunting finds logic flaws in payment, auth, and subscription flows such as price manipulation, race conditions, MFA bypass, and trial abuse. Use it when testing for workflow skipping or client-side state trust issues.
Business Logic Hunting is cataloged under Quality on DirSkills. Business Logic Hunting comes from a repository tagged agents, bug-bounty, bugcrowd, claude-code and hackerone.
Documentation
Business-logic flaws are the highest-creativity-required class in bug bounty — most don't get CVEs because they're application-specific, but they're often the highest-paying single-finding class on commercial SaaS because they map directly to financial loss. The 24-month meta has crystallized around eight asset types. All CVEs below are NVD-verified.
This is the opening of the README. Read the full README on GitHub.
Business Logic Hunting is one of 25 skills that DirSkills catalogs from H-mmer/pentest-agents, the repository it ships in. Its siblings there include Analyze, Autopilot and Brain. Each one is a separate skill with its own page in this directory, installs the same way Business Logic Hunting does, and is maintained by H-mmer in that same repository. The rest of the collection is listed on the H-mmer/pentest-agents page.
Business Logic Hunting ranks #952 by stars among the 1354 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Business Logic Hunting against them. Open each page to compare what they document and how they install.
Business Logic Hunting is one of 25 skills cataloged on DirSkills from H-mmer/pentest-agents.
Business Logic Hunting is one of 1354 Quality skills cataloged on DirSkills, ranked #952 by stars among them.