Credential Attack

Credential Attack is an Automation skill for Claude Code, published by shuvonsec in claude-bug-bounty.

4.2K stars767 forkson shuvonsec/claude-bug-bountyAdded 2026/08/16+1% in starsRepository updated 2026/08/10

ai-securitybug-bountybugcrowdclaude-aiclaude-codectiethical-hackinghackeronehackinghacking-toolpenetration-testingreconvulnerability-scanner

Install in seconds

Install Credential Attack

Copy Credential Attack into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/shuvonsec/claude-bug-bounty/tree/main/skills/credential-attack ~/.claude/skills/credential-attack

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/shuvonsec/claude-bug-bounty.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: skills/credential-attack/SKILL.md in shuvonsec/claude-bug-bounty
Installs to: ~/.claude/skills/credential-attack
Collection: One of 16 skills cataloged from this repository
Category: Automation — 1523 skills

What Credential Attack does

Credential Attack provides a password spray pipeline for bug bounty: wordlist generation, breach checks, employee OSINT, and login spraying (HTTP form, OAuth, O365, Okta). Use it when credential testing is in scope or to avoid rate-limit and lockout pitfalls.

Credential Attack is cataloged under Automation on DirSkills. Credential Attack comes from a repository tagged ai-security, bug-bounty, bugcrowd, claude-ai and claude-code.

Documentation

README

Excerpt

CREDENTIAL ATTACK PIPELINE

Real-world initial-access vector. Verizon DBIR consistently ranks Stolen Credentials in the top 3 incident types. Most BB hunters skip this because they only try rockyou.txt and get rate-limited.

Core principle: humans pick lazy passwords. {CompanyName}{Year}!, {ProductName}{Season}, {City}123. Harvesting company-specific vocabulary (product names, office cities, internal project codes) before spraying is what makes the hit-rate go from 0.01% to 1%+.

This skill covers WHEN to use credential attack, HOW to chain the 4 commands, and the legal/operational guardrails.

WHEN TO RUN CREDENTIAL ATTACK

Credential attack is a parallel branch to /hunt, not a replacement. Both come after /recon:

This is the opening of the README. Read the full README on GitHub.

Commands Credential Attack provides

Slash commands named in this skill’s SKILL.md, listed in the order they first appear.

/hunt
/recon
/validate
/report
/wordlist-gen
/spray
/breach-check
/osint-employees
/scope

Frequently asked about Credential Attack

What else does shuvonsec publish alongside Credential Attack?
Credential Attack is one of 16 skills that DirSkills catalogs from shuvonsec/claude-bug-bounty, the repository it ships in. Its siblings there include Argus, Bug Bounty and Bug Bounty. Each one is a separate skill with its own page in this directory, installs the same way Credential Attack does, and is maintained by shuvonsec in that same repository. The rest of the collection is listed on the shuvonsec/claude-bug-bounty page.
How does Credential Attack compare to other Automation skills?
Credential Attack ranks #313 by stars among the 1523 Automation skills in this catalog. The most-starred ones next to it are Autonomous Loops, Autonomous Agent Harness and Automation Audit Ops. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Credential Attack against them. Open each page to compare what they document and how they install.