🐛
QualityPython

Web2 Vulnerability Classes

by shuvonsec

Web2 Vulnerability Classes is a Quality skill for Claude Code, published by shuvonsec in claude-bug-bounty.

4.2K stars767 forkson shuvonsec/claude-bug-bountyAdded 2026/08/16+1% in starsRepository updated 2026/08/10
View source on GitHubDownload repo ZIP
ai-securitybug-bountybugcrowdclaude-aiclaude-codectiethical-hackinghackeronehackinghacking-toolpenetration-testingreconvulnerability-scanner
Install in seconds
Install Web2 Vulnerability Classes
Copy Web2 Vulnerability Classes into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.
terminal
npx degit https://github.com/shuvonsec/claude-bug-bounty/tree/main/skills/web2-vuln-classes ~/.claude/skills/web2-vuln-classes

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/shuvonsec/claude-bug-bounty.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file
skills/web2-vuln-classes/SKILL.md in shuvonsec/claude-bug-bounty
Installs to
~/.claude/skills/web2-vuln-classes
Collection
One of 16 skills cataloged from this repository
Category
Quality — 1354 skills

What Web2 Vulnerability Classes does

Web2 Vulnerability Classes provides a complete reference for 26 web2 bug classes with root causes, detection patterns, bypass tables, exploit techniques, and real paid examples. Use it when hunting a specific vulnerability class or studying what makes bugs pay.

Web2 Vulnerability Classes is cataloged under Quality on DirSkills. Web2 Vulnerability Classes comes from a repository tagged ai-security, bug-bounty, bugcrowd, claude-ai and claude-code.

Commands Web2 Vulnerability Classes provides

Slash commands named in this skill’s SKILL.md, listed in the order they first appear.

  • /graphql
  • /https
  • /confirm

Frequently asked about Web2 Vulnerability Classes

  • What else does shuvonsec publish alongside Web2 Vulnerability Classes?

    Web2 Vulnerability Classes is one of 16 skills that DirSkills catalogs from shuvonsec/claude-bug-bounty, the repository it ships in. Its siblings there include Argus, Bug Bounty and Bug Bounty. Each one is a separate skill with its own page in this directory, installs the same way Web2 Vulnerability Classes does, and is maintained by shuvonsec in that same repository. The rest of the collection is listed on the shuvonsec/claude-bug-bounty page.

  • How does Web2 Vulnerability Classes compare to other Quality skills?

    Web2 Vulnerability Classes ranks #338 by stars among the 1354 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Web2 Vulnerability Classes against them. Open each page to compare what they document and how they install.

More from shuvonsec/claude-bug-bounty

Web2 Vulnerability Classes is one of 16 skills cataloged on DirSkills from shuvonsec/claude-bug-bounty.

See all 16 skills →
🔍
2w ago

Argus

Argus runs six automated scanners for web and LLM vulnerabilities: CORS misconfig, CRLF/host-header injection, NoSQL injection, JWT attacks, blind bug confirmation via OOB, and LLM red-teaming. Use it on JSON APIs, login endpoints, JWT auth, or any parameter that might reach the server.
Automation
4.2K767
🐞
2w ago

Bug Bounty

Bug Bounty guides a complete bug bounty workflow from reconnaissance and vulnerability hunting through validation and report writing, including LLM/AI security testing and A-to-B bug chaining. Use it for any bug bounty task, from starting a new target to writing the final submission.
Quality
4.2K767
🐞
2w ago

Bug Bounty

Bug Bounty provides a complete bug bounty workflow covering reconnaissance, vulnerability hunting, AI/LLM security testing, bug chaining, and report writing. Use it for starting new targets, hunting specific vuln classes, auditing source code, validating findings, or writing reports.
Quality
4.2K767
🎯
2w ago

Bug Bounty Methodology

Bug Bounty Methodology structures a hunting session around a five-phase workflow and a critical-thinking framework, so an agent can choose a goal, select techniques, and derive next actions. Use it at the start of a bug bounty session, when switching targets, or when unsure what to do next.
Quality
4.2K767
📝
2w ago

Bug Bounty Report Writing

Bug Bounty Report Writing provides templates, tone guidelines, CVSS scoring, and checklists for writing bug bounty reports for HackerOne, Bugcrowd, Intigriti, and Immunefi. Use it after validating a finding and before submitting.
Writing
4.2K767
🛡️
2w ago

CI/CD Security

CI/CD Security audits CI/CD pipelines for workflow injection, secret exfiltration, self-hosted runner poisoning, OIDC token theft, and supply chain attacks. Use it when a target has public repos or CI/CD infrastructure.
DevOps
4.2K767

More Quality skills

Web2 Vulnerability Classes is one of 1354 Quality skills cataloged on DirSkills, ranked #338 by stars among them.

Browse all Quality skills →
⏱️
3w ago

Benchmark

Benchmark measures performance baselines, detects regressions before and after PRs, and compares stack alternatives for pages, APIs, and builds.
Quality
239.8K36.4K
⏱️
3w ago

Benchmark Optimization Loop

Benchmark Optimization Loop turns vague performance goals into a bounded, measured optimization process. Use it when asked to make something faster, benchmark latency/throughput/cost, or choose the best implementation by repeated measured tests.
Quality
239.8K36.4K
🔌
3w ago

API Design Patterns

API Design Patterns provides conventions and best practices for designing consistent REST APIs. Use it when creating endpoints, reviewing contracts, handling pagination, error responses, status codes, filtering, or versioning.
Quality
239.8K36.4K